Bump bandit from 1.7.8 to 1.7.9

[dependabot[bot]]

Bumps bandit from 1.7.8 to 1.7.9.

Release notes

Sourced from bandit's releases.

1.7.9

What's Changed

• Bump docker/build-push-action from 5.1.0 to 5.2.0 by @​dependabot in PyCQA/bandit#1117
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1119
• New logo for Bandit based on raccoon by @​ericwb in PyCQA/bandit#1121
• Start testing on Python 3.13 by @​ericwb in PyCQA/bandit#1122
• Bump docker/build-push-action from 5.2.0 to 5.3.0 by @​dependabot in PyCQA/bandit#1123
• Bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @​dependabot in PyCQA/bandit#1124
• Bump docker/login-action from 3.0.0 to 3.1.0 by @​dependabot in PyCQA/bandit#1125
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1126
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1127
• Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @​dependabot in PyCQA/bandit#1130
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1131
• Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @​dependabot in PyCQA/bandit#1132
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1133
• Updates banner logo so it renders well in dark mode by @​ericwb in PyCQA/bandit#1134
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1135
• Add a sponsor section to README by @​ericwb in PyCQA/bandit#1137
• Ensure sarif extra is included as part of doc build by @​ericwb in PyCQA/bandit#1139
• Bump docker/login-action from 3.1.0 to 3.2.0 by @​dependabot in PyCQA/bandit#1142
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1143
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1145
• Guard against empty call argument list by @​ericwb in PyCQA/bandit#1146
• Bump docker/build-push-action from 5.3.0 to 5.4.0 by @​dependabot in PyCQA/bandit#1144
• Support configfile in .bandit file by @​bersbersbers in PyCQA/bandit#1052

New Contributors

• @​pre-commit-ci made their first contribution in PyCQA/bandit#1119
• @​bersbersbers made their first contribution in PyCQA/bandit#1052

Full Changelog: https://github.com/PyCQA/bandit/compare/1.7.8...1.7.9

Commits

• 691f465 Support configfile in .bandit file (#1052)
• f1a397e Bump docker/build-push-action from 5.3.0 to 5.4.0 (#1144)
• 049eba0 Guard against empty call argument list (#1146)
• ad56c78 [pre-commit.ci] pre-commit autoupdate (#1145)
• 2dd4cb5 [pre-commit.ci] pre-commit autoupdate (#1143)
• 313cae7 Bump docker/login-action from 3.1.0 to 3.2.0 (#1142)
• 3fa1e25 Ensure sarif extra is included as part of doc build (#1139)
• 8b659fb Add a sponsor section to README (#1137)
• 30cada5 [pre-commit.ci] pre-commit autoupdate (#1135)
• dbb4161 Updates banner logo so it renders well in dark mode (#1134)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)