Blacklist Bandit 1.6.0 due to directory exclusion bug

Dean Troyer · Dean Troyer · commit 6385d64237c9 · 2019-05-09T16:47:46.000-05:00
Bandit 1.6.0 introduces a regression[0] with the -x option, a fix is expected to be included in 1.6.1 soon. [0] PyCQA/bandit#488 [1] PyCQA/bandit#489 Change-Id: I110829ef960e3ee146f47871ef076491244bf4fa Signed-off-by: Dean Troyer <dtroyer@gmail.com>
diff --git a/test-requirements.txt b/test-requirements.txt
@@ -16,7 +16,7 @@ stestr>=1.0.0 # Apache-2.0
 testtools>=2.2.0 # MIT
 tempest>=17.1.0 # Apache-2.0
 osprofiler>=1.4.0 # Apache-2.0
-bandit>=1.1.0 # Apache-2.0
+bandit!=1.6.0,>=1.1.0 # Apache-2.0
 wrapt>=1.7.0 # BSD License
 
 # Install these to generate sphinx autodocs
