Bump isort from 5.13.2 to 6.0.0 #77
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
🛡️ Bandit Scan Results SummaryWe found 2 High, 1 Medium, and 1 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
dependabot
bot
force-pushed
the
dependabot/pip/isort-6.0.0
branch
from
eb83f13 to
99b0750
Compare
🛡️ Bandit Scan Results SummaryWe found 2 High, 1 Medium, and 1 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
dependabot
bot
force-pushed
the
dependabot/pip/isort-6.0.0
branch
from
99b0750 to
c6fe797
Compare
🛡️ Bandit Scan Results SummaryWe found 2 High, 1 Medium, and 1 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
dependabot
bot
force-pushed
the
dependabot/pip/isort-6.0.0
branch
from
c6fe797 to
4434d2d
Compare
🛡️ Bandit Scan Results SummaryWe found 2 High, 1 Medium, and 1 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
dependabot
bot
force-pushed
the
dependabot/pip/isort-6.0.0
branch
from
4434d2d to
5933e16
Compare
🛡️ Bandit Scan Results SummaryWe found 2 High, 1 Medium, and 1 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
dependabot
bot
force-pushed
the
dependabot/pip/isort-6.0.0
branch
from
5933e16 to
249abeb
Compare
🛡️ Bandit Scan Results SummaryWe found 2 High, 1 Medium, and 1 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
dependabot
bot
force-pushed
the
dependabot/pip/isort-6.0.0
branch
from
249abeb to
ee5ed8a
Compare
🛡️ Bandit Scan Results SummaryWe found 2 High, 1 Medium, and 1 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
Bumps [isort](https://github.com/pycqa/isort) from 5.13.2 to 6.0.0. - [Release notes](https://github.com/pycqa/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@5.13.2...6.0.0) --- updated-dependencies: - dependency-name: isort dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/pip/isort-6.0.0
branch
from
ee5ed8a to
acaa18a
Compare
🛡️ Bandit Scan Results SummaryWe found 2 High, 1 Medium, and 1 Low severity issues. Detailed Findings
✨ About this ReportThis report was generated by the official Bandit GitHub Action to ensure our codebase stays secure. 📕 What is Bandit?Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation. 👥 Community SupportGot questions or need help with Bandit Action?
|
Bumps isort from 5.13.2 to 6.0.0.
Release notes
Sourced from isort's releases.
... (truncated)
Changelog
Sourced from isort's changelog.
Commits
0a0b7a86.0.02d00730Merge pull request #2349 from PyCQA/revert-2347-revert-2346-ci/uv-replacement...16bb0e2Return user_options73abbc8Fix dev and optional dependencies8b3828dPin UV version0225875Remove pip and virtualenv usage3d49bc0Revert "Revert "UV replacement of Poetry""b3760abMerge pull request #2347 from PyCQA/revert-2346-ci/uv-replacement-for-poetrycc12cceRevert "UV replacement of Poetry"f7ab073Merge pull request #2346 from PyCQA/ci/uv-replacement-for-poetryDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)