From d60efeca28642e2f0fe4dd55720f5eb1bafba2b5 Mon Sep 17 00:00:00 2001 From: Adam Moussa Date: Wed, 1 Jul 2026 19:12:45 -0400 Subject: [PATCH] Bump pytest to 9.1.1 for CVE-2025-71176 The pre-push security scanner flagged pytest 8.3.4 (CVE-2025-71176). Dev/test-only dependency, not shipped, but bump to the patched release. Suite passes on 9.x unchanged. --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 49021c3..00da86f 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -2,5 +2,5 @@ # CI installs `-r requirements.txt` plus pytest directly (see .github/workflows). # Keep this in sync with the CI subproject-tests job: only pytest + python-dotenv. -r requirements.txt -pytest==8.3.4 +pytest==9.1.1 python-dotenv==1.2.2