summaryrefslogtreecommitdiff
path: root/pyproject.toml
diff options
context:
space:
mode:
authorChristian Cleberg <[email protected]>2026-07-20 12:13:25 -0500
committerChristian Cleberg <[email protected]>2026-07-20 12:13:25 -0500
commit3cbb408d83668d5c2d5b0bbccf548c832345c870 (patch)
tree26c03235f08ec1e7f0f89d5b136e6826884350e0 /pyproject.toml
parent44167710cbfbaadcf0ec223f1452c0d24a3e5e2d (diff)
downloadhutch-stats-3cbb408d83668d5c2d5b0bbccf548c832345c870.tar.gz
hutch-stats-3cbb408d83668d5c2d5b0bbccf548c832345c870.tar.bz2
hutch-stats-3cbb408d83668d5c2d5b0bbccf548c832345c870.zip
chore(deps): allow pytest 9 and upgrade to 9.1.1
Closes CVE-2025-71176 (tmpdir handling). Test-only dependency, never in the runtime image. Floor raised to 9.0.3 rather than just dropping the <9.0 ceiling: with the floor left at 8.2 a fresh resolve could still land on a vulnerable 8.x and the advisory would stay open.
Diffstat (limited to 'pyproject.toml')
-rw-r--r--pyproject.toml2
1 files changed, 1 insertions, 1 deletions
diff --git a/pyproject.toml b/pyproject.toml
index 4030ab0..5eeaff6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -21,7 +21,7 @@ dependencies = [
[project.optional-dependencies]
dev = [
- "pytest>=8.2,<9.0",
+ "pytest>=9.0.3",
]
[project.scripts]