#4 get latest bandit and fix version