Bump bandit from 1.8.5 to 1.9.2 (#71)

* Bump bandit from 1.8.5 to 1.9.2

Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.5 to 1.9.2.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.8.5...1.9.2)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update to template

* Fix linting issues

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: docktermj <michael@dockter.com>

Author: dependabot[bot]

.claude/CLAUDE.md

@@ -0,0 +1,59 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+This is `mapper-icij`, a Python script that converts ICIJ Offshore Leaks database files (Panama Papers, Paradise Papers, Bahamas Leaks, Offshore Leaks, Pandora Papers) to JSON format for loading into Senzing entity resolution.
+
+## Development Setup
+
+```bash
+# Create virtual environment and install all dependencies
+python -m venv ./venv
+source ./venv/bin/activate
+python -m pip install --upgrade pip
+python -m pip install --group all .
+
+# External dependency: mapper-base must be accessible
+export PYTHONPATH=$PYTHONPATH:/path/to/mapper-base
+```
+
+## Common Commands
+
+```bash
+# Lint (matches CI workflow)
+pylint $(git ls-files '*.py' ':!:docs/source/*')
+
+# Other linting tools available
+black src/
+isort src/
+flake8 src/
+mypy src/
+bandit -c pyproject.toml -r src/
+```
+
+## Running the Mapper
+
+```bash
+python src/icij_mapper.py -i /path/to/csv/files -o output.json [-l stats.json] [-a]
+```
+
+Required input CSV files: `nodes-entities.csv`, `nodes-intermediaries.csv`, `nodes-officers.csv`, `nodes-addresses.csv`, `nodes-others.csv`, `relationships.csv`
+
+## Architecture
+
+The mapper (`src/icij_mapper.py`) follows a single-script design:
+
+1. Loads ICIJ CSV files into a temporary SQLite database for efficient querying
+2. Creates SQL views to join node tables with relationships (edges)
+3. Processes each node type (entity, intermediary, officer, address, other) sequentially
+4. Outputs JSON lines format with Senzing entity resolution attributes
+
+Key external dependency: Requires `base_mapper` from [mapper-base](https://github.com/Senzing/mapper-base) for company name detection and variant handling.
+
+## Code Style
+
+- Line length: 120 characters (black, flake8)
+- Import sorting: isort with black profile
+- See `pyproject.toml` for tool configurations and `.pylintrc` for additional pylint settings

.claude/commands/senzing-code-review.md

@@ -0,0 +1,3 @@
+# Senzing
+
+- Perform the steps specified by <https://raw.githubusercontent.com/senzing-factory/claude/refs/tags/v1/commands/senzing.md>

.claude/commands/senzing.md

@@ -1,4 +1,4 @@
- # Default code owner
+# Default code owner
 
 * @Senzing/senzing-mappers
 

.claude/settings.local.json .claude/settings.json.claude/settings.local.json renamed to .claude/settings.json

@@ -3,11 +3,15 @@
 
 version: 2
 updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
+  - package-ecosystem: github-actions
+    cooldown:
+      default-days: 21
+    directory: /
     schedule:
-      interval: "daily"
-  - package-ecosystem: "pip"
-    directory: "/"
+      interval: daily
+  - package-ecosystem: pip
+    cooldown:
+      default-days: 21
+    directory: /
     schedule:
-      interval: "daily"
+      interval: daily

.github/CODEOWNERS

@@ -1,4 +1,4 @@
-name: add labels standardized
+name: Add labels standardized
 
 on:
   issues:

.github/dependabot.yml

@@ -1,4 +1,4 @@
-name: add to project senzing github organization dependabot
+name: Add to project senzing github organization dependabot
 
 on:
   pull_request:

.github/workflows/add-labels-standardized.yaml

@@ -1,4 +1,4 @@
-name: add to project senzing github organization
+name: Add to project senzing github organization
 
 on:
   issues:

.github/workflows/add-to-project-senzing-dependabot.yaml

@@ -1,13 +1,13 @@
 name: Claude PR Review
 
-concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
-  cancel-in-progress: true
-
 on:
   pull_request:
     types: [opened, synchronize]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 permissions: {}
 
 jobs: