diff --git a/requirements-dev.txt b/requirements-dev.txt
index 7aeb07e2..66865d90 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -5,7 +5,7 @@
 # Keep Flake8 plugins in sync with `.pre-commit-config.yaml` and
 # `.flake8`!
 
-bandit[toml] >=1.0, <2.0
+bandit[toml] >=1.8.6, <2.0
 black >=23.0, <24.0
 cffconvert >=2.0, <3.0
 flake8 >=7.0, <8.0