Use a more recent version of hacking

[Matthew Thode]

Using such an ancient version of hacking can cause downstream packaging issues.

https://bugs.gentoo.org/643294

[mgorny (mgorny-gentoo-bugs)]

This is the only package requiring old version of dev-python/hacking. Please look into the possibility of making it work with newer versions.

[mgorny (mgorny-gentoo-bugs)]

...which in turn requires ancient dev-python/flake8.

[Gage Hugo (gagehugo)]

I'm a bit confused here, bandit doesn't require hacking to run, it should only be used for testing via testenv. Also Bandit follows other OpenStack projects in terms of setting limits for the requirements, and hacking seems to be in line with both keystone[0] and nova[1]. I'm not sure what the reasoning is for the current cap at below 0.14.0 but I can look into it.

[0] https://github.com/openstack/keystone/blob/master/test-requirements.txt#L5
[1] https://github.com/openstack/nova/blob/master/test-requirements.txt#L5

[Eric Brown (ericwb)]

Fixed with https://review.openstack.org/#/c/533071/

Review accidentally referenced wrong bug number.

[vdupras (vdupras-gentoo-bugs)]

Update: upstream issue is fixed, bandit on pypi is at 1.5.1. Could we bump and clean?

[prometheanfire (prometheanfire-gentoo-bugs)]

should be good now, had to update 90 or so packages though.