Cap Bandit below 1.6.0 and update Sphinx requirement

Bandit 1.6.0 accidentally changed how the exclusion list option is
handled and breaks our use of it. Cap to the previous version until
Bandit has fixed the problem.

Sphinx 2.0 no longer works on python 2.7, so we need to start capping
it there as well.

Change-Id: Id9a875393e42d9fc54d8c571d368180fec122839
Reference: https://github.com/PyCQA/bandit/pull/489
This commit is contained in:
Ben Nemec 2019-05-15 15:20:46 +00:00
parent 292a952e2b
commit 810d60a557
1 changed files with 3 additions and 2 deletions

View File

@ -4,7 +4,8 @@
hacking>=1.1.0,<1.2.0 # Apache-2.0
stestr>=2.0.0 # Apache-2.0
sphinx!=1.6.6,!=1.6.7,>=1.6.5 # BSD
sphinx!=1.6.6,!=1.6.7,>=1.6.5,<2.0.0;python_version=='2.7' # BSD
sphinx!=1.6.6,!=1.6.7,>=1.6.5;python_version>='3.4' # BSD
openstackdocstheme>=1.18.1 # Apache-2.0
mock>=2.0.0 # BSD
@ -18,4 +19,4 @@ oslo.config>=5.2.0 # Apache-2.0
reno>=2.5.0 # Apache-2.0
# Bandit security code scanner
bandit>=1.1.0 # Apache-2.0
bandit>=1.1.0,<1.6.0 # Apache-2.0