Update pre-commit hook PyCQA/bandit to v1.7.7

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
PyCQA/bandit	repository	patch	1.7.6 -> 1.7.7

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

PyCQA/bandit (PyCQA/bandit)

v1.7.7

Compare Source

What's Changed

• Add the new release to bandit versions of bug template by @​ericwb in https://github.com/PyCQA/bandit/pull/1075
• Bump actions/setup-python from 4 to 5 by @​dependabot in https://github.com/PyCQA/bandit/pull/1076
• Handle variant in how policy is passed in paramiko by @​ericwb in https://github.com/PyCQA/bandit/pull/1078
• Flag str.replace as possible sql injection by @​costaparas in https://github.com/PyCQA/bandit/pull/1044
• defusedxml: Show correct module name by @​kajinamit in https://github.com/PyCQA/bandit/pull/1081
• Add tidelift to the sponsor funding list by @​ericwb in https://github.com/PyCQA/bandit/pull/1089
• Create a security policy by @​ericwb in https://github.com/PyCQA/bandit/pull/1091
• Fix up issues found running Bandit on itself by @​ericwb in https://github.com/PyCQA/bandit/pull/1093
• Add random.randbytes to blacklist calls by @​ericwb in https://github.com/PyCQA/bandit/pull/1096
• Prepend ./ for files specified as CLI args by @​ericwb in https://github.com/PyCQA/bandit/pull/1094
• Rework GitPython dependency to be an extra for bandit-baseline by @​ericwb in https://github.com/PyCQA/bandit/pull/1099
• Bump actions/dependency-review-action from 3 to 4 by @​dependabot in https://github.com/PyCQA/bandit/pull/1101
• Introduce Official Bandit Images by @​lukehinds in https://github.com/PyCQA/bandit/pull/1088
• Remove markdown formatting in reStructuredText formatted README by @​ericwb in https://github.com/PyCQA/bandit/pull/1103
• Downsize the org:repo name by @​lukehinds in https://github.com/PyCQA/bandit/pull/1104

New Contributors

• @​kajinamit made their first contribution in https://github.com/PyCQA/bandit/pull/1081

Full Changelog: PyCQA/bandit@1.7.6...1.7.7

---

Configuration

📅 Schedule: Branch creation - "before 4am" in timezone Europe/Amsterdam, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[sonarcloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (f000cdf) 35.17% compared to head (d4b5506) 35.17%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #142   +/-   ##
=======================================
  Coverage   35.17%   35.17%           
=======================================
  Files          21       21           
  Lines        2405     2405           
=======================================
  Hits          846      846           
  Misses       1559     1559           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.