diff --git a/pyproject.toml b/pyproject.toml
index a209429f..942407a7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -58,7 +58,7 @@ dependencies = [
 [dependency-groups]
 dev = [
     "pytest-asyncio>=0.23.0",
-    "bandit[sarif]>=1.8.3",
+    "bandit[sarif]>=1.9.4",
     "codespell>=2.4.1",
     "pre-commit>=4.2.0",
     "pyright>=1.1.398",
diff --git a/uv.lock b/uv.lock
index 80298752..3ad7faeb 100644
--- a/uv.lock
+++ b/uv.lock
@@ -560,7 +560,7 @@ requires-dist = [
 
 [package.metadata.requires-dev]
 dev = [
-    { name = "bandit", extras = ["sarif"], specifier = ">=1.8.3" },
+    { name = "bandit", extras = ["sarif"], specifier = ">=1.9.4" },
     { name = "codespell", specifier = ">=2.4.1" },
     { name = "fakeredis", specifier = ">=2.36.0" },
     { name = "pre-commit", specifier = ">=4.2.0" },