[automation] Auto-update linters version, help and documentation

Author: nvuillam

.automation/generated/linter-helps.json

@@ -2,7 +2,7 @@
     "actionlint": "1.7.9",
     "ansible-lint": "25.11.1",
     "arm-ttk": "0.0.0",
-    "bandit": "1.9.1",
+    "bandit": "1.9.2",
     "bash-exec": "5.2.37",
     "bicep_linter": "0.39.26",
     "black": "25.11.0",

.automation/generated/linter-versions.json

@@ -161,6 +161,7 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l
   - [gitleaks](https://github.com/gitleaks/gitleaks) from 8.28.0 to **8.29.1** on 2025-11-24
   - [grype](https://github.com/anchore/grype) from 0.104.0 to **0.104.1** on 2025-11-24
   - [ansible-lint](https://ansible-lint.readthedocs.io/) from 25.11.0 to **25.11.1** on 2025-11-25
+  - [bandit](https://bandit.readthedocs.io/en/latest/) from 1.9.1 to **1.9.2** on 2025-11-26
 <!-- linter-versions-end -->
 
 ## [v9.1.0] - 2025-10-07

CHANGELOG.md

@@ -8,7 +8,7 @@
 | [**actionlint**](https://github.com/rhysd/actionlint){target=_blank}                                    |     1.7.9     |                  [MIT](licenses/actionlint.md)                  |                          [![GitHub stars](https://img.shields.io/github/stars/rhysd/actionlint?cacheSeconds=3600)](https://github.com/rhysd/actionlint){target=_blank}                          | [ACTION](descriptors/action_actionlint.md)                                                                                                                                                 |   :white_circle:    |                                          [Repository](https://github.com/rhysd/actionlint){target=_blank}                                           |
 | [**ansible-lint**](https://github.com/ansible/ansible-lint){target=_blank}                              |    25.11.1    |            [GPL-3.0-only](licenses/ansible-lint.md)             |                      [![GitHub stars](https://img.shields.io/github/stars/ansible/ansible-lint?cacheSeconds=3600)](https://github.com/ansible/ansible-lint){target=_blank}                      | [ANSIBLE](descriptors/ansible_ansible_lint.md)                                                                                                                                             |   :white_circle:    |                                        [Repository](https://github.com/ansible/ansible-lint){target=_blank}                                         |
 | [**arm-ttk**](https://github.com/Azure/arm-ttk){target=_blank}                                          |      N/A      |                   [MIT](licenses/arm-ttk.md)                    |                             [![GitHub stars](https://img.shields.io/github/stars/Azure/arm-ttk?cacheSeconds=3600)](https://github.com/Azure/arm-ttk){target=_blank}                             | [ARM](descriptors/arm_arm_ttk.md)                                                                                                                                                          |   :white_circle:    |                                            [Repository](https://github.com/Azure/arm-ttk){target=_blank}                                            |
-| [**bandit**](https://github.com/PyCQA/bandit){target=_blank}                                            |     1.9.1     |                [Apache-2.0](licenses/bandit.md)                 |                              [![GitHub stars](https://img.shields.io/github/stars/PyCQA/bandit?cacheSeconds=3600)](https://github.com/PyCQA/bandit){target=_blank}                              | [PYTHON](descriptors/python_bandit.md)                                                                                                                                                     |   :white_circle:    |                                            [Repository](https://github.com/PyCQA/bandit){target=_blank}                                             |
+| [**bandit**](https://github.com/PyCQA/bandit){target=_blank}                                            |     1.9.2     |                [Apache-2.0](licenses/bandit.md)                 |                              [![GitHub stars](https://img.shields.io/github/stars/PyCQA/bandit?cacheSeconds=3600)](https://github.com/PyCQA/bandit){target=_blank}                              | [PYTHON](descriptors/python_bandit.md)                                                                                                                                                     |   :white_circle:    |                                            [Repository](https://github.com/PyCQA/bandit){target=_blank}                                             |
 | [**bash-exec**](https://www.gnu.org/software/bash/){target=_blank}                                      |    5.2.37     |                        GPL-3.0-or-later                         |                                                                                            <!-- -->                                                                                             | [BASH](descriptors/bash_bash_exec.md)                                                                                                                                                      |      <!-- -->       |                                            [Web Site](https://www.gnu.org/software/bash/){target=_blank}                                            |
 | [**bicep_linter**](https://github.com/Azure/bicep){target=_blank}                                       |    0.39.26    |                 [MIT](licenses/bicep_linter.md)                 |                               [![GitHub stars](https://img.shields.io/github/stars/Azure/bicep?cacheSeconds=3600)](https://github.com/Azure/bicep){target=_blank}                               | [BICEP](descriptors/bicep_bicep_linter.md)                                                                                                                                                 |   :white_circle:    |                                             [Repository](https://github.com/Azure/bicep){target=_blank}                                             |
 | [**black**](https://github.com/psf/black){target=_blank}                                                |    25.11.0    |                    [MIT](licenses/black.md)                     |                                 [![GitHub stars](https://img.shields.io/github/stars/psf/black?cacheSeconds=3600)](https://github.com/psf/black){target=_blank}                                 | [PYTHON](descriptors/python_black.md)                                                                                                                                                      |   :white_circle:    |                                              [Repository](https://github.com/psf/black){target=_blank}                                              |

