diff --git a/requirements-dev.txt b/requirements-dev.txt
index f1fc70e..9192658 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -5,7 +5,7 @@
 # Keep Flake8 plugins in sync with `.pre-commit-config.yaml` and
 # `.flake8`!
 
-bandit[toml] >=1.0, <2.0
+bandit[toml] >=1.8.6, <2.0
 black >=23.0, <24.0
 flake8 >=7.0, <8.0
 flake8-bandit >=4.0, <5.0