[stable-only] Fix bandit upper constraint

The 1.6.3 [1] release has dropped support for py2 [2] but the release is faulty and pip still picks it up for py2 [3][4], so cap to 1.6.2 when using py2. [1] https://github.com/PyCQA/bandit/releases/tag/1.6.3 [2] PyCQA/bandit#615 [3] PyCQA/bandit#663 [4] PyCQA/bandit#665 Change-Id: I64da924b84d6a96d0440a562c0a7925406aff4c4
openstack · Jan 8, 2021 · 59525df · 59525df
1 parent 88f1058
commit 59525df
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/test-requirements.txt b/test-requirements.txt
@@ -20,4 +20,4 @@ WebTest>=2.0.27 # MIT
 bashate>=0.5.1 # Apache-2.0
 flake8-import-order>=0.13 # LGPLv3
 Pygments>=2.2.0 # BSD
-bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0
+bandit!=1.6.0,>=1.1.0,<=1.6.2 # Apache-2.0