Update CI dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
PyCQA/bandit	repository	patch	1.7.9 -> 1.7.10
c2cciutils		patch	==1.6.22 -> ==1.6.23
poetry-dynamic-versioning		patch	==1.4.0 -> ==1.4.1
pytest (changelog)		patch	==8.3.2 -> ==8.3.3
python-jsonschema/check-jsonschema	repository	patch	0.29.2 -> 0.29.3

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

PyCQA/bandit (PyCQA/bandit)

v1.7.10

Compare Source

What's Changed

• Bump docker/build-push-action from 5.4.0 to 6.0.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1147
• Suggested small refactors in assignments by @​ericwb in https://github.com/PyCQA/bandit/pull/1150
• Performance improvement in blacklist function by @​ericwb in https://github.com/PyCQA/bandit/pull/1148
• Add test for usage of FTP_TLS by @​ericwb in https://github.com/PyCQA/bandit/pull/1149
• New check: B113: TrojanSource - Bidirectional control characters by @​Lucas-C in https://github.com/PyCQA/bandit/pull/757
• Bump docker/build-push-action from 6.0.0 to 6.1.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1152
• feat(plugins): add support for httpx in B113 by @​mkniewallner in https://github.com/PyCQA/bandit/pull/1060
• Nit: remove unused variable by @​ericwb in https://github.com/PyCQA/bandit/pull/1153
• Add recent releases to version choice in bug report by @​ericwb in https://github.com/PyCQA/bandit/pull/1151
• Bump docker/build-push-action from 6.1.0 to 6.2.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1155
• Bump docker/build-push-action from 6.2.0 to 6.3.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1157
• Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1156
• Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1158
• Bump docker/login-action from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1159
• Bump docker/build-push-action from 6.3.0 to 6.5.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1160
• Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 by @​dependabot in https://github.com/PyCQA/bandit/pull/1163
• Bump docker/build-push-action from 6.5.0 to 6.6.1 by @​dependabot in https://github.com/PyCQA/bandit/pull/1166
• Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1165
• Bump docker/build-push-action from 6.6.1 to 6.7.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1168
• Use consistent file naming of docs by @​ericwb in https://github.com/PyCQA/bandit/pull/1170
• Pytorch Load / Save Plugin by @​lukehinds in https://github.com/PyCQA/bandit/pull/1114

New Contributors

• @​Lucas-C made their first contribution in https://github.com/PyCQA/bandit/pull/757

Full Changelog: PyCQA/bandit@1.7.9...1.7.10

camptocamp/c2cciutils (c2cciutils)

v1.6.23

Compare Source

1.6.23 (2024-09-09)

New feature

• #​1921 [Backport 1.6] Print version only of pre-installed application and c2cciutils (@​c2c-bot-gis-ci-2, @​sbrunner)

Dependency update

• #​1896 Update dependency camptocamp/c2cciutils to v1.6.22 (1.6) (@​renovate[bot])
• #​1895 Update all patch versions (1.6) (patch) (@​renovate[bot], @​sbrunner)
• #​1911 Update dependency cryptography to v43 (1.6) (@​renovate[bot])

Chore

Changes that shouldn't affect the users like continuous integration updates

• #​1884 Audit Dpkg 1.6 (@​geo-ghci-int[bot])
• #​1862 Audit Dpkg 1.6 (@​geo-ghci-int[bot])
• #​1881 Audit Dpkg 1.6 (@​geo-ghci-int[bot])
• #​1903 Audit Dpkg 1.6 (@​geo-ghci-int[bot])
• #​1883 Audit Dpkg 1.6 (@​geo-ghci-int[bot])
• #​1880 Audit Dpkg 1.6 (@​geo-ghci-int[bot])
• #​1874 Audit Dpkg 1.6 (@​geo-ghci-int[bot])

mtkennerly/poetry-dynamic-versioning (poetry-dynamic-versioning)

v1.4.1

Compare Source

• Fixed:
  • The enable command would fail when the pyproject.toml tables were out of order.

pytest-dev/pytest (pytest)

v8.3.3

Compare Source

pytest 8.3.3 (2024-09-09)

Bug fixes

• #​12446: Avoid calling @property (and other instance descriptors) during fixture discovery -- by asottile{.interpreted-text role="user"}

• #​12659: Fixed the issue of not displaying assertion failure differences when using the parameter --import-mode=importlib in pytest>=8.1.

• #​12667: Fixed a regression where type change in [ExceptionInfo.errisinstance]{.title-ref} caused [mypy]{.title-ref} to fail.

• #​12744: Fixed typing compatibility with Python 3.9 or less -- replaced [typing.Self]{.title-ref} with [typing_extensions.Self]{.title-ref} -- by Avasam{.interpreted-text role="user"}

• #​12745: Fixed an issue with backslashes being incorrectly converted in nodeid paths on Windows, ensuring consistent path handling across environments.

• #​6682: Fixed bug where the verbosity levels where not being respected when printing the "msg" part of failed assertion (as in assert condition, msg).

• #​9422: Fix bug where disabling the terminal plugin via -p no:terminal would cause crashes related to missing the verbose option.

  -- by GTowers1{.interpreted-text role="user"}

Improved documentation

• #​12663: Clarify that the [pytest_deselected]{.title-ref} hook should be called from [pytest_collection_modifyitems]{.title-ref} hook implementations when items are deselected.
• #​12678: Remove erroneous quotes from [tmp_path_retention_policy]{.title-ref} example in docs.

Miscellaneous internal changes

• #​12769: Fix typos discovered by codespell and add codespell to pre-commit hooks.

python-jsonschema/check-jsonschema (python-jsonschema/check-jsonschema)

v0.29.3

Compare Source

• Update vendored schemas: buildkite, circle-ci, dependabot, gitlab-ci,
  renovate, taskfile, woodpecker-ci (2024-09-29)

---

Configuration

📅 Schedule: Branch creation - "after 5pm on the first day of the month" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.