test: add response.close() assertions and fix test output wording

- Add 3 unit tests (15o/15p/15q) to verify pipes() always calls
  response.close() via the finally block:
  · 15o: auth-error path (HTTP 401) — close() called once
  · 15p: JSON decode error path — close() called once
  · 15q: success path — close() called once
  This prevents future regressions of the connection-pool fix.

- Fix TESTING.md §0: replace "Must print 249/249 passed" with the
  actual output format the runner emits ("All tests passed! ✓" and
  "✗ Failed: 0"), addressing Copilot review comment.

- Update test count from 249 → 252 across README, CONTRIBUTING,
  TESTING, and PULL_REQUEST_TEMPLATE to reflect the 3 new tests.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: sena-labs

.github/PULL_REQUEST_TEMPLATE.md

@@ -13,7 +13,7 @@
 ## Checklist
 
 - [ ] I have read the [CONTRIBUTING.md](../CONTRIBUTING.md) guidelines
-- [ ] All tests pass (`python test_pipe.py` — 249/249 ✓)
+- [ ] All tests pass (`python test_pipe.py` — 252/252 ✓)
 - [ ] I have added tests for new functionality (if applicable)
 - [ ] I have updated `CHANGELOG.md` under `[Unreleased]`
 - [ ] I have updated documentation (if applicable)

CONTRIBUTING.md

@@ -29,7 +29,7 @@ pip install -r requirements.txt
 ### Running Tests
 
 ```bash
-python test_pipe.py           # Unit tests (249 tests)
+python test_pipe.py           # Unit tests (252 tests)
 python integration_test.py    # Live API tests (requires OPENROUTER_API_KEY)
 ```
 

README.md

@@ -216,7 +216,7 @@ It also removes `user` when sent as a dict (OWUI format) since OpenRouter expect
 OpenRouter-Pipe/
 ├── openrouter_pipe.py      # Main pipe source (install this in Open WebUI)
 ├── function.json           # Open WebUI community manifest (metadata, tags, categories)
-├── test_pipe.py            # Unit test suite (249 tests)
+├── test_pipe.py            # Unit test suite (252 tests)
 ├── integration_test.py     # Live API integration tests (47 tests)
 ├── TESTING.md              # Pre-release testing checklist
 ├── SECURITY.md             # Security policy and vulnerability reporting

TESTING.md

@@ -12,7 +12,7 @@ Manual checklist to verify every Pipe feature before release.
 python test_pipe.py
 ```
 
-Must print **249/249 passed**. If any test fails, **do not release**.
+Must exit with `All tests passed! ✓` and `✗ Failed: 0`. If any test fails, **do not release**.
 
 ---
 
@@ -191,7 +191,7 @@ Must print **249/249 passed**. If any test fails, **do not release**.
 ## Quick pre-release checklist
 
 ```
-[ ] python test_pipe.py → 249/249 ✓
+[ ] python test_pipe.py → 252 passed, 0 failed ✓
 [ ] python integration_test.py → 47/47 ✓
 [ ] Empty API key → clear error
 [ ] Valid API key → 340+ models

test_pipe.py

@@ -1026,6 +1026,38 @@ async def _test_pipe_stream() -> str:
 _assert(models[0]["id"] == "error", "pipes provider no match: error id")
 _assert("No models match" in models[0]["name"], "pipes provider no match: correct message")
 
+# 15o. response.close() called via finally on auth-error branch (401)
+_close_auth_resp = MagicMock()
+_close_auth_resp.status_code = 401
+_close_auth_resp.json.return_value = {"error": {"message": "Unauthorized"}}
+pipe.valves = Pipe.Valves(OPENROUTER_API_KEY="bad-key")
+pipe._models_cache = None
+with patch.object(pipe._session, "get", return_value=_close_auth_resp):
+    pipe.pipes()
+_assert(_close_auth_resp.close.call_count == 1, "pipes response.close(): called after 401 auth error")
+
+# 15p. response.close() called via finally when response.json() raises (JSONDecodeError)
+_close_json_err_resp = MagicMock()
+_close_json_err_resp.status_code = 200
+_close_json_err_resp.raise_for_status = MagicMock()
+_close_json_err_resp.json.side_effect = ValueError("No JSON object could be decoded")
+pipe.valves = Pipe.Valves(OPENROUTER_API_KEY="test-key")
+pipe._models_cache = None
+with patch.object(pipe._session, "get", return_value=_close_json_err_resp):
+    pipe.pipes()
+_assert(_close_json_err_resp.close.call_count == 1, "pipes response.close(): called after JSON decode error")
+
+# 15q. response.close() called via finally on success path
+_close_ok_resp = MagicMock()
+_close_ok_resp.status_code = 200
+_close_ok_resp.raise_for_status = MagicMock()
+_close_ok_resp.json.return_value = {"data": [{"id": "openai/gpt-4o", "name": "GPT-4o"}]}
+pipe.valves = Pipe.Valves(OPENROUTER_API_KEY="test-key")
+pipe._models_cache = None
+with patch.object(pipe._session, "get", return_value=_close_ok_resp):
+    pipe.pipes()
+_assert(_close_ok_resp.close.call_count == 1, "pipes response.close(): called after successful listing")
+
 # ── 16. Valve json_schema_extra ──────────────────────────────────────────────
 
 _section("16. Valve json_schema_extra")