Skip to content

fix(deps): update pytest to 9.0.3 - #4713

Merged
SDAChess merged 1 commit into
mainfrom
fix/dependabot-24-pytest/SDAChess
Oct 19, 2026
Merged

SDAChess merged 1 commit into
mainfrom
fix/dependabot-24-pytest/SDAChess

Conversation

@SDAChess

Copy link
Copy Markdown
Member

Summary

Update pytest from 9.0.2 to 9.0.3, the first patched version for GHSA-6w46-j5rx-g56g (CVE-2025-71176). Raise the development requirement so future resolutions cannot select an affected version.

Related Issue

Addresses Dependabot alert 24. The requesting maintainer explicitly waived a separate issue for these dependency updates.

Changes

  • Raise the development requirement from pytest>=8.0 to pytest>=9.0.3.
  • Update only pytest and its requirement metadata in uv.lock; preserve all other locked dependencies.

Testing

  • uv lock --check and uv sync --frozen
  • Python protobuf generation using the frozen lockfile
  • ruff format --check python tasks and ruff check python tasks
  • ty check python
  • pytest python/ -q: 229 tests passed with pytest 9.0.3, including existing temporary-directory fixture tests
  • git diff --check
  • No new tests or E2E changes: this patches the existing test runner dependency.

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)
  • Architecture docs: not applicable

Signed-off-by: Simon Scatton <sscatton@nvidia.com>
@SDAChess
SDAChess added this pull request to the merge queue Oct 19, 2026
Merged via the queue into main with commit 0bfa1e8 Oct 19, 2026
81 checks passed
@SDAChess
SDAChess deleted the fix/dependabot-24-pytest/SDAChess branch October 19, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants