chore(templates): bump pytest and other testing deps
Metadata
Current evaluation
Merged PR #2653 as fae98626, updating Kubernetes and machine template locks for a pytest security fix plus ruff, codespell, pyright, and PyYAML.
Resolution: closed resolved
Reason: PR #2653 was approved and merged as commit fae98626. The change updates locked testing dependencies in the Kubernetes and machine profiles.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR updates pytest in the locked dependencies of the `kubernetes` and `machine` profiles. I'm primarily bumping pytest in response to a security issue. See also https://github.com/canonical/operator/pull/2421.
I'm also bumping ruff ([dependabot](https://github.com/canonical/charmcraft-profile-tools/pull/40)), codespell ([dependabot](https://github.com/canonical/charmcraft-profile-tools/pull/41)), pyright ([dependabot](https://github.com/canonical/charmcraft-profile-tools/pull/32)), and pyyaml ([dependabot](https://github.com/canonical/charmcraft-profile-tools/pull/37)).
---
- [x] I've followed the [contribution guidelines](https://github.com/canonical/charmcraft/blob/main/CONTRIBUTING.md).
- [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #2653 as fae98626, updating Kubernetes and machine template locks for a pytest security fix plus ruff, codespell, pyright, and PyYAML. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #2653 (fae98626), updating locked pytest for a security fix and bumping ruff, codespell, pyright and PyYAML in the Kubernetes and machine templates. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged dependency updates for pytest, ruff, codespell, pyright, and pyyaml in the kubernetes and machine profiles to resolve a security vulnerability. Approved by two reviewers and validated by CI checks. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged an external contribution updating pytest and related testing dependencies (ruff, codespell, pyright, pyyaml) in the kubernetes and machine profiles to address a security vulnerability. |
Update history
| Date | Change |
|---|---|
| updated |
Related work
-
Related To:
operator#2421
(confidence 95%)
Referenced as prior work addressing the pytest security issue.
-
Related To:
charmcraft-profile-tools#40
(confidence 90%)
Dependabot update for ruff incorporated by this PR.
-
Related To:
charmcraft-profile-tools#41
(confidence 90%)
Dependabot update for codespell incorporated by this PR.
-
Related To:
charmcraft-profile-tools#32
(confidence 90%)
Dependabot update for pyright incorporated by this PR.
-
Related To:
charmcraft-profile-tools#37
(confidence 90%)
Dependabot update for PyYAML incorporated by this PR.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #115 chore(deps): update development dependencies (non-major) | starbase | merged | Merged PR #115 as commit 6a8bb7f, updating pytest 7.4.0, pytest-mock 3.11.1, codespell 2.2.5, mypy 1.4.1, and pyright 1.1.316. | |
| #95 chore(deps): update development dependencies (non-major) | starbase | merged | Merged PR #95 updated pytest 7.3.1→7.3.2 and pyright-python 1.1.311→1.1.313; landed in main via commit 72c7781. | |
| #117 chore(deps): update development dependencies (non-major) | craft-application | merged | Renovate PR merged into main via commit 1bbc3677, bumping coverage 7.3.2, pytest-check 2.2.2, pytest-mock 3.12.0, black 23.10.0, codespell 2.2.6, mypy 1.6.1, pyright 1.1.332. | |
| #64 chore(deps): update dependency pytest to v7.3.1 | craft-archives | merged | Renovate PR #64 was merged as commit 02f50fa, updating pytest from 7.2.2 to 7.3.1 with no change in test coverage. | |
| #45 chore(deps): update development dependencies (non-major) | craft-application | merged | Renovate dependency bump PR merged as commit 5c7a5fef: pytest-check 2.1.5→2.2.0, black 23.3.0→23.7.0, pyright-python 1.1.316→1.1.320 (3 lines in pyproject.toml, no code changes). | |
| #153 chore(deps): update development dependencies (non-major) | starbase | merged | Renovate PR #153 was merged, updating pytest to 7.4.3, Black 23.11.0, Ruff 0.1.6, yamllint 1.33.0, mypy 1.7.1, and pyright 1.1.337. | |
| #18 chore(deps): update dependency pytest to v7.2.1 | starbase | merged | Renovate bumped pytest from ==7.0.0 to ==7.2.1 in pyproject.toml. PR #18 merged via commit eb5a438 (change commit f3e23e3), approved with no CI checks; later superseded by pytest ~=9.0 in #464. | |
| #192 chore(deps): update development dependencies (non-major) | craft-cli | merged | Renovate PR merged as commit 19f933e, bumping dev deps: coverage 7.3.2, pytest-mock 3.12.0, black 23.10.0, codespell 2.2.6, mypy 1.6.1, pyright 1.1.332. | |
| #185 chore(deps): update development dependencies (non-major) | craft-store | merged | Merged PR #185 via commit dde3621, updating coverage, pytest, codespell, mypy, and pyright development dependencies. | |
| #168 chore(deps): update development dependencies (non-major) | craft-store | merged | Merged PR #168 in commit b7affd9, updating coverage 7.4.4, pytest-mock 3.14.0, yamllint 1.35.1, mypy 1.9.0, and pyright 1.1.358. |