unstale

pypi / bandit

bandit

What changed in bandit 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-21.

2 security2 behavior and defaults1 tooling5 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.2 on npm

bandit 110 changes

Security 2

  • Adds a check for hardcoded passwords in dictionaries.

    1.9.3release notes

  • B614 is limited to torch.load deserializers.

    1.9.3release notes

Behavior and default changes 2

  • Lowers the version guard to Python 3.12.

    1.9.4release notes

  • The 'no failed test' warning now includes the filename.

    1.9.4release notes

Tooling 1

  • Argparse enhancements for Python 3.14 affect Bandit's command-line interface.

    1.9.2release notes

Fixes and other changes 5

  • Fixes incorrect line-number reporting on multiline function calls.

    1.9.4release notes

  • Fixes a crash when B613 reads from stdin.

    1.9.4release notes

  • Fixes a false positive when the revision is set via a variable.

    1.9.4release notes

  • B608 now detects VALUES( without a space.

    1.9.3release notes

  • Bandit checks whether a Constant value is a string.

    1.9.2release notes