Update dependency bandit to v1.6.1 - autoclosed

[renovate]

This PR contains the following updates:

Package	Update	Change
bandit (source)	minor	1.5.7 -> 1.6.1

---

Release Notes

mtrudel/bandit (bandit)

v1.6.1

Compare Source

Enhancements

• Add deflate support when sending chunked responses (#​429)

Fixes

• Bring in updated HPAX to fix HTTP/2 error cases seen in AWS load balancing
  environments (#​392)
• Improve handle of pipelined HTTP/1.1 requests (#​437)
• Improve error handling when dealing with socket errors (#​433)

Changes

• Use Plug.Call.inform/2 to send websocket upgrades (#​428)

v1.6.0

Compare Source

Enhancements

• Add framework for supporting optimized native code on various hot paths (#​394,
  thanks @​alisinabh!)
• Pass conn and exception data as logger metadata (#​417 & #​420, thanks @​grzuy!)
• Loosen hpax dependency requirements
• Add log_client_closures http option, defaulting to false (#​397, thanks @​goncalotomas!)
• Handle plugs that throw a result (#​411, thanks @​grzuy!)

Fixes

• Improve content-length send logic per RFC9110§8.6/8.7
• Explicitly signal keepalives in HTTP/1.0 requests

Changes

• Fix typo & clarify docs
• Update security policy

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.