tests: temporarily force bandit < 1.6.0

* Due to a bug upstream bandit 1.6.0 doesn't honor the excluded directories, causing the failure of the bandit tox environments. See PyCQA/bandit#488 * Temproarily forcing bandit to be < 1.6.0 until the fix is available upstream. Change-Id: I8627d2a4e0e4b7f604b4dea843b910bbc5d4de45
wikimedia · May 9, 2019 · 816e4b5 · 816e4b5
1 parent 0118876
commit 816e4b5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/setup.py b/setup.py
@@ -25,7 +25,7 @@
 EXTRAS_REQUIRE = {
     # Test dependencies
     'tests': [
-        'bandit>=1.1.0',
+        'bandit>=1.1.0,<1.6.0',
         'flake8>=3.2.1',
         'flake8-import-order>=0.18.1',
         'mypy>=0.470',