Merge pull request #839 from secure-systems-lab/dependabot/pip/test-a…

…nd-lint-dependencies-e8658e19f9

Bump ruff from 0.4.10 to 0.5.0 in the test-and-lint-dependencies group

requirements-lint.txt

@@ -1,2 +1,2 @@
 mypy==1.10.1
-ruff==0.4.10
+ruff==0.5.0

securesystemslib/_gpg/constants.py

@@ -36,8 +36,8 @@ def is_available_gnupg(gnupg: str, timeout: Optional[int] = None) -> bool:
 
     gpg_version_cmd = shlex.split(f"{gnupg} --version")
     try:
-        subprocess.run(
-            gpg_version_cmd,  # noqa: S603
+        subprocess.run(  # noqa: S603
+            gpg_version_cmd,
             capture_output=True,
             timeout=timeout,
             check=True,

securesystemslib/_gpg/functions.py

@@ -112,8 +112,8 @@ def create_signature(content, keyid=None, homedir=None, timeout=GPG_TIMEOUT):
 
     command = gpg_sign_command(keyarg=keyarg, homearg=homearg)
 
-    gpg_process = subprocess.run(
-        command,  # noqa: S603
+    gpg_process = subprocess.run(  # noqa: S603
+        command,
         input=content,
         check=False,
         capture_output=True,
@@ -280,8 +280,8 @@ def export_pubkey(keyid, homedir=None, timeout=GPG_TIMEOUT):
     # TODO: Consider adopting command error handling from `create_signature`
     # above, e.g. in a common 'run gpg command' utility function
     command = gpg_export_pubkey_command(keyid=keyid, homearg=homearg)
-    gpg_process = subprocess.run(
-        command,  # noqa: S603
+    gpg_process = subprocess.run(  # noqa: S603
+        command,
         capture_output=True,
         timeout=timeout,
         check=True,