From da9c4bf6c89a26c3abadae4b204daeead2aec1c4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 19 Jul 2026 12:49:52 +0000
Subject: [PATCH] dependencies: bump the python-development group across 1
 directory with 2 updates

Bumps the python-development group with 2 updates in the / directory: [bandit](https://github.com/PyCQA/bandit) and [pip-tools](https://github.com/jazzband/pip-tools).


Updates `bandit` from 1.8.0 to 1.9.4
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](https://github.com/PyCQA/bandit/compare/1.8.0...1.9.4)

Updates `pip-tools` from 7.4.1 to 7.6.0
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jazzband/pip-tools/compare/7.4.1...v7.6.0)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-development
- dependency-name: pip-tools
  dependency-version: 7.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements-dev.in  |  4 ++--
 requirements-dev.txt | 16 +++++++++-------
 2 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/requirements-dev.in b/requirements-dev.in
index 9532f3f..ccb01b7 100644
--- a/requirements-dev.in
+++ b/requirements-dev.in
@@ -1,8 +1,8 @@
 -r requirements.in
-bandit==1.8.0
+bandit==1.9.4
 detect-secrets==1.5.0
 mypy==2.3.0
 pip-audit==2.10.1
-pip-tools==7.4.1
+pip-tools==7.6.0
 ruff==0.15.22
 types-requests==2.33.0.20260712
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 1aa17b3..58adbf2 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -44,9 +44,9 @@ ast-serialize==0.6.0 \
     --hash=sha256:e61580a69faf47e3689795367ed211f2a10fd741478cc0f36a0f128793360aad \
     --hash=sha256:f2ff3baffc3a29c1f15bc9098aa0c09763410262d5e6cef42116f7356c184554
     # via mypy
-bandit==1.8.0 \
-    --hash=sha256:b1a61d829c0968aed625381e426aa378904b996529d048f8d908fa28f6b13e38 \
-    --hash=sha256:b5bfe55a095abd9fe20099178a7c6c060f844bfd4fe4c76d28e35e4c52b9d31e
+bandit==1.9.4 \
+    --hash=sha256:b589e5de2afe70bd4d53fa0c1da6199f4085af666fde00e8a034f152a52cd628 \
+    --hash=sha256:f89ffa663767f5a0585ea075f01020207e966a9c0f2b9ef56a57c7963a3f6f8e
     # via -r requirements-dev.in
 boolean-py==5.0 \
     --hash=sha256:60cbc4bad079753721d32649545505362c754e121570ada4658b852a3a318d95 \
@@ -183,7 +183,9 @@ detect-secrets==1.5.0 \
 exceptiongroup==1.3.1 \
     --hash=sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219 \
     --hash=sha256:a7a39a3bd276781e98394987d3a5701d0c4edffb633bb7a5144577f82c773598
-    # via anyio
+    # via
+    #   -r requirements.in
+    #   anyio
 filelock==3.31.0 \
     --hash=sha256:739b73e580fe88bb78d830aeddbc492519ece3d97ac8368de13a2032c61010c1 \
     --hash=sha256:c188cbc4307c18894c5424fa73f97ea7fa127ddf62192487546da3a214d0a381
@@ -465,9 +467,9 @@ pip-requirements-parser==32.0.1 \
     --hash=sha256:4659bc2a667783e7a15d190f6fccf8b2486685b6dba4c19c3876314769c57526 \
     --hash=sha256:b4fa3a7a0be38243123cf9d1f3518da10c51bdb165a2b2985566247f9155a7d3
     # via pip-audit
-pip-tools==7.4.1 \
-    --hash=sha256:4c690e5fbae2f21e87843e89c26191f0d9454f362d8acdbd695716493ec8b3a9 \
-    --hash=sha256:864826f5073864450e24dbeeb85ce3920cdfb09848a3d69ebf537b521f14bcc9
+pip-tools==7.6.0 \
+    --hash=sha256:4bd99155b6d8de358a214b0865e1a2855a453570c1a83d40f7b564870b8657be \
+    --hash=sha256:c1c59f7844df4866fa9542d3f50d1f44be537ac0027cb50b2563d6a992853981
     # via -r requirements-dev.in
 platformdirs==4.10.1 \
     --hash=sha256:0e4eff26be2d75293977f7cddc153fd9b8eaa7fb0c7b64ffe4076cb443117443 \