d566c2522b
Accepting request 1248080 from home:glaubitz:branches:devel:languages:python
Nico Krapp2025-02-24 12:05:39 +00:00
f94ebed296
Accepting request 1242593 from devel:languages:python
Ana Guerrero2025-02-03 20:44:52 +00:00
3ecbfb8629
- update to 1.8.2: * Clarify "getting started" docs (#963) * Remove lxml (B320 & B410) from blacklist (#1212) * Add Mercedes-Benz to sponsor list (#1210) * Remove more leftover OpenStack references (#1195) * Remove Sentry as a sponsor (#1198) * Add a JSON to seek funding from the FLOSS/fund (#1194) * Update project urls with added links (#1193) * Mark Python 3.13 as officially supported (#1192) * No need to check httpx client without timeout defined (#1177) * Add more insecure cryptography cipher algorithms (#1185) * Removal of Python 3.8 support (#1174) * Rename doc file to match proper bandit ID (#1183) * Replace setattr (#493) @tylerwince - cli tool, don't build with multiple python versions
Dirk Mueller2025-02-03 08:17:08 +00:00
8936a008c4
Accepting request 1223777 from devel:languages:python
Ana Guerrero2024-11-13 14:28:43 +00:00
5632ae1371
- Add missing BRs and establish Requires according to pyproject.toml.
Matej Cepl2024-11-12 17:05:24 +00:00
7e48daae07
- update to 1.7.5: * Added a bit more \project\_urls\ * Check for github action updates monthly * Improve handling nosec for multi-line strings * Improve detecting SQL injections in f-strings * Correct build status badge in README * Fix breaking build due to new tox * DOC: Add explanation on how to use pre-commit with config file * Add official Python 3.11 support * remove py2 exec example in docs * Typo fix * [docs] Mention \exclude\_dirs\ option available in TOML and YAML * Fix AttributeError on detect of tuple assign condition * Fix json and yaml formatters to respect num lines * Fixup some invalid pickle testing * Pass correct number of arguments to match the \%s\ placeholders. * Remove python 2 reference in docs * Fix filename of B202 in docs * weak\_cryptographic\_key assumes positional arg * Check for deprecated TLS 1.1 * Adding tarfile.extractall() plugin with examples * Fix issue #453 jinja2 template select\_autoescape when using jinja2.select\_autoescape * Fix a false positive condition yaml\_load * Add case for global exec * Docs for request without timeout has dead link * Blacklist pandas read\_pickle and add functional test for it
Dirk Mueller2023-07-24 20:24:10 +00:00
f7bc1ceb9d
- Remove not needed python-six dependency - Use autosetup instead of setup + patch - More specific sitelib package in %files
Daniel Garcia2022-10-27 11:20:23 +00:00
772cbdc3be
- Update to 1.7.0: * Remove blacklist call to input() (#662) @ericwb * Remove universal support on the wheel (#655) @ericwb * Give some tips on how to resolve B101 in the doc (#616) @xuhdev * Don't show progress information on --quiet (#641) @fniessink * Add skip configuration to assert_used (#633) @wilbertom * Drop Python2 build, test, and install (#615) @ericwb * [FIX] blacklist: fix typo in import_ftplib (#601) @Yenthe666 * Resolve 'NoneType' object has no attribute 'id'Traceback in django_mark_safe (#598) @ehooo * Fix typo for activating venv (#590) @bavedarnow * Bump pyyaml (#588) @dosisod * Fix colorama not being disabled after being used (#586) @adambenali * Cleanup some typos in recent contributor guide (#585) @ericwb * [DOC] Support python3 venv creation (#583) @look4regev * Add sha1 to the list of insecure hashes (#561) @ericwb * Fix docs for B610,B611,B703 (#555) @amacfie * Add a section explaining "nosec" (#554) @exhuma * Add official support of Python 3.8 (#547) @ericwb * Ignore common directories by default (#544) @ericwb * Add shelve to the pickle blacklists (#542) @auscompgeek * Remove obsolete "sudo" keyword. (#538) @jugmac00 * Update test requirements to latest versions (#535) @ericwb * Fix readme file on Extending Bandit on list things (#534) @Aurel10 * fix the documentation file README.rst (#533) @Aurel10 * Cleanup comments after #510 (#532) @florczakraf * Use SPDX license identifier instead of bulky headers (#530) @ericwb * fix B603 docstring (#524) @graingert * Add type checking to name node of hashlib_new (#516) @teeann * --exit-zero option (#510) @maciejstromich * Fix 3.8 errors (#509) @tylerwince * Add several ini options for .bandit file (#508) @vuolter * get_url returns different urls calling twice (bug #506) (#507) @ehooo * Replace setattr (#493) @tylerwince - Refresh remove-non-test-deps.patch
Steve Kowalik2021-03-09 06:57:46 +00:00
Ana Guerrero
Robert Schweikert
Markéta Machová
Dirk Mueller
Dominique Leuenberger
Nico Krapp
Matej Cepl
Daniel Garcia
Steve Kowalik
Tomáš Chvátal
Stephan Kulow