Tests do not load on Python 3.7 with `importlib-metadata` 5.0.0 and `stevedore` 3.5.1

Describe the bug

Jump to workaround

While the release of stevedore 3.5.1 appears to have resolved the problems reported in #951 and #953 I am seeing a new problem when using the following on Python 3.7:

$ pip list | grep "bandit\|importlib-metadata\|stevedore"
bandit               1.7.4
importlib-metadata   5.0.0
stevedore            3.5.1

I get the following:

$ bandit --version
bandit 1.7.4
  python version = 3.7.15 (default, Oct 14 2022, 02:08:07) [GCC 11.2.0]
$ bandit -r .
[main]  INFO    profile include tests: None
[main]  INFO    profile exclude tests: None
[main]  INFO    cli include tests: None
[main]  INFO    cli exclude tests: None
[main]  INFO    running on Python 3.7.15
[main]  ERROR   No tests would be run, please check the profile.

In comparison in the same directory:

$ pip list | grep "bandit\|importlib-metadata\|stevedore"
bandit               1.7.4
importlib-metadata   4.13.0
stevedore            3.5.1
$ bandit --version
bandit 1.7.4
  python version = 3.7.15 (default, Oct 14 2022, 02:08:07) [GCC 11.2.0]
$ bandit -r .
[main]  INFO    profile include tests: None
[main]  INFO    profile exclude tests: None
[main]  INFO    cli include tests: None
[main]  INFO    cli exclude tests: None
[main]  INFO    running on Python 3.7.15
Run started:2022-10-14 18:09:03.392403

Test results:
        No issues identified.

Code scanned:
        Total lines of code: 1949
        Total lines skipped (#nosec): 0

Run metrics:
        Total issues (by severity):
                Undefined: 0
                Low: 0
                Medium: 0
                High: 0
        Total issues (by confidence):
                Undefined: 0
                Low: 0
                Medium: 0
                High: 0
Files skipped (0):

Workaround

Pinning to importlib-metadata<5 works. If you are using bandit in a pre-commit configuration you can add the following to your hook configuration:

additional_dependencies:
  - importlib-metadata<5

such that a full hook configuration looks something like:

- repo: https://github.com/PyCQA/bandit
    rev: 1.7.4
    hooks:
      - id: bandit
        name: bandit
        additional_dependencies:
          - importlib-metadata<5

Reproduction steps

1. Install `bandit` into a Python 3.7 environment.
2. Attempt to use `bandit` to check code.

Expected behavior

bandit would successfully load tests and use them.

Bandit version

1.7.4 (Default)

Python version

3.7

Additional context

No response

[emcd]

For those wondering what the workaround is this time; it is the same as for the previous problem: pip install bandit 'importlib-metadata<5' or equivalent.

[mportesdev]

stevedore 3.5.2 is out and everything seems to be back to normal.