Skip to content

chore(deps-dev): Bump pytest from 9.0.2 to 9.0.3 in /backend#385

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pytest-9.0.3
Open

chore(deps-dev): Bump pytest from 9.0.2 to 9.0.3 in /backend#385
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pytest-9.0.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 14, 2026

Bumps pytest from 9.0.2 to 9.0.3.

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

  • #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

  • #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

    Previously this resulted in an internal assertion failure during plugin loading.

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

  • #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

  • #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

  • #14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
  • #14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

  • #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

    -- by aleguy02

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 14, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Dependency Update Analysis

Update Type: patch
Security Update: false
Risk Level: low
Auto-merge Eligible: true

Analysis Details

  • PR Title: chore(deps-dev): Bump pytest from 9.0.2 to 9.0.3 in /backend
  • Updated by: dependabot[bot]
  • Branch: dependabot/pip/backend/pytest-9.0.3

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

@github-actions
Copy link
Copy Markdown
Contributor

Manual Review Required

This dependency update requires manual review:

Reason:

  • Update Type: patch
  • Risk Level: low
  • Auto-merge Eligible: true

Review Checklist:

  • Review changelog for breaking changes
  • Test critical application paths
  • Verify security implications
  • Check for API compatibility
  • Validate configuration changes

Next Steps:

  1. Review the changes thoroughly
  2. Test locally if needed
  3. Approve and merge when ready

cc: @maintainers

Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/pytest-9.0.3 branch from a653f66 to afa03b2 Compare April 14, 2026 10:22
@github-actions
Copy link
Copy Markdown
Contributor

Dependency Update Analysis

Update Type: patch
Security Update: false
Risk Level: low
Auto-merge Eligible: true

Analysis Details

  • PR Title: chore(deps-dev): Bump pytest from 9.0.2 to 9.0.3 in /backend
  • Updated by: dependabot[bot]
  • Branch: dependabot/pip/backend/pytest-9.0.3

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

@github-actions
Copy link
Copy Markdown
Contributor

Manual Review Required

This dependency update requires manual review:

Reason:

  • Update Type: patch
  • Risk Level: low
  • Auto-merge Eligible: true

Review Checklist:

  • Review changelog for breaking changes
  • Test critical application paths
  • Verify security implications
  • Check for API compatibility
  • Validate configuration changes

Next Steps:

  1. Review the changes thoroughly
  2. Test locally if needed
  3. Approve and merge when ready

cc: @maintainers

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file manual-review-required python Pull requests that update python code risk-low update-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants