From 3cbb408d83668d5c2d5b0bbccf548c832345c870 Mon Sep 17 00:00:00 2001
From: Christian Cleberg <hello@cleberg.net>
Date: Mon, 20 Jul 2026 12:13:25 -0500
Subject: chore(deps): allow pytest 9 and upgrade to 9.1.1

Closes CVE-2025-71176 (tmpdir handling). Test-only dependency, never in
the runtime image.

Floor raised to 9.0.3 rather than just dropping the <9.0 ceiling: with the
floor left at 8.2 a fresh resolve could still land on a vulnerable 8.x and
the advisory would stay open.
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'pyproject.toml')

diff --git a/pyproject.toml b/pyproject.toml
index 4030ab0..5eeaff6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -21,7 +21,7 @@ dependencies = [
 
 [project.optional-dependencies]
 dev = [
-  "pytest>=8.2,<9.0",
+  "pytest>=9.0.3",
 ]
 
 [project.scripts]
-- 
cgit v1.2.3