Bump the other group across 1 directory with 5 updates

[dependabot]

Bumps the other group with 5 updates in the / directory:

Package	From	To
pyexasol	2.2.1	2.2.2
pytest	9.0.3	9.1.1
exasol-integration-test-docker-environment	6.2.0	6.4.1
pytest-exasol-backend	1.4.1	1.5.0
exasol-toolbox	10.0.0	10.2.1

Updates pyexasol from 2.2.1 to 2.2.2

Release notes

Sourced from pyexasol's releases.

2.2.2 - 2026-06-24

Summary

In this patch release, the down-pinning on packaging and websocket-client have been removed.

Security Issues

This release fixes vulnerabilities by updating dependencies:

Dependency	Vulnerability	Affected	Fixed in
cryptography	GHSA-537c-gmf6-5ccf	46.0.7	48.0.1
gitpython	CVE-2026-42215	3.1.46	3.1.47
gitpython	CVE-2026-42284	3.1.46	3.1.47
gitpython	CVE-2026-44244	3.1.46	3.1.49
gitpython	GHSA-mv93-w799-cj2w	3.1.46	3.1.50
idna	PYSEC-2026-215	3.11	3.15
msgpack	GHSA-6v7p-g79w-8964	1.1.2	1.2.1
pip	PYSEC-2026-196	26.0.1	26.1.2
pip	CVE-2026-3219	26.0.1	26.1
pip	CVE-2026-6357	26.0.1	26.1
pyarrow	PYSEC-2026-113	23.0.0	23.0.1
tornado	CVE-2026-49854	6.5.5	6.5.6
tornado	CVE-2026-49853	6.5.5	6.5.6
tornado	CVE-2026-49855	6.5.5	6.5.6
tornado	GHSA-pw6j-qg29-8w7f	6.5.5	6.5.7
ujson	CVE-2026-44660	5.12.0	5.12.1
ujson	CVE-2026-54911	5.12.0	5.13.0
urllib3	PYSEC-2026-142	2.6.3	2.7.0
urllib3	PYSEC-2026-142	2.6.3	2.7.0
urllib3	PYSEC-2026-141	2.6.3	2.7.0

• #331: Resolved vulnerabilities by re-locking poetry.lock and updated exasol-toolbox to 7.0.0
• #337: Resolved vulnerabilities by relocking poetry.lock

Refactoring

• #333: Updated to exasol-toolbox version 8.0.0
• #335: Added export plugin to pyproject.toml for exasol-toolbox usage
• #338: Update to exasol-toolbox version 8.1.1
• #343: Removed down-pinning on packaging which follows CalVer versioning and on websocket-client

Dependency Updates

main

• Updated dependency cryptography:46.0.7 to 49.0.0
• Updated dependency orjson:3.11.7 to 3.11.9
• Updated dependency packaging:25.0 to 26.2

... (truncated)

Commits

• 75c9055 Refactoring/343 undo limit to packaging and websocket client (#347)
• 2dbe068 Updated poetry.lock (#340)
• b955d4a Refactoring/338 update to ptb 8.1.1 (#339)
• c124c98 Update dependencies to fix vulnerabilities (2026-05-19) (#337)
• a3760c5 Add export plugin (#336)
• a9271d7 Refactoring/333 update to ptb 8.0.0 (#334)
• ffeb9c3 Security/331 resolve vulnerabilities on 2.2.1 (#332)
• See full diff in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

• #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

  If this is undesirable, move the fixture definition to a conftest.py file if possible.

  Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

• #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

  See 10819 and 14011.

• #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

  See dynamic-fixture-request-during-teardown for details.

• #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

  These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

  See parametrize-iterators for details and suggestions.

• #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

  See config-inicfg for more details.

• #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
• 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
• 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
• Additional commits viewable in compare view

Updates exasol-integration-test-docker-environment from 6.2.0 to 6.4.1

Release notes

Sourced from exasol-integration-test-docker-environment's releases.

6.4.1 - 2026-06-30

Summary

Fix pull issues for image graphs with reference to external images.

Bugfixes

• #652: Keep docker builds on pull=False for mixed image graphs

Refactoring

• #654: Parallelize integration test workflows

6.4.0 - 2026-06-26

Summary

Added support for Python 3.14.

Dependency Updates

• #650: Added support for Python 3.14
• #647: Fixed the issue with importing Traversable type hint.

6.3.0 - 2026-06-26

Summary

This release adds support for docker-db version 2026.1.0 and 2025.1.11.

Security Issues

This release fixes vulnerabilities by updating dependencies:

Dependency	Vulnerability	Affected	Fixed in
cryptography	GHSA-537c-gmf6-5ccf	48.0.0	48.0.1
msgpack	GHSA-6v7p-g79w-8964	1.1.2	1.2.1
pip	PYSEC-2026-196	26.1.1	26.1.2
tornado	GHSA-pw6j-qg29-8w7f	6.5.6	6.5.7

Features

• #640: Added support for 2026.1.0
• #640: Added support for 2025.1.11

Refactorings

• #635: Removed broken release nox session in noxfile

... (truncated)

Commits

• b758bb3 #652: Keep docker builds on pull=False for mixed image graphs (#653)
• 2732de5 #654: Parallelize integration test workflows (#655)
• 2489325 Added support for Python 3.14 (#651)
• d7ce295 Release/prepare 6.3.0 (#649)
• bfdffc7 Updated PTB to 10.0.0 (fixes #644) (#645)
• 22e6be6 Added support for 2025.1.11 (fixes #640) (#643)
• ad98c97 #640/#642/#635: Support for 2026.1.0 and fixed DockerBuildImageTask and rem...
• See full diff in compare view

Updates pytest-exasol-backend from 1.4.1 to 1.5.0

Updates exasol-toolbox from 10.0.0 to 10.2.1

Release notes

Sourced from exasol-toolbox's releases.

10.2.1 - 2026-07-08

Summary

Bug Fix

• #920: Ensured extracted secrets are unique and alphabetically sorted from the custom workflows

10.2.0 - 2026-07-07

Summary

This minor release adds automated vulnerability updates through Nox session vulnerabilities:update and improves the dependency-update.yml. It also includes a few workflow-related bug fixes and documentation updates.

Bug Fix

• #909: Updated cd.yml workflow so that cd-extension.yml workflow depends on build-and-publish. This ensures that the custom release workflow only runs when the PyPi release was successful.
• #910: Added gh-pages.yml to be ignored when has_documentation=False in the PROJECT_CONFIG

Feature

• #898: Created Nox session vulnerabilities:update to automatically resolve vulnerable dependencies and report the result for the dependency update workflow

Dependency Updates

main

• Updated dependency coverage:7.14.3 to 7.15.0
• Updated dependency typer:0.26.7 to 0.26.8

10.1.0 - 2026-06-30

Summary

This minor release adds an opt-out for documentation-enabled workflows and jobs. Projects can now declare that they do not serve documentation with the has_documentation switch in BaseConfig, and the workflow generator/checker will stop documentation relevant jobs and workflows for those projects. This should only be set to False for exceptional cases.

Feature

• #901: Provided switch has_documentation in BaseConfig for projects without documentation

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions