deps(deps): bump bandit from 1.12.0 to 1.12.3 in the patches group

[dependabot]

Bumps the patches group with 1 update: bandit.

Updates bandit from 1.12.0 to 1.12.3

Changelog

Sourced from bandit's changelog.

1.12.3 (25 July 2026)

Enhancements

• Cache connection-level data between HTTP/1 keepalives (#603, thanks @​preciz!)

1.12.2 (25 July 2026)

Enhancements

• Improve internal HTTP/2 error handling to be better about closing stream/connection
• Coalesce header and body in to single transport send (#606, thanks @​NelsonVides!)
• Improve compression behaviour when streaming an explicitly length delimited body (#605, thanks @​elibosley!)
• Quiet WebSocket deserialization erorrs, add verbosity config lever (#610, thanks @​ericmj!)
• Send connection: close when we're at max_requests (#613, thanks @​joshdchang!)

Fixes

• Fix bogus check for unmasked WebSocket frames (GHSA-rhh8-5xw9-c3gm, thanks @​lukaszsamson!)
• Enforce max_header_list_size if overridden (GHSA-9q5m-g6v3-6772, thanks @​lukaszsamson!)

1.12.1 (24 July 2026)

Fixes

• Fix DoS issue with fragmented WebSocket frames (CVE-2026-65623, thanks @​PJUllrich!)

Commits

• 6e2ab9c Version bump to 1.12.3
• 9bf3d3b Cache HTTP/1 connection data (#603)
• 6754e85 Version bump to 1.12.2
• 2a390d8 Temp fixup for elixir-mint/hpax#27
• b29160f Use dialyzer ignores instead of hacky _= matches
• 9b53972 Use new machinery from #613 for keepalive
• b1fd8b7 Advertise HTTP/1 max request connection closes (#613)
• d1010f2 Quiet websocket frame deserialization errors (#610)
• 3be51fa feat(adapter): length-delimited send_chunked when content-length is set (#605)
• b2b4357 Coalesce HTTP/2 response HEADERS+DATA into a single socket write (#606)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions