diff --git a/bandit-1.8.5.tar.gz b/bandit-1.8.5.tar.gz
deleted file mode 100644
index 633de47..0000000
--- a/bandit-1.8.5.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:db812e9c39b8868c0fed5278b77fffbbaba828b4891bc80e34b9c50373201cfd
-size 4237566
diff --git a/bandit-1.8.6.tar.gz b/bandit-1.8.6.tar.gz
new file mode 100644
index 0000000..44dd59b
--- /dev/null
+++ b/bandit-1.8.6.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dbfe9c25fc6961c2078593de55fd19f2559f9e45b99f1272341f5b95dea4e56b
+size 4240271
diff --git a/python-bandit.changes b/python-bandit.changes
index 2bbf729..77fe566 100644
--- a/python-bandit.changes
+++ b/python-bandit.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed Jul 23 07:18:53 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
+
+- Update to 1.8.6
+  * Bump sigstore/cosign-installer from 3.8.2 to 3.9.0
+    by @dependabot in (#1279)
+  * Bump docker/setup-buildx-action from 3.10.0 to 3.11.1
+    by @dependabot in (#1278)
+  * Added hint to FreeBSD package in doc/source/integrations.rst
+    by @daniel-mohr in (#1282)
+  * Bump sigstore/cosign-installer from 3.9.0 to 3.9.1
+    by @dependabot in (#1284)
+  * Huggingface revision pinning by @lukehinds in (#1281)
+
 -------------------------------------------------------------------
 Wed Jun 25 10:03:33 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
 
diff --git a/python-bandit.spec b/python-bandit.spec
index ce182ce..7ef9302 100644
--- a/python-bandit.spec
+++ b/python-bandit.spec
@@ -30,7 +30,7 @@
 %bcond_without libalternatives
 %{?sle15_python_module_pythons}
 Name:           python-bandit
-Version:        1.8.5
+Version:        1.8.6
 Release:        0
 Summary:        Security oriented static analyser for Python code
 License:        Apache-2.0