Update bandit requirement from >=1.5.1 to >=1.8.6

[dependabot]

Updates the requirements on bandit to permit the latest version.

Release notes

Sourced from bandit's releases.

1.8.6

What's Changed

• Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @​dependabot in PyCQA/bandit#1279
• Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @​dependabot in PyCQA/bandit#1278
• added hint to FreeBSD package in doc/source/integrations.rst by @​daniel-mohr in PyCQA/bandit#1282
• Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @​dependabot in PyCQA/bandit#1284
• Huggingface revision pinning by @​lukehinds in PyCQA/bandit#1281

New Contributors

• @​daniel-mohr made their first contribution in PyCQA/bandit#1282

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

Commits

• 2d0b675 Huggingface revision pinning (#1281)
• 4cd1337 Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#1284)
• ffed1bb added hint to FreeBSD package in doc/source/integrations.rst (#1282)
• 090ba0f Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#1278)
• 33c6789 Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#1279)
• 23d269a Fix for publish to PyPI failure (#1273)
• e3ff8b5 Fix the rendering of the CI/CD doc (#1274)
• 61d1667 add github-actions documentation (#1172)
• cea2b1c Bump docker/build-push-action from 6.17.0 to 6.18.0 (#1268)
• 2d577a6 [pre-commit.ci] pre-commit autoupdate (#1266)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Assignees

The following users could not be added as assignees: ahreccese. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (f8b88fb) to head (e01de55).

Additional details and impacted files

@@            Coverage Diff            @@
##               dev       #10   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines           28        28           
=========================================
  Hits            28        28           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.