Merge pull request #1918 from lukpueh/pin-direct-test-deps-only

build: pin direct test dependencies only

Author: Lukas Pühringer

requirements-test-pinned.txt

@@ -4,10 +4,10 @@
 -r requirements-pinned.txt
 
 # additional test tools for linting and coverage measurement
-coverage
-black
-isort
-pylint
-mypy
-bandit
-types-requests
+coverage==6.3.2
+black==22.1.0
+isort==5.10.1
+pylint==2.12.2
+mypy==0.941
+bandit==1.7.4
+types-requests==2.27.14

requirements-test.txt

@@ -20,7 +20,7 @@ commands =
     python3 -m coverage report -m --fail-under 97
 
 deps =
-    -r{toxinidir}/requirements-test-pinned.txt
+    -r{toxinidir}/requirements-test.txt
     # Install TUF in editable mode, instead of tox default virtual environment
     # installation (see `skipsdist`), to get relative paths in coverage reports
     --editable {toxinidir}