bug: scanning error against dev-requirements.txt

[terriko]

cve-bin-tool is reporting in the Github security tab that our version of black is vulnerable to https://nvd.nist.gov/vuln/detail/CVE-2024-21503 which was for black 24.3.0 . But we're using black==24.8.0 so we shouldn't be getting this warning.

Not sure what's going on. I thought originally it was an old issue I'd forgotten to remove but it's claiming it was current as of yesterday, so something is going wrong in our scan or in how we're reporting on the security tab. It could be related to the cve-bin-tool release or to the corresponding cve-bin-tool-action release.