Bump the pip-dependencies group across 1 directory with 2 updates

Bumps the pip-dependencies group with 2 updates in the /third_party directory: [bandit](https://github.com/PyCQA/bandit) and [codespell](https://github.com/codespell-project/codespell).


Updates `bandit` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.9.3...1.9.4)

Updates `codespell` from 2.4.1 to 2.4.2
- [Release notes](https://github.com/codespell-project/codespell/releases)
- [Commits](codespell-project/codespell@v2.4.1...v2.4.2)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: codespell
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

third_party/requirements.txt

@@ -4,7 +4,7 @@ black==24.3.0
 clang-format==15.0.7
 cmake-format==0.6.13
 # Linting the source code
-bandit==1.9.3
+bandit==1.9.4
 # Tests
 packaging==26.0
 # Generating HTML documentation
@@ -18,6 +18,6 @@ breathe==4.36.0
 sphinx==8.1.3
 sphinx_book_theme==1.1.3
 # Spelling check in documentation
-codespell==2.4.1
+codespell==2.4.2
 pyenchant==3.3.0
 sphinxcontrib-spelling==8.0.2