CVS commit: pkgsrc/security/py-bandit

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Dec 11 17:18:36 UTC 2023

Modified Files:
        pkgsrc/security/py-bandit: Makefile PLIST distinfo

Log Message:
py-bandit: updated to 1.7.6

1.7.6

* Fixes for sphinx build
* refactor: remove \`importlib-metadata\` fallback
* Fix crash on pyproject.toml without bandit config
* Add official support of Python 3.12
* Use mirror repository for black pre-commit hook
* fix(plugins/B507): also detect class instances
* Fix for ReadtheDocs build
* Bump actions/checkout from 3 to 4
* Fix dependabot to update github actions
* Support ignoring blacklists by name
* Update blacklist call documentation
* Avoid gitpyhon CVE-2022-24439
* django\_rawsql\_used: support keyword arguments used in \`RawSQL\`
* Simplify \`wrap\_file\_object\`
* Update asserts.py documentation
* Remove support for Python 3.7 due to end-of-life
* Make pre-commit run Bandit hook using a single process
* Switch from open collective to PSF
* Replace pbr in favor of importlib
* Add a copy button to all code snippets in docs
* Add \`random.Random\` to B311 checks
* Update pre-commit hooks
* Update versions of used GitHub Actions
* Skip unnecessary \`pip install\` commands in the pythonpackage.yml workflow
* Switch to tox 4
* Adds check for crypt module usage as weak hash
* language and linting updates
* xmlrpclib replaced with xmlrpc in Python3
* Improper detection of non-requests module
* Remove checks for Python2 urllib
* Render Python 3.10 in drop down correctly
* Update bug report to include version 1.7.5


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 pkgsrc/security/py-bandit/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/py-bandit/PLIST \
    pkgsrc/security/py-bandit/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-bandit/Makefile
diff -u pkgsrc/security/py-bandit/Makefile:1.3 pkgsrc/security/py-bandit/Makefile:1.4
--- pkgsrc/security/py-bandit/Makefile:1.3      Tue Nov  7 22:38:03 2023
+++ pkgsrc/security/py-bandit/Makefile  Mon Dec 11 17:18:36 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.3 2023/11/07 22:38:03 wiz Exp $
+# $NetBSD: Makefile,v 1.4 2023/12/11 17:18:36 adam Exp $
 
-DISTNAME=      bandit-1.7.5
+DISTNAME=      bandit-1.7.6
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=b/bandit/}
@@ -11,28 +11,29 @@ COMMENT=    Security oriented static analys
 LICENSE=       apache-2.0
 
 TOOL_DEPENDS+= ${PYPKGPREFIX}-pbr>=2.0.0:../../devel/py-pbr
-DEPENDS+=      ${PYPKGPREFIX}-gitpython>=1.0.1:../../devel/py-gitpython
+DEPENDS+=      ${PYPKGPREFIX}-gitpython>=3.1.30:../../devel/py-gitpython
 DEPENDS+=      ${PYPKGPREFIX}-rich-[0-9]*:../../comms/py-rich
 DEPENDS+=      ${PYPKGPREFIX}-stevedore>=1.20.0:../../devel/py-stevedore
 DEPENDS+=      ${PYPKGPREFIX}-yaml>=5.3.1:../../textproc/py-yaml
 TEST_DEPENDS+= ${PYPKGPREFIX}-beautifulsoup4>=4.8.0:../../www/py-beautifulsoup4
+TEST_DEPENDS+= ${PYPKGPREFIX}-fixtures>=3.0.0:../../devel/py-fixtures
 TEST_DEPENDS+= ${PYPKGPREFIX}-testscenarios>=0.5.0:../../devel/py-testscenarios
 TEST_DEPENDS+= ${PYPKGPREFIX}-testtools>=2.3.0:../../devel/py-testtools
 
