Sourced from bandit's releases.

1.8.6

What's Changed

• Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @​dependabot in PyCQA/bandit#1279
• Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @​dependabot in PyCQA/bandit#1278
• added hint to FreeBSD package in doc/source/integrations.rst by @​daniel-mohr in PyCQA/bandit#1282
• Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @​dependabot in PyCQA/bandit#1284
• Huggingface revision pinning by @​lukehinds in PyCQA/bandit#1281

New Contributors

• @​daniel-mohr made their first contribution in PyCQA/bandit#1282

Full Changelog: https://github.com/PyCQA/bandit/compare/1.8.5...1.8.6

1.8.5

What's Changed

• Fix the rendering of the CI/CD doc by @​ericwb in PyCQA/bandit#1274
• Fix for publish to PyPI failure by @​ericwb in PyCQA/bandit#1273

Full Changelog: https://github.com/PyCQA/bandit/compare/1.8.4...1.8.5

1.8.4

What's Changed

• Add more random functions to B311 check by @​aripollak in PyCQA/bandit#1235
• Metadata: rename classifier to classifiers by @​ericwb in PyCQA/bandit#1237
• Bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by @​dependabot in PyCQA/bandit#1239
• Bump docker/build-push-action from 6.13.0 to 6.14.0 by @​dependabot in PyCQA/bandit#1238
• Bump docker/build-push-action from 6.14.0 to 6.15.0 by @​dependabot in PyCQA/bandit#1240
• Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @​dependabot in PyCQA/bandit#1241
• Bump docker/login-action from 3.3.0 to 3.4.0 by @​dependabot in PyCQA/bandit#1245
• Bump bandit version in bug template by @​ericwb in PyCQA/bandit#1247
• Fix traceback from trojansource plugin by @​ericwb in PyCQA/bandit#1248
• Ensure the man page is built by @​ericwb in PyCQA/bandit#1257
• Update documentation to cover --severity-level and --confidence-level by @​bmos in PyCQA/bandit#1254
• Use license property in lieu of classifier by @​ericwb in PyCQA/bandit#1259
• Fix up some of the warnings when building docs by @​ericwb in PyCQA/bandit#1258
• Add a doc describing various integrations by @​ericwb in PyCQA/bandit#1253
• Use ubuntu latest for readthedocs build by @​ericwb in PyCQA/bandit#1260
• Bump docker/build-push-action from 6.15.0 to 6.16.0 by @​dependabot in PyCQA/bandit#1261
• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @​dependabot in PyCQA/bandit#1262
• Remove etc from list of temp paths by @​ericwb in PyCQA/bandit#1263
• Bump docker/build-push-action from 6.16.0 to 6.17.0 by @​dependabot in PyCQA/bandit#1265
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1266
• Bump docker/build-push-action from 6.17.0 to 6.18.0 by @​dependabot in PyCQA/bandit#1268
• add github-actions documentation by @​Killpit in PyCQA/bandit#1172

New Contributors

• @​aripollak made their first contribution in PyCQA/bandit#1235
• @​bmos made their first contribution in PyCQA/bandit#1254
• @​Killpit made their first contribution in PyCQA/bandit#1172

... (truncated)

• 2d0b675 Huggingface revision pinning (#1281)
• 4cd1337 Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#1284)
• ffed1bb added hint to FreeBSD package in doc/source/integrations.rst (#1282)
• 090ba0f Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#1278)
• 33c6789 Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#1279)
• 23d269a Fix for publish to PyPI failure (#1273)
• e3ff8b5 Fix the rendering of the CI/CD doc (#1274)
• 61d1667 add github-actions documentation (#1172)
• cea2b1c Bump docker/build-push-action from 6.17.0 to 6.18.0 (#1268)
• 2d577a6 [pre-commit.ci] pre-commit autoupdate (#1266)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)