From 2074be85a6c39cf866bd0bf4aabe1e65564f2bbd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 03:12:51 +0000
Subject: [PATCH] chore(deps-dev): bump bandit from 1.9.2 to 1.9.4

Bumps [bandit](https://github.com/PyCQA/bandit) from 1.9.2 to 1.9.4.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](https://github.com/PyCQA/bandit/compare/1.9.2...1.9.4)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 poetry.lock    | 8 ++++----
 pyproject.toml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index ba4b344..779c866 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -72,14 +72,14 @@ cryptography = "*"
 
 [[package]]
 name = "bandit"
-version = "1.9.2"
+version = "1.9.4"
 description = "Security oriented static analyser for python code."
 optional = false
 python-versions = ">=3.10"
 groups = ["dev"]
 files = [
-    {file = "bandit-1.9.2-py3-none-any.whl", hash = "sha256:bda8d68610fc33a6e10b7a8f1d61d92c8f6c004051d5e946406be1fb1b16a868"},
-    {file = "bandit-1.9.2.tar.gz", hash = "sha256:32410415cd93bf9c8b91972159d5cf1e7f063a9146d70345641cd3877de348ce"},
+    {file = "bandit-1.9.4-py3-none-any.whl", hash = "sha256:f89ffa663767f5a0585ea075f01020207e966a9c0f2b9ef56a57c7963a3f6f8e"},
+    {file = "bandit-1.9.4.tar.gz", hash = "sha256:b589e5de2afe70bd4d53fa0c1da6199f4085af666fde00e8a034f152a52cd628"},
 ]
 
 [package.dependencies]
@@ -3953,4 +3953,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.12"
-content-hash = "dc1a42e5f16948ba48a8437fd90ffb943d7192e8f0a5ef86c8023cc9425bc38e"
+content-hash = "ba8f00a7b17957eaf83535c8df33b47a55270bf0cff9fb3fa521eb15b3a43cd8"
diff --git a/pyproject.toml b/pyproject.toml
index df659c5..d0bdff9 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -22,7 +22,7 @@ flake8 = "^7.3.0"
 mypy = "^1.19.0"
 pylint = "^4.0.4"
 ruff = "^0.14.9"
-bandit = "^1.9.2"
+bandit = "^1.9.4"
 safety = "^3.7.0"
 pip-audit = "^2.10.0"
 black = "^25.12.0"