Bump bandit from 1.9.2 to 1.9.3

[dependabot]

Bumps bandit from 1.9.2 to 1.9.3.

Release notes

Sourced from bandit's releases.

1.9.3

What's Changed

• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in PyCQA/bandit#1334
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in PyCQA/bandit#1335
• Fix B608 to detect VALUES( without space by @​kfess in PyCQA/bandit#1337
• Add check for hardcoded passwords in dicts. by @​alanverresen in PyCQA/bandit#1338
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in PyCQA/bandit#1341
• Update tox tests for Python 3.10 by @​willschlitzer in PyCQA/bandit#1346
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @​dependabot[bot] in PyCQA/bandit#1347
• Limit B614 to torch.load deserializers by @​dibussoc in PyCQA/bandit#1348

New Contributors

• @​kfess made their first contribution in PyCQA/bandit#1337
• @​alanverresen made their first contribution in PyCQA/bandit#1338
• @​willschlitzer made their first contribution in PyCQA/bandit#1346
• @​dibussoc made their first contribution in PyCQA/bandit#1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

Commits

• 765f00d Limit B614 to torch.load deserializers (#1348)
• 06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
• 36d6f3c Update tox tests for Python 3.10 (#1346)
• da0d338 [pre-commit.ci] pre-commit autoupdate (#1341)
• 649b9bd Add check for hardcoded passwords in dicts. (#1338)
• 3c56109 Fix B608 to detect VALUES( without space (#1337)
• b790ce2 [pre-commit.ci] pre-commit autoupdate (#1335)
• 0b73bbe Bump actions/checkout from 5 to 6 (#1334)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Code Review Analysis

Code Quality

✅ Code follows style guide - The change is a simple dependency version bump in pyproject.toml:71, which follows standard Python packaging conventions.

✅ No commented-out code - None present in the diff.

✅ Meaningful variable names - N/A (no variables in this change).

✅ DRY principle followed - N/A (dependency version update only).

✅ No defects identified - This is a minor version bump of the bandit security linter from 1.9.2 to 1.9.3 for Python > 3.11. This is a standard maintenance task with minimal risk. The change is properly scoped to only affect Python 3.12+ environments.

✅ Project memory configuration - The .claude/CLAUDE.md file is appropriately general and contains no environment-specific configurations. It correctly documents project architecture, commands, and Python version requirements.

Testing

⚠️ Testing considerations - No tests are directly affected by this dependency version bump. However, since bandit is a security linter:

• The CI pipeline should run successfully with the new version
• The linting workflow should continue to pass
• No test coverage issues (this is a dev dependency, not runtime code)

Note: The automated CI will validate this change. No new tests are needed for a linter version bump.

Documentation

✅ Documentation updates - No documentation updates needed for a dev dependency version bump. The pyproject.toml change is self-documenting.

⚠️ CHANGELOG.md - Not updated, but this is typically acceptable for minor dev dependency bumps. Consider whether your project's policy requires CHANGELOG entries for all dependency updates.

Security

✅ No security issues - This change actually improves security by updating to a newer version of bandit, which is a security linting tool. The update from 1.9.2 to 1.9.3 likely includes bug fixes or improved security checks.

✅ No hardcoded credentials - None present.

✅ No sensitive data - None present.

✅ No license files with AQAAAD strings - None in this diff.

---

Overall Assessment

✅ APPROVED - This is a straightforward dependency version bump with no issues. The change:

• Bumps bandit from 1.9.2 to 1.9.3 for Python 3.12+
• Maintains consistency with the existing pattern (different versions for Python ≤3.11 vs >3.11)
• Represents routine maintenance to keep security tooling current

Recommendation: Merge once CI passes.

Automated code review analyzing defects and coding standards