🐛 fix Bump ruff from 0.7.2 to 0.7.3

[manuel-sommer]

#11222

[dryrunsecurity]

DryRun Security Summary

The pull request focuses on updating and enhancing the serializers in the Defect Dojo API version 2, introducing a wide range of new serializers and updates to existing ones, covering various aspects of the application's functionality, and while the changes do not directly introduce any obvious security vulnerabilities, it is important to ensure that the new serializers and their associated data handling processes are thoroughly reviewed and tested to identify and address any potential security issues.

Expand for full summary

Summary:

The changes in this pull request appear to be focused on updating and enhancing the serializers in the Defect Dojo API version 2. The changes introduce a wide range of new serializers and updates to existing ones, covering various aspects of the application's functionality, such as findings management, test management, JIRA and Sonarqube integration, user and group management, and more.

From an application security perspective, these changes do not directly introduce any obvious security vulnerabilities. The updates to the serializers are primarily focused on improving the functionality and flexibility of the API, which is a positive step for the application's overall security posture. However, it is important to ensure that the new serializers and their associated data handling processes are thoroughly reviewed and tested to identify and address any potential security issues.

Files Changed:

1. requirements-lint.txt: This file has been updated to include a minor version update for the ruff package, from 0.7.2 to 0.7.3. This is a routine update and does not raise any immediate security concerns.

2. dojo/api_v2/serializers.py: This file has undergone extensive changes, including the addition of numerous new serializers and updates to existing ones. The changes cover a wide range of functionality, such as findings management, test management, JIRA and Sonarqube integration, user and group management, and more. While these changes do not directly introduce any obvious security vulnerabilities, it is important to ensure that the new serializers and their associated data handling processes are thoroughly reviewed and tested to identify and address any potential security issues.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Configured Codepaths Analyzer	3 findings

Riskiness

🔴 Risk threshold exceeded.

We've notified @mtesauro, @grendel513.

View PR in the DryRun Dashboard.

[manuel-sommer]

I applied your suggestion @cneill

[mtesauro]

Approved