
We have two dueling problems in the stable branches that have to be fixed at the same time: * bandit 1.6.0 * sphinx 2.0 This is a squash of the two cherry-picks from master: ---------- Blacklist Bandit 1.6.0 due to directory exclusion bug Bandit 1.6.0 introduces a regression[0] with the -x option, a fix is expected to be included in 1.6.1 soon. [0] https://github.com/PyCQA/bandit/issues/488 [1] https://github.com/PyCQA/bandit/pull/489 Signed-off-by: Dean Troyer <dtroyer@gmail.com> (cherry picked from commit6385d64237
) ---------- Update sphinx requirement. Sphinx 2.0 no longer works on python 2.7, start cappingit there as well. (cherry picked from commitf179117976
) Change-Id: I0076645d9e1a2429efce39f51ceea679fa6c13cb