[PR PATCH] bandit: update to 1.6.3.

[PR PATCH] bandit: update to 1.6.3.

[dachshund7]

[-- Attachment #1: Type: text/plain, Size: 314 bytes --]

There is a new pull request by dachshund7 against master on the void-packages repository

https://github.com/dachshund7/void-packages bandit
https://github.com/void-linux/void-packages/pull/27000

bandit: update to 1.6.3.


A patch file from https://github.com/void-linux/void-packages/pull/27000.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-bandit-27000.patch --]
[-- Type: text/x-diff, Size: 1007 bytes --]

From a752cd401a7bc23c8ced617c6534b4b07a5040e1 Mon Sep 17 00:00:00 2001
From: John Hamilton <hamilton@disroot.org>
Date: Sun, 6 Dec 2020 13:01:45 -0800
Subject: [PATCH] bandit: update to 1.6.3.

---
 srcpkgs/bandit/template | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/srcpkgs/bandit/template b/srcpkgs/bandit/template
index 93e6b77aa6b..0e87687e72f 100644
--- a/srcpkgs/bandit/template
+++ b/srcpkgs/bandit/template
@@ -1,7 +1,7 @@
 # Template file for 'bandit'
 pkgname=bandit
-version=1.6.2
-revision=3
+version=1.6.3
+revision=1
 build_style=python3-module
 pycompile_module="bandit"
 hostmakedepends="python3-setuptools"
@@ -12,4 +12,4 @@ maintainer="John Hamilton <hamilton@disroot.org>"
 license="Apache-2.0"
 homepage="https://bandit.readthedocs.io/en/latest/"
 distfiles="${PYPI_SITE}/b/bandit/bandit-${version}.tar.gz"
-checksum=41e75315853507aa145d62a78a2a6c5e3240fe14ee7c601459d0df9418196065
+checksum=d02dfe250f4aa2d166c127ad81d192579e2bfcdb8501717c0e2005e35a6bcf60

Re: [PR PATCH] [Updated] bandit: update to 1.6.3.

[dachshund7]

[-- Attachment #1: Type: text/plain, Size: 319 bytes --]

There is an updated pull request by dachshund7 against master on the void-packages repository

https://github.com/dachshund7/void-packages bandit
https://github.com/void-linux/void-packages/pull/27000

bandit: update to 1.6.3.


A patch file from https://github.com/void-linux/void-packages/pull/27000.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-bandit-27000.patch --]
[-- Type: text/x-diff, Size: 1096 bytes --]

From 4ff8b906018af26178a5337d633c273cbdbd25ed Mon Sep 17 00:00:00 2001
From: John Hamilton <hamilton@disroot.org>
Date: Sun, 6 Dec 2020 13:13:07 -0800
Subject: [PATCH] bandit: update to 1.6.3.

---
 srcpkgs/bandit/template | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/srcpkgs/bandit/template b/srcpkgs/bandit/template
index 93e6b77aa6b8..c4e05b6d61d8 100644
--- a/srcpkgs/bandit/template
+++ b/srcpkgs/bandit/template
@@ -1,9 +1,8 @@
 # Template file for 'bandit'
 pkgname=bandit
-version=1.6.2
-revision=3
+version=1.6.3
+revision=1
 build_style=python3-module
-pycompile_module="bandit"
 hostmakedepends="python3-setuptools"
 depends="python3-GitPython python3-six python3-stevedore python3-yaml
  python3-pbr"
@@ -12,4 +11,4 @@ maintainer="John Hamilton <hamilton@disroot.org>"
 license="Apache-2.0"
 homepage="https://bandit.readthedocs.io/en/latest/"
 distfiles="${PYPI_SITE}/b/bandit/bandit-${version}.tar.gz"
-checksum=41e75315853507aa145d62a78a2a6c5e3240fe14ee7c601459d0df9418196065
+checksum=d02dfe250f4aa2d166c127ad81d192579e2bfcdb8501717c0e2005e35a6bcf60

Re: bandit: update to 1.6.3.

[ericonr]

[-- Attachment #1: Type: text/plain, Size: 432 bytes --]

New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/pull/27000#issuecomment-741838451

Comment:
The build is doing

```
WARNING: The pip package is not available, falling back to EasyInstall for handling setup_requires/test_requires; this is deprecated and will be removed in a future version.
```

Would you mind looking at those requirements and adding them to `hostmakedepends`?

Re: bandit: update to 1.6.3.

[dachshund7]

[-- Attachment #1: Type: text/plain, Size: 315 bytes --]

New comment by dachshund7 on void-packages repository

https://github.com/void-linux/void-packages/pull/27000#issuecomment-742003222

Comment:
The package installs fine with pip on my system, so maybe that was a temporary problem during the build? I'd rather orphan the package than learn how to do deal with that.

Re: [PR PATCH] [Closed]: bandit: update to 1.6.3.

[dachshund7]

[-- Attachment #1: Type: text/plain, Size: 158 bytes --]

There's a closed pull request on the void-packages repository

bandit: update to 1.6.3.
https://github.com/void-linux/void-packages/pull/27000

Description:

Re: bandit: update to 1.6.3.

[ericonr]

[-- Attachment #1: Type: text/plain, Size: 650 bytes --]

New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/pull/27000#issuecomment-742009130

Comment:
@dachshund7 

Would you mind making a PR to drop the package entirely, then? Since it's a leaf package and can be installed with pip.

That isn't a temporary problem, it's a missing dependency during build time. It can be harmless, but it can also hide version incompatibilities with other packages we have. Adding the dependencies so `setuptools` doesn't try to use `EasyInstall` should be pretty simple, since all the dependecies should be listed in either `requirements.txt`, `setup.py` or `setup.cfg`.