← Back to issue list

build(deps): bump pytest

View original Github issue

Metadata

Project
craft-cli
Number
#453
Type
pull request
State
merged
Author
mr-cal
Labels
—
Created
Updated
Closed

Current evaluation

Renovate-style PR #453 bumped the dev pytest dependency in pyproject.toml to fix an OSV advisory; merged as commit f1a13ce with 1 approval and all CI checks green.

Resolution: closed resolved

Reason: PR #453 was merged into craft-cli as commit f1a13ce ('build(deps): bump pytest'), raising the pytest constraint in pyproject.toml (now 'pytest>=9.0') to clear the reported OSV advisory; all listed CI checks, including OSV-scanner and the test matrix, passed.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you followed the guidelines for contributing? - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? --- Fixes an osv.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Renovate-style PR #453 bumped the dev pytest dependency in pyproject.toml to fix an OSV advisory; merged as commit f1a13ce with 1 approval and all CI checks green.
stealth/space-bunny-alpha — closed resolved Merged pytest bump to fix an OSV, with one approval and all reported CI checks passing.
qwen/qwen3.6-35b-a3b — — Merged a dependency update to bump pytest, resolving an OSV scanner vulnerability. Approved by one reviewer and passed all CI checks across multiple platforms and Python versions.
qwen3.6-35b-a3b-mtp-q6 — — Merged maintainer-submitted dependency update to bump pytest, resolving an osv security vulnerability. No review comments were posted prior to merge.

Update history

No update history recorded yet.

Related work

  • Related To: canonical/craft-cli#436 (confidence 45%)

    Other dev-dependency bumps in the same series (pytest-cov v7.1.0, commit 04773a2).

  • Related To: canonical/craft-cli#387 (confidence 35%)

    Earlier pytest bump to v8.4.2 (commit 0f12869), same dependency line updated by #453.

Related issues

Issue Project State Summary Similarity
#321 build(deps): bump pytest imagecraft merged Merged PR #321 (commit e1b9241) bumped pytest to resolve an OSV advisory; lint, tests, builds, and security checks passed.
86%
#524 build(deps): bump pytest starbase merged Merged pytest dependency update to resolve an OSV; commit e372177 landed with all CI checks passing.
84%
#6179 build(deps): update pytest snapcraft merged Merged PR #6179 (commit 3648cbb0c) bumps the pytest dev dependency in a single file (+3/-3) to remediate an OSV vulnerability; all CI checks passed except integration-spread-tests-store.
83%
#906 build(deps): update dependency pytest to v8.4.2 (main) craft-application merged Renovate PR merged (commit 39577174) into main, bumping pytest from 8.4.1 to 8.4.2 in pyproject.toml dev/docs groups; all CI checks green, 2 approvals. Later superseded by pytest v9 (#962) and v9.1.1 (#1108).
83%
#948 build(deps): update dependency pytest-check to v2.6.0 (main) craft-application merged Renovate PR #948 merged into main via commit 8a153d44, bumping pytest-check from ==2.5.3 to ==2.6.0 in pyproject.toml and constraints. All CI checks passed; approved by 2 reviewers.
83%
#301 build(deps): update dependency pytest to v8.4.1 (main) craft-store merged Renovate bumped pytest 8.3.3 -> 8.4.1 in pyproject.toml and uv.lock; PR #301 was merged into main as commit f5e7ef4 after 2 approvals (later superseded by pytest ~=9.1).
82%
#446 build(deps): update dependency pytest-check to v2.4.1 (main) craft-application merged Renovate dependency bump of pytest-check 2.3.1 -> 2.4.1 approved and merged into main via commit 45ec2826 (single-line pyproject.toml change).
82%
#990 build(deps): update dependency pytest-time to ~=0.5.0 (main) craft-providers merged Renovate PR merged as commit dd5094a, bumping pytest-time from ~=0.4.1 to ~=0.5.0 in pyproject.toml and uv.lock; all CI checks passed.
82%
#826 build(deps): update dependency pytest-time to ~=0.4.1 (main) craft-providers merged Renovate PR merged as commit 1b6adb7, bumping pytest-time from ~=0.3.2 to ~=0.4.1 in pyproject.toml and uv.lock (2 files, +5/-5); later raised to ~=0.5.0 by #990.
82%
#976 build(deps): update bugfixes (main) craft-application merged Renovate dependency PR merged: bumped ruff-pre-commit v0.14.8->v0.14.9 and pytest 9.0.1->9.0.2 in pyproject.toml/.pre-commit-config.yaml via commit da384b18 after CI and 2 approvals.
82%