[stable-only] Cap bandit to 1.6.2

The 1.6.3 [1] release has dropped support for py2 [2] so cap to 1.6.2 when using py2. [1] https://github.com/PyCQA/bandit/releases/tag/1.6.3 [2] PyCQA/bandit#615 Closes-Bug: #1907438 Change-Id: I294d5350e2f418614e54ff7bdd47dff16bfdcdbc
openstack · Jan 5, 2021 · 41bec52 · 41bec52
1 parent a465c46
commit 41bec52
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/test-requirements.txt b/test-requirements.txt
@@ -21,6 +21,6 @@ fixtures>=3.0.0 # Apache-2.0/BSD
 keystonemiddleware>=4.17.0 # Apache-2.0
 
 # Security checks
-bandit>=1.1.0 # Apache-2.0
+bandit>=1.1.0,<=1.6.2 # Apache-2.0
 
 docutils>=0.11  # OSI-Approved Open Source, Public Domain