Pin `importlib-metadata` in `bandit` environment
@@ -348,6 +348,7 @@ setenv =
PROXY_URL=http://localhost:5015
deps =
{[base]deps}
+ importlib-metadata<5.0
commands =
{envbindir}/python {toxinidir}/../../../eng/tox/create_package_and_install.py \
-d {envtmpdir} \
