Setuptools warnings in output when running tox

[ericwb]

Describe the bug

When running tox -e py39, you will see the following:

/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/dist.py:723: UserWarning: Usage of dash-separated 'description-file' will not be supported in future versions. Please use the underscore name 'description_file' instead
  warnings.warn(
/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/dist.py:723: UserWarning: Usage of dash-separated 'author-email' will not be supported in future versions. Please use the underscore name 'author_email' instead
  warnings.warn(
/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/dist.py:723: UserWarning: Usage of dash-separated 'home-page' will not be supported in future versions. Please use the underscore name 'home_page' instead
  warnings.warn(
/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/command/easy_install.py:156: EasyInstallDeprecationWarning: easy_install command is deprecated. Use build and pip and other standards-based tools.
  warnings.warn(
/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/command/install.py:34: SetuptoolsDeprecationWarning: setup.py install is deprecated. Use build and pip and other standards-based tools.
  warnings.warn(
/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/dist.py:723: UserWarning: Usage of dash-separated 'description-file' will not be supported in future versions. Please use the underscore name 'description_file' instead
  warnings.warn(
/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/dist.py:723: UserWarning: Usage of dash-separated 'author-email' will not be supported in future versions. Please use the underscore name 'author_email' instead
  warnings.warn(
/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/dist.py:723: UserWarning: Usage of dash-separated 'home-page' will not be supported in future versions. Please use the underscore name 'home_page' instead
  warnings.warn(

Reproduction steps

1. tox -e py39
2. Notice the beginning of the output to include several warnings
3.
...

Expected behavior

Ideally should be warning free

Bandit version

1.7.2 (Default)

Python version

3.9

Additional context

No response

[radarhere]

/Users/browne/workspace/bandit/.tox/py39/lib/python3.9/site-packages/setuptools/command/easy_install.py:156: EasyInstallDeprecationWarning: easy_install command is deprecated. Use build and pip and other standards-based tools.

Now that setuptools 80.3.0 has removed the easy_install module, I find that bandit fails to build. You can see this in GitHub Actions - https://github.com/PyCQA/bandit/actions/runs/14815970337/job/41596429394

Edit 1: I see that the problem is not precisely in this package, but rather in pbr. The relevant bug over there would be https://bugs.launchpad.net/pbr/+bug/2107732

Edit 2: setuptools 80.3.0 has been yanked for this reason - https://pypi.org/project/setuptools/80.3.0/