Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot fixes #553

Merged
merged 5 commits into from
Jan 4, 2023
Merged

Dependabot fixes #553

merged 5 commits into from
Jan 4, 2023

Conversation

michaelbeale-IL
Copy link
Contributor

Issue Number: 551

Objective of pull request: fix dependabot alerts

Pull request checklist

Your PR fulfills the following requirements:

  • Issue created that explains the change and why it's needed
  • Tests are part of the PR (for bug fixes / features)
  • Docs reviewed and added / updated if needed (for bug fixes / features)
  • PR conforms to Coding Conventions
  • PR applys BSD 3-clause or LGPL2.1+ Licenses to all code files
  • Lint (flakeheaven lint src/lava tests/) and (bandit -r src/lava/.) pass locally
  • Build tests (pytest) passes locally

Pull request type

Please check your PR type:

  • Bugfix
  • Feature
  • Code style update (formatting, renaming)
  • Refactoring (no functional changes, no api changes)
  • Build related changes
  • Documentation changes
  • Other (please describe):

What is the current behavior?

What is the new behavior?

Does this introduce a breaking change?

  • Yes
  • No

Supplemental information

Updating bandit to version 1.7.4 to get the latest GitPython package to resolve Dependabot alert.
@bamsumit bamsumit linked an issue Jan 3, 2023 that may be closed by this pull request
4 tasks
@michaelbeale-IL michaelbeale-IL merged commit 88bf622 into main Jan 4, 2023
monkin77 pushed a commit to monkin77/thesis-lava that referenced this pull request Jul 12, 2024
* Update pyproject.toml

Updating bandit to version 1.7.4 to get the latest GitPython package to resolve Dependabot alert.

* updated poetry.lock

* fixed flake8/bandit conflict

Co-authored-by: Marcus G K Williams <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Dependabot Alert #7 - GitPython
3 participants