chore(deps): update dependency bandit to v1.10.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bandit (source)	dev	minor	1.6.11 → 1.10.3

---

Release Notes

mtrudel/bandit (bandit)

v1.10.3

Compare Source

Enhancements

• Support authority form requests for CONNECT requests (#​571)
• Narrow acceptance of asterisk form requests to OPTIONS requests (#​571)
• Detect client disconnect on timeout in ensure_completed (#​566, thanks @​pepicrft!)
• Improve http2 sendfile streaming (#​565, thanks @​elibosley!)

v1.10.2

Compare Source

Enhancements

• Distinguish client disconnects from genuine body read timeouts (#​564, thanks @​pepicrft!)

v1.10.1

Compare Source

Changes

• Change default preference order for compression methods to be 'zstd (if present), gzip, deflate' (#​562)

Fixes

• Allow :zstd_options key to be set in config (#​558, thanks @​Fudoshiki!)
• Fix error where deflate responses weren't always completely sent (#​559, thanks @​josevalim!)

v1.10.0

Compare Source

Enhancements

• Expose response_encodings to allow specifying an explicit preference order to compression encodings (#​555)

v1.9.0

Compare Source

Enhancements

• Skip body draining when Connection: close is set (#​546, thanks @​pepicrft!)
• Make deflate options for WebSockets configurable (#​540, thanks @​proxima!)
• Mitigate HTTP/2 rapid reset attacks (#​533, thanks @​NelsonVides!)
• Implement improved respect for SETTINGS_MAX_CONCURRENT_STREAMS (#​524, thanks @​NelsonVides!)
• Support zstd HTTP compression (#​514, thanks @​mattmatters!)

v1.8.0

Compare Source

Enhancements

• If the user has set a content-length header when calling send_chunked/3,
  the response is streamed via content-length delimited framing and not chunked (#​510)

v1.7.0

Compare Source

Enhancements

• Add support for new get_sock_data/1 and get_ssl_data/1 callbacks from Plug 1.18 (#​497)
• Honour server-sent Connection: close headers (#​495, thanks @​ruslandoga!)

Fixes

• Don't overwrite non-default HTTP/2 settings when receiving HTTP/2 settings (#​494, thanks @​ns-blee!)
• Fix handling of early-connection error handling in HTTP/2 (#​486)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Failing test