update cmakelists
update bandit version