 USE_LANGUAGES= # none
 
-USE_PKG_RESOURCES=     yes
-
 PYTHON_VERSIONS_INCOMPATIBLE=  27 38
 
+.include "../../lang/python/pyversion.mk"
+.if ${PYTHON_VERSION} < 311
+TEST_DEPENDS+= ${PYPKGPREFIX}-tomli>=1.1.0:../../textproc/py-tomli
+.endif
+
 post-install:
 .for bin in bandit bandit-baseline bandit-config-generator
        cd ${DESTDIR}${PREFIX}/bin && \
        ${MV} ${bin} ${bin}-${PYVERSSUFFIX} || ${TRUE}
 .endfor
 
-do-test:
-       cd ${WRKSRC} && ${SETENV} ${TEST_ENV} ${PYTHONBIN} -m unittest discover -v
-
-.include "../../lang/python/egg.mk"
+.include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/security/py-bandit/PLIST
diff -u pkgsrc/security/py-bandit/PLIST:1.2 pkgsrc/security/py-bandit/PLIST:1.3
--- pkgsrc/security/py-bandit/PLIST:1.2 Wed Mar 29 10:47:50 2023
+++ pkgsrc/security/py-bandit/PLIST     Mon Dec 11 17:18:36 2023
@@ -1,15 +1,15 @@
-@comment $NetBSD: PLIST,v 1.2 2023/03/29 10:47:50 adam Exp $
+@comment $NetBSD: PLIST,v 1.3 2023/12/11 17:18:36 adam Exp $
 bin/bandit-${PYVERSSUFFIX}
 bin/bandit-baseline-${PYVERSSUFFIX}
 bin/bandit-config-generator-${PYVERSSUFFIX}
-${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
-${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
-${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
-${PYSITELIB}/${EGG_INFODIR}/entry_points.txt
-${PYSITELIB}/${EGG_INFODIR}/not-zip-safe
-${PYSITELIB}/${EGG_INFODIR}/pbr.json
-${PYSITELIB}/${EGG_INFODIR}/requires.txt
-${PYSITELIB}/${EGG_INFODIR}/top_level.txt
+${PYSITELIB}/${WHEEL_INFODIR}/AUTHORS
+${PYSITELIB}/${WHEEL_INFODIR}/LICENSE
+${PYSITELIB}/${WHEEL_INFODIR}/METADATA
+${PYSITELIB}/${WHEEL_INFODIR}/RECORD
+${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
+${PYSITELIB}/${WHEEL_INFODIR}/entry_points.txt
+${PYSITELIB}/${WHEEL_INFODIR}/pbr.json
+${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 ${PYSITELIB}/bandit/__init__.py
 ${PYSITELIB}/bandit/__init__.pyc
 ${PYSITELIB}/bandit/__init__.pyo
Index: pkgsrc/security/py-bandit/distinfo
diff -u pkgsrc/security/py-bandit/distinfo:1.2 pkgsrc/security/py-bandit/distinfo:1.3
--- pkgsrc/security/py-bandit/distinfo:1.2      Wed Mar 29 10:47:50 2023
+++ pkgsrc/security/py-bandit/distinfo  Mon Dec 11 17:18:36 2023
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.2 2023/03/29 10:47:50 adam Exp $
+$NetBSD: distinfo,v 1.3 2023/12/11 17:18:36 adam Exp $
 
-BLAKE2s (bandit-1.7.5.tar.gz) = 66fdf47d300264da1f2b5f836d5824edde3a216116714b2add79adf6af83718f
-SHA512 (bandit-1.7.5.tar.gz) = 81b93654ba62e6d22e8c2d534b9f575979bad4f66acd90c221d214316cd1863e7c7e179b8e2a2a8fa80034db71ebda8636adb25b36e1827194bb4639e67ada09
-Size (bandit-1.7.5.tar.gz) = 1970878 bytes
+BLAKE2s (bandit-1.7.6.tar.gz) = 7a5149088fce6272fd16b6c4c4ca90692b2bdb45b51b7893be5f8c9e2eff4123
+SHA512 (bandit-1.7.6.tar.gz) = 6635704e2e60e23f5d21de345152e13ef1bde5efb92ccc0e6dde46e8405c1e5dd9530830af4d2a3c5d6e0bb0eb106ccce4cde3a7be678cce499486e752a26428
+Size (bandit-1.7.6.tar.gz) = 1977532 bytes