Bump bandit from 1.5.0 to 1.5.2 (#847)

Bumps [bandit](https://github.com/mtrudel/bandit) from 1.5.0 to 1.5.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md">bandit's changelog</a>.</em></p> <blockquote> <h2>1.5.2 (10 May 2024)</h2> <h3>Fixes</h3> <ul> <li>Don't crash on non-stringable process dictionary keys (<a href="https://redirect.github.com/mtrudel/bandit/issues/350">#350</a>, thanks <a href="https://github.com/ryanwinchester"><code>@ryanwinchester</code></a>, <a href="https://github.com/chrismccord"><code>@chrismccord</code></a>!)</li> </ul> <h2>1.5.1 (10 May 2024)</h2> <h3>Enhancements</h3> <ul> <li>Process dictionary is now cleared of all non-system process dictionary entries between keepalive requests (<a href="https://redirect.github.com/mtrudel/bandit/issues/349">#349</a>)</li> <li>Explicitly run a GC before upgrading a connection to websocket (<a href="https://redirect.github.com/mtrudel/bandit/issues/348">#348</a>)</li> <li>Improve docs around deflate options (thanks <a href="https://github.com/kotsius"><code>@kotsius</code></a>!)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mtrudel/bandit/commit/66074fc78c35240d02cda086d9c2af30ef7dc71d"><code>66074fc</code></a> Version bump to 1.5.2</li> <li><a href="https://github.com/mtrudel/bandit/commit/e1a34f92df97ebf703e527bd8731db97883e2648"><code>e1a34f9</code></a> Only save Process keys that are atoms starting with $ (<a href="https://redirect.github.com/mtrudel/bandit/issues/351">#351</a>)</li> <li><a href="https://github.com/mtrudel/bandit/commit/53fdf06b832b0c615d2de00c7d35b8ca34b2aa82"><code>53fdf06</code></a> Version bump to 1.5.1</li> <li><a href="https://github.com/mtrudel/bandit/commit/08a5675ee5b1aa13302f3a334e5674d381662917"><code>08a5675</code></a> Clear process dictionary between every request (<a href="https://redirect.github.com/mtrudel/bandit/issues/349">#349</a>)</li> <li><a href="https://github.com/mtrudel/bandit/commit/bb5ba968f1a2f1e285b711003d2e54932a7f593c"><code>bb5ba96</code></a> Explicitly GC before switching to websock (<a href="https://redirect.github.com/mtrudel/bandit/issues/348">#348</a>)</li> <li><a href="https://github.com/mtrudel/bandit/commit/f650124cc4fcfa9c1f8f625cc22b8927cc1030b2"><code>f650124</code></a> Improve docs around deflate options</li> <li><a href="https://github.com/mtrudel/bandit/commit/58b3a26842221f09b191d4fdf463d788d9c22372"><code>58b3a26</code></a> Bump machete from 0.3.0 to 0.3.1 (<a href="https://redirect.github.com/mtrudel/bandit/issues/343">#343</a>)</li> <li>See full diff in <a href="https://github.com/mtrudel/bandit/compare/1.5.0...1.5.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit&package-manager=hex&previous-version=1.5.0&new-version=1.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
ambry-app · May 13, 2024 · 4708207 · 4708207
2 parents 5773b0f + 86b1e12
commit 4708207
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mix.lock b/mix.lock
@@ -3,7 +3,7 @@
   "absinthe_plug": {:hex, :absinthe_plug, "1.5.8", "38d230641ba9dca8f72f1fed2dfc8abd53b3907d1996363da32434ab6ee5d6ab", [:mix], [{:absinthe, "~> 1.5", [hex: :absinthe, repo: "hexpm", optional: false]}, {:plug, "~> 1.4", [hex: :plug, repo: "hexpm", optional: false]}], "hexpm", "bbb04176647b735828861e7b2705465e53e2cf54ccf5a73ddd1ebd855f996e5a"},
   "absinthe_relay": {:hex, :absinthe_relay, "1.5.2", "cfb8aed70f4e4c7718d3f1c212332d2ea728f17c7fc0f68f1e461f0f5f0c4b9a", [:mix], [{:absinthe, "~> 1.5.0 or ~> 1.6.0 or ~> 1.7.0", [hex: :absinthe, repo: "hexpm", optional: false]}, {:ecto, "~> 2.0 or ~> 3.0", [hex: :ecto, repo: "hexpm", optional: true]}], "hexpm", "0587ee913afa31512e1457a5064ee88427f8fe7bcfbeeecd41c71d9cff0b62b6"},
   "argon2_elixir": {:hex, :argon2_elixir, "4.0.0", "7f6cd2e4a93a37f61d58a367d82f830ad9527082ff3c820b8197a8a736648941", [:make, :mix], [{:comeonin, "~> 5.3", [hex: :comeonin, repo: "hexpm", optional: false]}, {:elixir_make, "~> 0.6", [hex: :elixir_make, repo: "hexpm", optional: false]}], "hexpm", "f9da27cf060c9ea61b1bd47837a28d7e48a8f6fa13a745e252556c14f9132c7f"},
-  "bandit": {:hex, :bandit, "1.5.0", "3bc864a0da7f013ad3713a7f550c6a6ec0e19b8d8715ec678256a0dc197d5539", [:mix], [{:hpax, "~> 0.1.1", [hex: :hpax, repo: "hexpm", optional: false]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}, {:thousand_island, "~> 1.0", [hex: :thousand_island, repo: "hexpm", optional: false]}, {:websock, "~> 0.5", [hex: :websock, repo: "hexpm", optional: false]}], "hexpm", "92d18d9a7228a597e0d4661ef69a874ea82d63ff49c7d801a5c68cb18ebbbd72"},
+  "bandit": {:hex, :bandit, "1.5.2", "ed0a41c43a9e529c670d0fd48371db4027e7b80d43b1942893e17deb8bed0540", [:mix], [{:hpax, "~> 0.1.1", [hex: :hpax, repo: "hexpm", optional: false]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}, {:thousand_island, "~> 1.0", [hex: :thousand_island, repo: "hexpm", optional: false]}, {:websock, "~> 0.5", [hex: :websock, repo: "hexpm", optional: false]}], "hexpm", "35ddbdce7e8a2a3c6b5093f7299d70832a43ed2f4a1852885a61d334cab1b4ad"},
   "boundary": {:git, "https://github.com/sasa1977/boundary.git", "a706fda5e236ef8b36521a66c095bf524b080941", []},
   "bunt": {:hex, :bunt, "1.0.0", "081c2c665f086849e6d57900292b3a161727ab40431219529f13c4ddcf3e7a44", [:mix], [], "hexpm", "dc5f86aa08a5f6fa6b8096f0735c4e76d54ae5c9fa2c143e5a1fc7c1cd9bb6b5"},
   "castore": {:hex, :castore, "1.0.7", "b651241514e5f6956028147fe6637f7ac13802537e895a724f90bf3e36ddd1dd", [:mix], [], "hexpm", "da7785a4b0d2a021cd1292a60875a784b6caef71e76bf4917bdee1f390455cf5"},