chore(deps-dev): Update bandit requirement from 1.8.3 to 1.8.5 by dependabot[bot] · Pull Request #916

chore(deps-dev): Update bandit requirement from 1.8.3 to 1.8.5 by dependabot[bot] · Pull Request #916 · CycloneDX/cyclonedx-python

Updates the requirements on bandit to permit the latest version.

Release notes

Sourced from bandit's releases.

1.8.5

What's Changed

Fix the rendering of the CI/CD doc by @ericwb in PyCQA/bandit#1274

Fix for publish to PyPI failure by @ericwb in PyCQA/bandit#1273

Full Changelog: PyCQA/bandit@1.8.4...1.8.5

Commits

23d269a Fix for publish to PyPI failure (#1273)
e3ff8b5 Fix the rendering of the CI/CD doc (#1274)
61d1667 add github-actions documentation (#1172)
cea2b1c Bump docker/build-push-action from 6.17.0 to 6.18.0 (#1268)
2d577a6 [pre-commit.ci] pre-commit autoupdate (#1266)
fa557cc Bump docker/build-push-action from 6.16.0 to 6.17.0 (#1265)
2f0ab8b Remove etc from list of temp paths (#1263)
d8feade Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#1262)
7979676 Bump docker/build-push-action from 6.15.0 to 6.16.0 (#1261)
6c92732 Use ubuntu latest for readthedocs build (#1260)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)