Update all dependencies

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/ruff-pre-commit	repository	patch	v0.14.13 -> v0.14.14
pycqa/bandit	repository	patch	1.9.2 -> 1.9.3
quay.io/fedora/python-313	final	major	20260115 -> 20260121
quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan	tekton-bundle	digest	0041778 -> f2df541

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.14.14

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.14

pycqa/bandit (pycqa/bandit)

v1.9.3

Compare Source

What's Changed

• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in PyCQA#1334
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in PyCQA#1335
• Fix B608 to detect VALUES( without space by @​kfess in PyCQA#1337
• Add check for hardcoded passwords in dicts. by @​alanverresen in PyCQA#1338
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in PyCQA#1341
• Update tox tests for Python 3.10 by @​willschlitzer in PyCQA#1346
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @​dependabot[bot] in PyCQA#1347
• Limit B614 to torch.load deserializers by @​dibussoc in PyCQA#1348

New Contributors

• @​kfess made their first contribution in PyCQA#1337
• @​alanverresen made their first contribution in PyCQA#1338
• @​willschlitzer made their first contribution in PyCQA#1346
• @​dibussoc made their first contribution in PyCQA#1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.