Bump pytest to 9.1.1 for CVE-2025-71176

The pre-push security scanner flagged pytest 8.3.4 (CVE-2025-71176).
Dev/test-only dependency, not shipped, but bump to the patched release.
Suite passes on 9.x unchanged.
This commit is contained in:
Adam Moussa 2026-07-01 19:12:45 -04:00
parent 26f0558589
commit d60efeca28
No known key found for this signature in database

View file

@ -2,5 +2,5 @@
# CI installs `-r requirements.txt` plus pytest directly (see .github/workflows). # CI installs `-r requirements.txt` plus pytest directly (see .github/workflows).
# Keep this in sync with the CI subproject-tests job: only pytest + python-dotenv. # Keep this in sync with the CI subproject-tests job: only pytest + python-dotenv.
-r requirements.txt -r requirements.txt
pytest==8.3.4 pytest==9.1.1
python-dotenv==1.2.2 python-dotenv==1.2.2