chore(deps): update pre-commit hook pycqa/bandit to v1.9.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
PyCQA/bandit	repository	minor	1.8.3 -> 1.9.2

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

PyCQA/bandit (PyCQA/bandit)

v1.9.2

Compare Source

What's Changed

• Argparse Python 3.14 enhancements by @​ericwb in #​1331
• Check whether Constant value is str by @​ericwb in #​1333

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

v1.9.1

Compare Source

What's Changed

• More Python version related fixes by @​ericwb in #​1327

Full Changelog: PyCQA/bandit@1.9.0...1.9.1

v1.9.0

Compare Source

What's Changed

• Add instructions for Maintainers to create/publish a release by @​ericwb in #​1275
• Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @​dependabot[bot] in #​1289
• Bump docker/login-action from 3.4.0 to 3.5.0 by @​dependabot[bot] in #​1290
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​1291
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​1292
• Replace deprecated datetime.datetime.utcnow() by @​purplezimmermann in #​1295
• Bump actions/setup-python from 5 to 6 by @​dependabot[bot] in #​1296
• Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @​dependabot[bot] in #​1298
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​1303
• Fix typos by @​Shortfinga in #​1305
• Bump docker/login-action from 3.5.0 to 3.6.0 by @​dependabot[bot] in #​1306
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​1315
• Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @​dependabot[bot] in #​1317
• Support of Python 3.14 by @​ericwb in #​1323
• Drop support of end-of-life Python 3.9 by @​ericwb in #​1325
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​1324

New Contributors

• @​purplezimmermann made their first contribution in #​1295
• @​Shortfinga made their first contribution in #​1305

Full Changelog: PyCQA/bandit@1.8.6...1.9.0

v1.8.6

Compare Source

What's Changed

• Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @​dependabot in #​1279
• Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @​dependabot in #​1278
• added hint to FreeBSD package in doc/source/integrations.rst by @​daniel-mohr in #​1282
• Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @​dependabot in #​1284
• Huggingface revision pinning by @​lukehinds in #​1281

New Contributors

• @​daniel-mohr made their first contribution in #​1282

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

v1.8.5

Compare Source

What's Changed

• Fix the rendering of the CI/CD doc by @​ericwb in #​1274
• Fix for publish to PyPI failure by @​ericwb in #​1273

Full Changelog: PyCQA/bandit@1.8.4...1.8.5

v1.8.4

Compare Source

What's Changed

• Add more random functions to B311 check by @​aripollak in #​1235
• Metadata: rename classifier to classifiers by @​ericwb in #​1237
• Bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by @​dependabot in #​1239
• Bump docker/build-push-action from 6.13.0 to 6.14.0 by @​dependabot in #​1238
• Bump docker/build-push-action from 6.14.0 to 6.15.0 by @​dependabot in #​1240
• Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @​dependabot in #​1241
• Bump docker/login-action from 3.3.0 to 3.4.0 by @​dependabot in #​1245
• Bump bandit version in bug template by @​ericwb in #​1247
• Fix traceback from trojansource plugin by @​ericwb in #​1248
• Ensure the man page is built by @​ericwb in #​1257
• Update documentation to cover --severity-level and --confidence-level by @​bmos in #​1254
• Use license property in lieu of classifier by @​ericwb in #​1259
• Fix up some of the warnings when building docs by @​ericwb in #​1258
• Add a doc describing various integrations by @​ericwb in #​1253
• Use ubuntu latest for readthedocs build by @​ericwb in #​1260
• Bump docker/build-push-action from 6.15.0 to 6.16.0 by @​dependabot in #​1261
• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @​dependabot in #​1262
• Remove etc from list of temp paths by @​ericwb in #​1263
• Bump docker/build-push-action from 6.16.0 to 6.17.0 by @​dependabot in #​1265
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in #​1266
• Bump docker/build-push-action from 6.17.0 to 6.18.0 by @​dependabot in #​1268
• add github-actions documentation by @​Killpit in #​1172

New Contributors

• @​aripollak made their first contribution in #​1235
• @​bmos made their first contribution in #​1254
• @​Killpit made their first contribution in #​1172

Full Changelog: PyCQA/bandit@1.8.3...1.8.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.79%. Comparing base (cf14694) to head (782ec75).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #111   +/-   ##
=======================================
  Coverage   71.79%   71.79%           
=======================================
  Files          33       33           
  Lines        1145     1145           
  Branches      142      142           
=======================================
  Hits          822      822           
  Misses        257      257           
  Partials       66       66           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.