From 264617472162b9040286f068c1666d6acb1f0927 Mon Sep 17 00:00:00 2001
From: Wouter Vanden Hove <wouter@libranet.eu>
Date: Thu, 12 Dec 2024 12:45:08 +0100
Subject: [PATCH] fix bandits asserts alerts

---
 .github/workflows/dependabot-auto-merge.yaml | 3 ++-
 pyproject.toml                               | 4 ++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/dependabot-auto-merge.yaml b/.github/workflows/dependabot-auto-merge.yaml
index 4d49f5d..7bf72b8 100644
--- a/.github/workflows/dependabot-auto-merge.yaml
+++ b/.github/workflows/dependabot-auto-merge.yaml
@@ -12,4 +12,5 @@ jobs:
       - uses: ahmadnassri/action-dependabot-auto-merge@v2
         with:
           target: minor
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          # github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.TOKEN_AUTOMERGE }}
diff --git a/pyproject.toml b/pyproject.toml
index 5003bc3..9fc9b23 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -27,7 +27,7 @@ exclude_dirs = [".venv", "var"]
 recursive = true
 skips = [
     # see https://bandit.readthedocs.io/en/1.7.3/plugins/index.html#plugin-id-groupings
-    # "B101", # assert_used
+    "B101", # assert_used
 ]
 targets = ["docs", "src", "tests"]
 
@@ -38,7 +38,7 @@ targets = ["docs", "src", "tests"]
 [tool.black]
 include = '\.py$'          # regex -> single-quotes
 line-length = 120
-target-version = ["py310"]
+target-version = ["py312"]
 
 
 [tool.coverage.html]