Commit `3cbb408d83`

3cbb408d83668d5c2d5b0bbccf548c832345c870

parent: 44167710cb

Verified · cmc

cmc <hello@cleberg.net> · 2026-07-20 17:13 UTC

chore(deps): allow pytest 9 and upgrade to 9.1.1

Closes CVE-2025-71176 (tmpdir handling). Test-only dependency, never in
the runtime image.

Floor raised to 9.0.3 rather than just dropping the <9.0 ceiling: with the
floor left at 8.2 a fresh resolve could still land on a vulnerable 8.x and
the advisory would stay open.

Layout: unified · split

pyproject.toml +1 −1

		@@ -21,7 +21,7 @@ dependencies = [
21	21
22	22	[project.optional-dependencies]
23	23	dev = [
24		"pytest>=8.2,<9.0",
	24	"pytest>=9.0.3",
25	25	]
26	26
27	27	[project.scripts]

uv.lock +4 −4

		@@ -432,7 +432,7 @@ wheels = [
432	432
433	433	[[package]]
434	434	name = "pytest"
435		version = "8.4.2"
	435	version = "9.1.1"
436	436	source = { registry = "https://pypi.org/simple" }
437	437	dependencies = [
438	438	{ name = "colorama", marker = "sys_platform == 'win32'" },
		@@ -441,9 +441,9 @@ dependencies = [
441	441	{ name = "pluggy" },
442	442	{ name = "pygments" },
443	443	]
444		sdist = { url = "https://files.pythonhosted.org/packages/a3/5c/00a0e072241553e1a7496d638deababa67c5058571567b92a7eaa258397c/pytest-8.4.2.tar.gz", hash = "sha256:86c0d0b93306b961d58d62a4db4879f27fe25513d4b969df351abdddb3c30e01", size = 1519618, upload-time = "2025-09-04T14:34:22.711Z" }
	444	sdist = { url = "https://files.pythonhosted.org/packages/e4/47/b9efed96c114afcfa3c9d3fe98a76a1d14c74a9e266d397cf6eb64be5e01/pytest-9.1.1.tar.gz", hash = "sha256:1088fbde8f2b49d95a549a195707afa7a76a3ce9bcadc26b6d71f0ffda5fe313", size = 1636369, upload-time = "2026-06-19T10:58:32.857Z" }
445	445	wheels = [
446		{ url = "https://files.pythonhosted.org/packages/a8/a4/20da314d277121d6534b3a980b29035dcd51e6744bd79075a6ce8fa4eb8d/pytest-8.4.2-py3-none-any.whl", hash = "sha256:872f880de3fc3a5bdc88a11b39c9710c3497a547cfa9320bc3c5e62fbf272e79", size = 365750, upload-time = "2025-09-04T14:34:20.226Z" },
	446	{ url = "https://files.pythonhosted.org/packages/24/25/1de2678b631f5a49215c6c96fff41ba892b0a34df68d6d80292b1b48aa7f/pytest-9.1.1-py3-none-any.whl", hash = "sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c", size = 386536, upload-time = "2026-06-19T10:58:31.347Z" },
447	447	]
448	448
449	449	[[package]]
		@@ -575,7 +575,7 @@ requires-dist = [
575	575	{ name = "httpx", specifier = ">=0.27,<1.0" },
576	576	{ name = "pydantic", specifier = ">=2.8,<3.0" },
577	577	{ name = "pydantic-settings", specifier = ">=2.3,<3.0" },
578		{ name = "pytest", marker = "extra == 'dev'", specifier = ">=8.2,<9.0" },
	578	{ name = "pytest", marker = "extra == 'dev'", specifier = ">=9.0.3" },
579	579	{ name = "sqlalchemy", specifier = ">=2.0,<3.0" },
580	580	{ name = "uvicorn", extras = ["standard"], specifier = ">=0.30,<1.0" },
581	581	]

Commit 3cbb408d83

Commit `3cbb408d83`