Bump bandit from 1.9.2 to 1.9.3

[dependabot]

Bumps bandit from 1.9.2 to 1.9.3.

Release notes

Sourced from bandit's releases.

1.9.3

What's Changed

• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in PyCQA/bandit#1334
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in PyCQA/bandit#1335
• Fix B608 to detect VALUES( without space by @​kfess in PyCQA/bandit#1337
• Add check for hardcoded passwords in dicts. by @​alanverresen in PyCQA/bandit#1338
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in PyCQA/bandit#1341
• Update tox tests for Python 3.10 by @​willschlitzer in PyCQA/bandit#1346
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @​dependabot[bot] in PyCQA/bandit#1347
• Limit B614 to torch.load deserializers by @​dibussoc in PyCQA/bandit#1348

New Contributors

• @​kfess made their first contribution in PyCQA/bandit#1337
• @​alanverresen made their first contribution in PyCQA/bandit#1338
• @​willschlitzer made their first contribution in PyCQA/bandit#1346
• @​dibussoc made their first contribution in PyCQA/bandit#1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

Commits

• 765f00d Limit B614 to torch.load deserializers (#1348)
• 06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
• 36d6f3c Update tox tests for Python 3.10 (#1346)
• da0d338 [pre-commit.ci] pre-commit autoupdate (#1341)
• 649b9bd Add check for hardcoded passwords in dicts. (#1338)
• 3c56109 Fix B608 to detect VALUES( without space (#1337)
• b790ce2 [pre-commit.ci] pre-commit autoupdate (#1335)
• 0b73bbe Bump actions/checkout from 5 to 6 (#1334)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Code Review - Pull Request: Bump bandit from 1.9.2 to 1.9.3

Summary

This is a dependency version bump from Dependabot, updating the bandit security linter from version 1.9.2 to 1.9.3 for Python 3.12+.

---

Review Results

Code Quality

• ✅ Code follows style guide: N/A - This is a dependency version update only, no code changes
• ✅ No commented-out code: N/A - No code changes
• ✅ Meaningful variable names: N/A - No code changes
• ✅ DRY principle followed: N/A - No code changes
• ✅ Identify Defects: No defects identified. The change is a minor patch version bump (1.9.2 → 1.9.3) of a security linting tool, which is safe and appropriate. Version constraint python_version > '3.11' properly targets Python 3.12+ pyproject.toml:71
• ✅ Project memory (.claude/CLAUDE.md): The CLAUDE.md file contains appropriate general guidance and no environment-specific configuration issues

Testing

• ✅ Unit tests for new functions: N/A - No functional changes
• ✅ Integration tests for new endpoints: N/A - No functional changes
• ✅ Edge cases covered: N/A - No functional changes
• ✅ Test coverage > 80%: N/A - No impact on test coverage

Documentation

• ❌ Readme updated if needed: The README doesn't require updates for dependency bumps
• ❌ API docs updated: API documentation doesn't require updates for dependency bumps
• ❌ Inline comments for complex logic: N/A - No code changes
• ❌ CHANGELOG.md updated: The CHANGELOG.md was not updated. While dependency bumps are often not documented in user-facing changelogs, it's best practice to track them. However, this is a minor linting tool update with no user impact, so this is acceptable.
• ✅ Markdown files follow CommonMark: N/A - No markdown file changes

Security

• ✅ No hardcoded credentials: None present
• ✅ Input validation implemented: N/A - No code changes
• ✅ Proper error handling: N/A - No code changes
• ✅ No sensitive data in logs: N/A - No code changes
• ✅ No license files (.lic) or AQAAAD strings: None detected in the diff

---

Overall Assessment

✅ APPROVED

This is a clean, straightforward dependency update that:

• Updates a security linting tool (bandit) to the latest patch version
• Properly scopes the version constraint to Python 3.12+
• Introduces no functional changes or security risks
• Follows standard Dependabot practices

No action items required. This PR is safe to merge.

Automated code review analyzing defects and coding standards