
Bandit 1.6.0 accidentally changed how the exclusion list option is handled and breaks our use of it. Cap to the previous version until Bandit has fixed the problem. Sphinx 2.0 no longer works on python 2.7, so we need to start marking it there as well. Change-Id: Ieaf9c77d62551352833a644ab22dff261c08bb78