Skip to content

chore(deps): bump pytest from 8.3.0 to 9.0.3#38

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/pytest-9.0.3
Open

chore(deps): bump pytest from 8.3.0 to 9.0.3#38
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/pytest-9.0.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026 •
edited
Loading

Bumps pytest from 8.3.0 to 9.0.3.

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

  • #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

  • #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

    Previously this resulted in an internal assertion failure during plugin loading.

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

  • #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

  • #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

  • #14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
  • #14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

  • #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

    -- by aleguy02

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

  • #13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

    You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

    Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

  • #13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

  • #13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

... (truncated)

Commits

@dependabot dependabot Bot added the security label May 4, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@govindkavaturi-art govindkavaturi-art added the dependencies Dependabot or other dependency updates label May 4, 2026
@mikemolinet
Copy link
Copy Markdown
Collaborator

mikemolinet commented May 6, 2026

Re-triggering after GOVIND_GITHUB_TOKEN was added to the Dependabot secrets namespace on cueapi-core. The auto-merge job in feature-to-main.yml has been failing since 2026-05-04 because Dep-triggered runs only see the Dependabot-namespace secrets, not Actions-namespace. Now fixed; close+reopen forces the workflow to re-run with the new secret in scope. (Automated by cue-pm-pr-watcher per Mike's directive.)

@mikemolinet mikemolinet closed this May 6, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 6, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@mikemolinet mikemolinet reopened this May 6, 2026
mikemolinet
mikemolinet approved these changes May 6, 2026
View reviewed changes
Copy link
Copy Markdown
Collaborator

@mikemolinet mikemolinet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approving Dependabot batch — CI checks (test + sdk-integration) are the binding gate; this satisfies branch-protection's review requirement so native auto-merge can complete the cycle. (Approval by cue-pm-pr-watcher under Mike's directive 2026-05-06.)

mikemolinet added a commit that referenced this pull request May 6, 2026
@mikemolinet
chore(deps): ignore major-version bumps for pytest + pytest-asyncio i…
f0d1c4e 
…n dependabot

These are test-infra dev deps; major-version bumps (pytest 8→9, pytest-asyncio 0.24→1.3) break the test suite without engineer-side fix work, and there's no urgency to upgrade. Decision per Mike 2026-05-06.

Closes the noise from #38 (pytest 8→9) and #40 (pytest-asyncio 0.24→1.3).
Re-enable when bandwidth opens to update the test suite for new APIs.

Minor + patch bumps for these packages still flow as before via the python-minor-patch group.
This was referenced May 6, 2026
Closed
Closed
@dependabot dependabot Bot force-pushed the dependabot/pip/pytest-9.0.3 branch 5 times, most recently from e471043 to a0133b9 Compare May 6, 2026 21:57
@dependabot
chore(deps): bump pytest from 8.3.0 to 9.0.3
8bdc35c 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.0 to 9.0.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.0...9.0.3)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/pytest-9.0.3 branch from a0133b9 to 8bdc35c Compare May 6, 2026 22:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mikemolinet mikemolinet mikemolinet approved these changes

Assignees

No one assigned

Labels

dependencies Dependabot or other dependency updates security

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@mikemolinet @govindkavaturi-art