docs/all_linters.md

@@ -45,7 +45,7 @@ Bandit is essential for maintaining secure Python codebases and is widely used i
 
 ## bandit documentation
 
-- Version in MegaLinter: **1.9.1**
+- Version in MegaLinter: **1.9.2**
 - Visit [Official Web Site](https://bandit.readthedocs.io/en/latest/){target=_blank}
 - See [How to configure bandit rules](https://bandit.readthedocs.io/en/latest/config.html#){target=_blank}
   - If custom `.bandit.yml` config file isn't found, [.bandit.yml](https://github.com/oxsecurity/megalinter/tree/main/TEMPLATES/.bandit.yml){target=_blank} will be used
@@ -302,12 +302,12 @@ The following tests were discovered and loaded:
 - Dockerfile commands :
 ```dockerfile
 # renovate: datasource=pypi depName=bandit
-ARG PIP_BANDIT_VERSION=1.9.1
+ARG PIP_BANDIT_VERSION=1.9.2
 # renovate: datasource=pypi depName=bandit_sarif_formatter
 ARG PIP_BANDIT_SARIF_FORMATTER_VERSION=1.1.1
 ```
 
 - PIP packages (Python):
-  - [bandit==1.9.1](https://pypi.org/project/bandit/1.9.1)
+  - [bandit==1.9.2](https://pypi.org/project/bandit/1.9.2)
   - [bandit_sarif_formatter==1.1.1](https://pypi.org/project/bandit_sarif_formatter/1.1.1)
-  - [bandit[toml]==1.9.1](https://pypi.org/project/bandit[toml]/1.9.1)
+  - [bandit[toml]==1.9.2](https://pypi.org/project/bandit[toml]/1.9.2)

docs/descriptors/python_bandit.md

@@ -34,18 +34,18 @@ If MegaLinter with gitleaks runs against a PR on a platform not listed above, an
 
 You can still choose to scan only PR commits in your CI/CD platform by setting the following MegaLinter environment variables:
 
-- `PULL_REQUEST=true`\*
-- `REPOSITORY_GITLEAKS_PR_COMMITS_SCAN: true`
-- `REPOSITORY_GITLEAKS_PR_SOURCE_SHA` with last commit sha from your PR and `REPOSITORY_GITLEAKS_PR_TARGET_SHA` commit sha from your target branch (for example, `main` if you do PR to main branch)
+  - `PULL_REQUEST=true`\*
+  - `REPOSITORY_GITLEAKS_PR_COMMITS_SCAN: true`
+  - `REPOSITORY_GITLEAKS_PR_SOURCE_SHA` with last commit sha from your PR and `REPOSITORY_GITLEAKS_PR_TARGET_SHA` commit sha from your target branch (for example, `main` if you do PR to main branch)
 
     Example commands:
 
-  - Source commit SHA:
+      - Source commit SHA:
         ```bash
         git rev-list -n 1 refs/remotes/origin/<source_branch>
         ```
 
-  - Target commit SHA:
+      - Target commit SHA:
         ```bash
         git rev-parse refs/remotes/origin/<target_branch>
         ```

docs/descriptors/repository_checkov.md

@@ -138,7 +138,7 @@ GLOBAL FLAGS
 
 
 Streaming logs in real time to:
-    /tmp/sfca-2025_11_25_22_19_15_109.log
+    /tmp/sfca-2025_11_26_22_18_17_454.log
 
 Selecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 0%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 14%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 28%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 30%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 31%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 32%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 33%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 34%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 35%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 36%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 37%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 38%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 39%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 40%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 41%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 42%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 53%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 57%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 62%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 72%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 74%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 75%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 75%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 84%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 85%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 87%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 96%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 98%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 99%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 100%; Elapsed time: 1sSelecting rules... done.
 
@@ -406,7 +406,7 @@ Found 248 rule(s) from 6 engine(s):
     4 cpd rule(s) found.
 
 Additional log information written to:
-    /tmp/sfca-2025_11_25_22_19_15_109.log
+    /tmp/sfca-2025_11_26_22_18_17_454.log
 ```
 
 ### Installation on mega-linter Docker image