pr-reviewer/requirements-dev.txt

# Local/dev-only test dependencies. NOT installed in production.
# CI installs `-r requirements.txt` plus pytest directly (see .github/workflows).
# Keep this in sync with the CI subproject-tests job: only pytest + python-dotenv.
-r requirements.txt
pytest==9.1.1
python-dotenv==1.2.2
Add pr-reviewer local PR review tool A single-user local dashboard that pulls open PRs from the Sea-Haven-Industries org, reviews each with a Fireworks model in the BLOCK/FIX/NIT/QUESTION format, and posts the review to GitHub as the token owner. Runs only on localhost; secrets stay in a gitignored .env and never reach the browser. Structured as an app/ package plus a static/ frontend so the module imports and static mount resolve. HTTP uses httpx2 (the runtime lib starlette's TestClient now prefers), pinned in requirements.txt. Includes a stdlib-only pytest suite (network mocked, no extra test deps so CI needs only pytest) with a skip-by-default live Fireworks test, and CI wired to the org ci-python-app reusable workflow to lint app and tests and run the mocked suite fully offline. Dependabot covers pip and github-actions. 2026-07-01 13:45:07 -04:00			`# Local/dev-only test dependencies. NOT installed in production.`
			# CI installs `-r requirements.txt` plus pytest directly (see .github/workflows).
			`# Keep this in sync with the CI subproject-tests job: only pytest + python-dotenv.`
			`-r requirements.txt`
Bump pytest to 9.1.1 for CVE-2025-71176 The pre-push security scanner flagged pytest 8.3.4 (CVE-2025-71176). Dev/test-only dependency, not shipped, but bump to the patched release. Suite passes on 9.x unchanged. 2026-07-01 19:12:45 -04:00			`pytest==9.1.1`
Add pr-reviewer local PR review tool A single-user local dashboard that pulls open PRs from the Sea-Haven-Industries org, reviews each with a Fireworks model in the BLOCK/FIX/NIT/QUESTION format, and posts the review to GitHub as the token owner. Runs only on localhost; secrets stay in a gitignored .env and never reach the browser. Structured as an app/ package plus a static/ frontend so the module imports and static mount resolve. HTTP uses httpx2 (the runtime lib starlette's TestClient now prefers), pinned in requirements.txt. Includes a stdlib-only pytest suite (network mocked, no extra test deps so CI needs only pytest) with a skip-by-default live Fireworks test, and CI wired to the org ci-python-app reusable workflow to lint app and tests and run the mocked suite fully offline. Dependabot covers pip and github-actions. 2026-07-01 13:45:07 -04:00			`python-dotenv==1.2.2`