What's Changed
* gha: pip: use --user only for pip by efiop in https://github.com/iterative/scmrepo/pull/34
* pygit2: resolve_rev raise a proper exception with `~<n>` like referen… by karajan1001 in https://github.com/iterative/scmrepo/pull/32
* pinning `bandit` version to 1.7.2 because of the broken of flake8-bandit by karajan1001 in https://github.com/iterative/scmrepo/pull/38