Add bandit to pre-commit (#1334)

* Update ruff in .pre-commit-config.yaml

* Add bandit to pre-commit

* Bump bandit from 1.8.2 to 1.8.3

* Bump ruff from 0.9.4 to 0.9.9

* update dev tools

* remove unecessary args in ruff commands

* re-add pytest-cov

Author: bmos

.github/workflows/python-checks.yml

@@ -74,7 +74,7 @@ jobs:
 
             - name: Run ruff format
               run: |
-                ruff format --diff --target-version=py39 .
+                ruff format --diff .
 
     ruff-check:
         runs-on: ubuntu-latest

.pre-commit-config.yaml

@@ -1,9 +1,10 @@
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.9.4
+    rev: 'v0.9.10'
     hooks:
-      # Run the linter.
       - id: ruff
-        args: [ --fix ]
-      # Run the formatter.
       - id: ruff-format
+-   repo: https://github.com/PyCQA/bandit
+    rev: '1.8.3'
+    hooks:
+    - id: bandit

requirements-dev.txt

@@ -1,11 +1,11 @@
 # Testing Requirements
-bandit[toml]==1.8.2
+bandit[toml]==1.8.3
 coverage==7.6.12
 pytest-cov==6.0.0
 pytest-datadir==1.6.1
 pytest-mock==3.14.0
 pytest-xdist==3.6.1
-pytest==8.3.4
+pytest==8.3.5
 requests-mock==1.12.1
-ruff==0.9.4
-testfixtures==8.3.0
+ruff==0.9.10
+testfixtures==8.3.0