Ouranosinc / xclim / 9703087793

92%

push

github

Add Deptry, split `dev` into `dev` and `docs` recipes, address bandit security issues  (#1806)

### What kind of change does this PR introduce?

* Adds the `deptry` package to the linters for performing dependency
analyses (unused or missing)
* Pinned a few linting dependencies
* Splits the `dev` dependencies into `dev` and `docs` (both can be
installed with `all`)
* Enables `flake8-bandit` like checks in `ruff`, fixes a few
security-related checks
* `xclim.testing.utils` now have more secure URL auditing checks

### Does this PR introduce a breaking change?

Yes, a new dependency has been added (`deptry`).

Also, `xclim` no longer bundles the documentation dependencies with the
`dev` recipe. Splitting this reduces the number of dependencies needed
to run the tests and also helps us know which dependencies are needed
and where (determined with the aid of `deptry`).

### Other information:

https://deptry.com/
https://docs.astral.sh/ruff/rules/#flake8-bandit-s

33 of 43 new or added lines in 10 files covered. (76.74%)

8822 of 9732 relevant lines covered (90.65%)

5.82 hits per line