Update all patch versions (2.7) (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
bandit (source, changelog)	==1.7.8 -> ==1.7.9					dev-packages	patch
c2cciutils	==1.1.39 -> ==1.1.41					dev-packages	patch
pipenv	==2022.4.21 -> ==2022.4.30						patch
python	3.8 -> 3.8.19						patch

---

Release Notes

PyCQA/bandit (bandit)

v1.7.9

Compare Source

What's Changed

• Bump docker/build-push-action from 5.1.0 to 5.2.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1117
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1119
• New logo for Bandit based on raccoon by @​ericwb in https://github.com/PyCQA/bandit/pull/1121
• Start testing on Python 3.13 by @​ericwb in https://github.com/PyCQA/bandit/pull/1122
• Bump docker/build-push-action from 5.2.0 to 5.3.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1123
• Bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1124
• Bump docker/login-action from 3.0.0 to 3.1.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1125
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1126
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1127
• Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1130
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1131
• Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1132
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1133
• Updates banner logo so it renders well in dark mode by @​ericwb in https://github.com/PyCQA/bandit/pull/1134
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1135
• Add a sponsor section to README by @​ericwb in https://github.com/PyCQA/bandit/pull/1137
• Ensure sarif extra is included as part of doc build by @​ericwb in https://github.com/PyCQA/bandit/pull/1139
• Bump docker/login-action from 3.1.0 to 3.2.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1142
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1143
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1145
• Guard against empty call argument list by @​ericwb in https://github.com/PyCQA/bandit/pull/1146
• Bump docker/build-push-action from 5.3.0 to 5.4.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1144
• Support configfile in .bandit file by @​bersbersbers in https://github.com/PyCQA/bandit/pull/1052

New Contributors

• @​pre-commit-ci made their first contribution in https://github.com/PyCQA/bandit/pull/1119
• @​bersbersbers made their first contribution in https://github.com/PyCQA/bandit/pull/1052

Full Changelog: PyCQA/bandit@1.7.8...1.7.9

camptocamp/c2cciutils (c2cciutils)

v1.1.41

Compare Source

1.1.41 (2024-06-18)

Security fixes

• #​1760 Audit Snyk check/fix 1.1 (@​geo-ghci-int[bot])
• #​1765 Audit Snyk check/fix 1.1 (@​geo-ghci-int[bot])
• #​1756 Audit Snyk check/fix 1.1 (@​geo-ghci-int[bot])

v1.1.40

Compare Source

1.1.40 (2024-06-11)

Security fixes

• #​1698 Audit Snyk check/fix 1.1 (@​geo-ghci-int[bot])
• #​1747 Audit Snyk check/fix 1.1 (@​geo-ghci-int[bot])

Dependency update

• #​1705 Update dependency camptocamp/c2cciutils to v1.1.39 (1.1) (@​renovate[bot])
• #​1704 Update all patch versions (1.1) (patch) (@​renovate[bot])

Chore

Changes that shouldn't affect the users like continuous integration updates

• #​1737 CI updates (@​sbrunner)
• #​1731 CI updates (@​sbrunner)

pypa/pipenv (pipenv)

v2022.4.30

Compare Source

Bug Fixes

• Fixes issue of requirements command problem by modifying to print -e and path of the editable package. #​5070
• Revert specifier of setuptools requirement in setup.py back to what it was in order to fix FileNotFoundError: [Errno 2] issue report. #​5075
• Fixes issue of requirements command where git requirements cause the command to fail, solved by using existing convert_deps_to_pip function. #​5076

Vendored Libraries

• Vendor in requirementslib==1.6.4 to Fix SetuptoolsDeprecationWarning setuptools.config.read_configuration became deprecated. #​5081

Removals and Deprecations

• Remove more usage of misc functions of vistir. Many of this function are available in the STL or in another dependency of pipenv. #​5078

---

Configuration

📅 Schedule: Branch creation - "after 5pm on the first day of the month" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.