Bump PyCQA/bandit-action from 1.0.0 to 1.0.1
Open
Number: #801
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Contributor
Comments: 3
Association: Contributor
Comments: 3
Created:
August 05, 2025 at 04:51 AM UTC
(5 months ago)
(5 months ago)
Updated:
August 08, 2025 at 08:00 PM UTC
(5 months ago)
(5 months ago)
Labels:
dependencies github_actions
dependencies github_actions
Description:
Bumps PyCQA/bandit-action from 1.0.0 to 1.0.1.
Release notes
Sourced from PyCQA/bandit-action's releases.
v1.0.1
What's Changed
- Update README with usage instructions by
@ericwbin PyCQA/bandit-action#11- Bump Python version to 3.9 by
@ericwbin PyCQA/bandit-action#12- Pip install sarif and toml extras by
@ericwbin PyCQA/bandit-action#17Full Changelog: https://github.com/PyCQA/bandit-action/compare/v1...v1.0.1
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
0
0
Files Changed:
0
0
Additions:
+0
+0
Deletions:
-0
-0
Package Dependencies
Technical Details
| ID: | 4608821 |
| UUID: | 3291552494 |
| Node ID: | PR_kwDOFrg__86iHbfr |
| Host: | GitHub |
| Repository: | NVIDIA/cuda-python |