Bump bandit from 1.6.7 to 1.6.8 (#1944)

Bumps [bandit](https://github.com/mtrudel/bandit) from 1.6.7 to 1.6.8. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md">bandit's changelog</a>.</em></p> <blockquote> <h2>1.6.8 (5 Mar 2025)</h2> <h3>Fixes</h3> <ul> <li>Do not send stream WINDOW_UPDATEs on the last data frame of a stream</li> </ul> <h3>Enhancements</h3> <ul> <li>Add <code>status</code> to the telemetry metadata emitted on WebSocket upgrades (<a href="https://redirect.github.com/mtrudel/bandit/issues/466">#466</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mtrudel/bandit/commit/ef83755cef447f49b6c85c9659b7ae4ef8926607"><code>ef83755</code></a> Version bump to 1.6.8</li> <li><a href="https://github.com/mtrudel/bandit/commit/83dffec8335054b5859505ef380065d1591038fe"><code>83dffec</code></a> Do not send stream window size updates when processing end stream data bodies</li> <li><a href="https://github.com/mtrudel/bandit/commit/a38a7bfa4c2e0c1641364a6ef8e914573dcfa135"><code>a38a7bf</code></a> Bump machete to 0.3.10</li> <li><a href="https://github.com/mtrudel/bandit/commit/87bc702739d8017a2abdcc41fd1b50fed42ad81d"><code>87bc702</code></a> Bump ex_doc from 0.37.1 to 0.37.2 (<a href="https://redirect.github.com/mtrudel/bandit/issues/469">#469</a>)</li> <li><a href="https://github.com/mtrudel/bandit/commit/3cb619dca15575023bd1c1a05f13baaa34950f7f"><code>3cb619d</code></a> Bump thousand_island from 1.3.9 to 1.3.11 (<a href="https://redirect.github.com/mtrudel/bandit/issues/470">#470</a>)</li> <li><a href="https://github.com/mtrudel/bandit/commit/b9f48c33a984903914d71afc15913ea412ea84cf"><code>b9f48c3</code></a> Bump ex_doc from 0.36.1 to 0.37.1 (<a href="https://redirect.github.com/mtrudel/bandit/issues/467">#467</a>)</li> <li><a href="https://github.com/mtrudel/bandit/commit/099db8723f23e0e2d5a7e91a9690bdc215faaadb"><code>099db87</code></a> Add status to upgrade telemetry (<a href="https://redirect.github.com/mtrudel/bandit/issues/466">#466</a>)</li> <li><a href="https://github.com/mtrudel/bandit/commit/c7906466206a8a39c698f3b1bb3d316b1c3d4cad"><code>c790646</code></a> Bump machete from 0.3.7 to 0.3.8 (<a href="https://redirect.github.com/mtrudel/bandit/issues/464">#464</a>)</li> <li><a href="https://github.com/mtrudel/bandit/commit/fcd80bcdcbdb0c9dff701eda1f8e4f1c2ffd117c"><code>fcd80bc</code></a> Use arity-1 struct_like matcher</li> <li>See full diff in <a href="https://github.com/mtrudel/bandit/compare/1.6.7...1.6.8">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit&package-manager=hex&previous-version=1.6.7&new-version=1.6.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
nerves-hub · Mar 5, 2025 · 6ee8b9c · 6ee8b9c
1 parent 272a5da
commit 6ee8b9c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mix.lock b/mix.lock
@@ -1,7 +1,7 @@
 %{
   "acceptor_pool": {:hex, :acceptor_pool, "1.0.0", "43c20d2acae35f0c2bcd64f9d2bde267e459f0f3fd23dab26485bf518c281b21", [:rebar3], [], "hexpm", "0cbcd83fdc8b9ad2eee2067ef8b91a14858a5883cb7cd800e6fcd5803e158788"},
   "assert_eventually": {:hex, :assert_eventually, "1.0.0", "f1539f28ba3ffa99a712433c77723c7103986932aa341d05eee94c333a920d15", [:mix], [{:ex_doc, ">= 0.0.0", [hex: :ex_doc, repo: "hexpm", optional: true]}], "hexpm", "c658ac4103c8bd82d0cf72a2fdb77477ba3fbc6b15228c5c801003d239625c69"},
-  "bandit": {:hex, :bandit, "1.6.7", "42f30e37a1c89a2a12943c5dca76f731a2313e8a2e21c1a95dc8241893e922d1", [:mix], [{:hpax, "~> 1.0", [hex: :hpax, repo: "hexpm", optional: false]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}, {:thousand_island, "~> 1.0", [hex: :thousand_island, repo: "hexpm", optional: false]}, {:websock, "~> 0.5", [hex: :websock, repo: "hexpm", optional: false]}], "hexpm", "551ba8ff5e4fc908cbeb8c9f0697775fb6813a96d9de5f7fe02e34e76fd7d184"},
+  "bandit": {:hex, :bandit, "1.6.8", "be6fcbe01a74e6cba42ae35f4085acaeae9b2d8d360c0908d0b9addbc2811e47", [:mix], [{:hpax, "~> 1.0", [hex: :hpax, repo: "hexpm", optional: false]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}, {:thousand_island, "~> 1.0", [hex: :thousand_island, repo: "hexpm", optional: false]}, {:websock, "~> 0.5", [hex: :websock, repo: "hexpm", optional: false]}], "hexpm", "4fc08c8d4733735d175a007ecb25895e84d09292b0180a2e9f16948182c88b6e"},
   "base62": {:hex, :base62, "1.2.2", "85c6627eb609317b70f555294045895ffaaeb1758666ab9ef9ca38865b11e629", [:mix], [{:custom_base, "~> 0.2.1", [hex: :custom_base, repo: "hexpm", optional: false]}], "hexpm", "d41336bda8eaa5be197f1e4592400513ee60518e5b9f4dcf38f4b4dae6f377bb"},
   "bcrypt_elixir": {:hex, :bcrypt_elixir, "3.2.1", "e361261a0401d82dadc1ab7b969f91d250bf7577283e933fe8c5b72f8f5b3c46", [:make, :mix], [{:comeonin, "~> 5.3", [hex: :comeonin, repo: "hexpm", optional: false]}, {:elixir_make, "~> 0.6", [hex: :elixir_make, repo: "hexpm", optional: false]}], "hexpm", "81170177d5c2e280d12141a0b9d9e299bf731535e2d959982bdcd4cfe3c82865"},
   "blockade": {:hex, :blockade, "0.2.1", "2a91de67a337ae146f368cfc0bfc850a0cf9b5390408b323f263f8608ba33361", [:rebar3], [], "hexpm", "d319b643c9bd20b4499e0a2fe254c37ec9e3682ae62ec211a0cabca62ca5f245"},