From f98a9bed9ff5d100d0919e04d6808380c64efe79 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Feb 2022 10:13:51 +0100 Subject: [PATCH] build(deps-dev): bump bandit from 1.7.2 to 1.7.3 (#2403) * build(deps-dev): bump bandit from 1.7.2 to 1.7.3 Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.2 to 1.7.3. - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](https://github.com/PyCQA/bandit/compare/1.7.2...1.7.3) --- updated-dependencies: - dependency-name: bandit dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] * sigh Signed-off-by: Jens Langhammer Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jens Langhammer --- .../sources/oauth/migrations/0004_auto_20210417_1900.py | 4 ++-- poetry.lock | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/authentik/sources/oauth/migrations/0004_auto_20210417_1900.py b/authentik/sources/oauth/migrations/0004_auto_20210417_1900.py index 6df644e65..e40ae34fa 100644 --- a/authentik/sources/oauth/migrations/0004_auto_20210417_1900.py +++ b/authentik/sources/oauth/migrations/0004_auto_20210417_1900.py @@ -11,7 +11,7 @@ def update_empty_urls(apps: Apps, schema_editor: BaseDatabaseSchemaEditor): for source in OAuthSource.objects.using(db_alias).all(): changed = False - if source.access_token_url == "": + if source.access_token_url == "": # nosec source.access_token_url = None changed = True if source.authorization_url == "": @@ -20,7 +20,7 @@ def update_empty_urls(apps: Apps, schema_editor: BaseDatabaseSchemaEditor): if source.profile_url == "": source.profile_url = None changed = True - if source.request_token_url == "": + if source.request_token_url == "": # nosec source.request_token_url = None changed = True diff --git a/poetry.lock b/poetry.lock index 23f1944d8..8c1fceba0 100644 --- a/poetry.lock +++ b/poetry.lock @@ -163,7 +163,7 @@ visualize = ["graphviz (>0.5.1)", "Twisted (>=16.1.1)"] [[package]] name = "bandit" -version = "1.7.2" +version = "1.7.3" description = "Security oriented static analyser for python code." category = "dev" optional = false @@ -176,7 +176,7 @@ PyYAML = ">=5.3.1" stevedore = ">=1.20.0" [package.extras] -test = ["beautifulsoup4 (>=4.8.0)", "coverage (>=4.5.4)", "fixtures (>=3.0.0)", "flake8 (>=4.0.0)", "pylint (==1.9.4)", "stestr (>=2.5.0)", "testscenarios (>=0.5.0)", "testtools (>=2.3.0)", "toml"] +test = ["coverage (>=4.5.4)", "fixtures (>=3.0.0)", "flake8 (>=4.0.0)", "stestr (>=2.5.0)", "testscenarios (>=0.5.0)", "testtools (>=2.3.0)", "toml", "beautifulsoup4 (>=4.8.0)", "pylint (==1.9.4)"] toml = ["toml"] yaml = ["pyyaml"] @@ -2114,8 +2114,8 @@ automat = [ {file = "Automat-20.2.0.tar.gz", hash = "sha256:7979803c74610e11ef0c0d68a2942b152df52da55336e0c9d58daf1831cbdf33"}, ] bandit = [ - {file = "bandit-1.7.2-py3-none-any.whl", hash = "sha256:e20402cadfd126d85b68ed4c8862959663c8c372dbbb1fca8f8e2c9f55a067ec"}, - {file = "bandit-1.7.2.tar.gz", hash = "sha256:6d11adea0214a43813887bfe71a377b5a9955e4c826c8ffd341b494e3ab25260"}, + {file = "bandit-1.7.3-py3-none-any.whl", hash = "sha256:3ce9b4e6a4f7f41aa966c9543e635dd35e52a793a47e746f0c55c7ecfc69d7e8"}, + {file = "bandit-1.7.3.tar.gz", hash = "sha256:58772ca951bf1129dda8a280d351547de832720bf7b5c29fac3103927980b8a6"}, ] bcrypt = [ {file = "bcrypt-3.2.0-cp36-abi3-macosx_10_10_universal2.whl", hash = "sha256:b589229207630484aefe5899122fb938a5b017b0f4349f769b8c13e78d99a8fd"},