Update dependency bandit to v1.10.4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bandit (source)	prod	minor	1.8.0 → 1.10.4

---

Release Notes

mtrudel/bandit (bandit)

v1.10.4

Compare Source

Enhancements

• Support {:shutdown, :disconnected} as a normal WebSocket result code (#​576, thanks @​wwitek-whatnot!)

v1.10.3

Compare Source

Enhancements

• Support authority form requests for CONNECT requests (#​571)
• Narrow acceptance of asterisk form requests to OPTIONS requests (#​571)
• Detect client disconnect on timeout in ensure_completed (#​566, thanks @​pepicrft!)
• Improve http2 sendfile streaming (#​565, thanks @​elibosley!)

v1.10.2

Compare Source

Enhancements

• Distinguish client disconnects from genuine body read timeouts (#​564, thanks @​pepicrft!)

v1.10.1

Compare Source

Changes

• Change default preference order for compression methods to be 'zstd (if present), gzip, deflate' (#​562)

Fixes

• Allow :zstd_options key to be set in config (#​558, thanks @​Fudoshiki!)
• Fix error where deflate responses weren't always completely sent (#​559, thanks @​josevalim!)

v1.10.0

Compare Source

Enhancements

• Expose response_encodings to allow specifying an explicit preference order to compression encodings (#​555)

v1.9.0

Compare Source

Enhancements

• Skip body draining when Connection: close is set (#​546, thanks @​pepicrft!)
• Make deflate options for WebSockets configurable (#​540, thanks @​proxima!)
• Mitigate HTTP/2 rapid reset attacks (#​533, thanks @​NelsonVides!)
• Implement improved respect for SETTINGS_MAX_CONCURRENT_STREAMS (#​524, thanks @​NelsonVides!)
• Support zstd HTTP compression (#​514, thanks @​mattmatters!)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.