build(deps): bump pytest
Metadata
Current evaluation
Merged craft-parts#1550 in commit e5a6febb, updating pytest to resolve an OSV finding; all lint, test, and security checks passed.
Resolution: closed resolved
Reason: The pytest dependency bump was merged in commit e5a6febb, and the PR reports passing tests, lint, OSV scanning, and Trivy checks.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
- [ ] Have you added an entry to the changelog (`docs/reference/changelog.rst`)?
---
resolves an OSV
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged craft-parts#1550 in commit e5a6febb, updating pytest to resolve an OSV finding; all lint, test, and security checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged craft-parts#1550 in commit e5a6febb, bumping pytest to resolve an OSV; all reported checks passed. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged to bump pytest, resolving an OSV security vulnerability. Approved by two reviewers with all CI checks passing. The update required a minimal three-line configuration change. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a dependency update to bump pytest, resolving an OSV security vulnerability. The maintainer's change was integrated directly into the codebase without additional review comments. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #524 build(deps): bump pytest | starbase | merged | Merged pytest dependency update to resolve an OSV; commit e372177 landed with all CI checks passing. | |
| #321 build(deps): bump pytest | imagecraft | merged | Merged PR #321 (commit e1b9241) bumped pytest to resolve an OSV advisory; lint, tests, builds, and security checks passed. | |
| #6179 build(deps): update pytest | snapcraft | merged | Merged PR #6179 (commit 3648cbb0c) bumps the pytest dev dependency in a single file (+3/-3) to remediate an OSV vulnerability; all CI checks passed except integration-spread-tests-store. | |
| #224 build(deps): update pytest for OSV | craft-platforms | merged | Merged #224 via commit 2e4d183, addressing the pytest OSV by retaining pytest below v9 for Python versions that do not support pytest 9. | |
| #453 build(deps): bump pytest | craft-cli | merged | Renovate-style PR #453 bumped the dev pytest dependency in pyproject.toml to fix an OSV advisory; merged as commit f1a13ce with 1 approval and all CI checks green. | |
| #5323 build(deps): bump craft-parts to 2.4.3 | snapcraft | merged | Merged #5323 (commit 8c5e558a0) bumped craft-parts to 2.4.3, fixing omitted final stdout or stderr lines. | |
| #1250 build(deps): bump craft-parts to 2.34.0 | rockcraft | closed | PR #1250 was closed unmerged after four CI checks failed; later commit ab4f617f updated craft-parts to 2.35.0 instead. | |
| #81 build(deps): resolve OSVs | craft-artifacts | merged | Merged as commit 32dec6c in craft-artifacts, bumping Pygments 2.19.2→2.20.0 and pytest 9.0.2→9.0.3 in uv.lock to clear OSV-scanner advisories. Approved by 2 reviewers despite a failing typecheck-with-ty job. | |
| #131 build(deps): resolve OSVs | debcraft | merged | Merged as commit 509e420: routine 'build(deps): resolve OSVs' uv.lock update (cryptography 46.0.7, pygments 2.20.0, pytest 9.0.3, requests 2.33.1) that incidentally bumped craft-parts, causing a StepInfo regression. | |
| #1116 build(deps): update dependency pytest-subprocess to ~=1.6.0 (main) | craft-application | merged | Renovate dependency bump of pytest-subprocess from ~=1.5.2 to ~=1.6.0 merged into craft-application main as commit 7aff2259 (#1116); test suites passed, lint jobs were red but the PR was approved and merged. |