diff --git a/poetry.lock b/poetry.lock
index 221a8e5..3759ccc 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -33,14 +33,14 @@ trio = ["trio (>=0.31.0)"]
 
 [[package]]
 name = "bandit"
-version = "1.8.6"
+version = "1.9.1"
 description = "Security oriented static analyser for python code."
 optional = false
-python-versions = ">=3.9"
+python-versions = ">=3.10"
 groups = ["dev"]
 files = [
-    {file = "bandit-1.8.6-py3-none-any.whl", hash = "sha256:3348e934d736fcdb68b6aa4030487097e23a501adf3e7827b63658df464dddd0"},
-    {file = "bandit-1.8.6.tar.gz", hash = "sha256:dbfe9c25fc6961c2078593de55fd19f2559f9e45b99f1272341f5b95dea4e56b"},
+    {file = "bandit-1.9.1-py3-none-any.whl", hash = "sha256:0a1f34c04f067ee28985b7854edaa659c9299bd71e1b7e18236e46cccc79720b"},
+    {file = "bandit-1.9.1.tar.gz", hash = "sha256:6dbafd1a51e276e065404f06980d624bad142344daeac3b085121fcfd117b7cf"},
 ]
 
 [package.dependencies]
@@ -1166,4 +1166,4 @@ files = [
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.13,<4.0"
-content-hash = "0c6e2fe51850ec186dcae4d82fdb70f08cb9ba047536c4b8b6ea747097613d0f"
+content-hash = "5891247474e89a3c28080abf2651650ce5b0de5dcd49fa79253c5062b2043689"
diff --git a/pyproject.toml b/pyproject.toml
index f443b09..dea8bf8 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -48,7 +48,7 @@ build-backend = "poetry.core.masonry.api"
 ruff = "^0.14.4"
 taskipy = "^1.14.1"
 radon = "^6.0.1"
-bandit = "^1.8.6"
+bandit = "^1.9.1"
 mypy = "^1.18.2"
 
 [tool.ruff]