build(deps): update pytest
Metadata
Current evaluation
Merged PR #6179 (commit 3648cbb0c) bumps the pytest dev dependency in a single file (+3/-3) to remediate an OSV vulnerability; all CI checks passed except integration-spread-tests-store.
Resolution: closed resolved
Reason: The PR itself was merged into snapcraft's main branch as commit 3648cbb0c with 2 approving reviewers and no unresolved comments, delivering the pytest version bump that fixes the reported OSV alert.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Fixes an OSV.
---
- [x] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md).
- [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [x] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #6179 (commit 3648cbb0c) bumps the pytest dev dependency in a single file (+3/-3) to remediate an OSV vulnerability; all CI checks passed except integration-spread-tests-store. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #6179 in commit 3648cbb0c, updating pytest to fix an OSV vulnerability. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a pytest dependency update to resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. The change modifies one file with minimal adjustments. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Updated pytest dependency to resolve an Open Source Vulnerability. The change passed linting and tests, then merged successfully. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #524 build(deps): bump pytest | starbase | merged | Merged pytest dependency update to resolve an OSV; commit e372177 landed with all CI checks passing. | |
| #321 build(deps): bump pytest | imagecraft | merged | Merged PR #321 (commit e1b9241) bumped pytest to resolve an OSV advisory; lint, tests, builds, and security checks passed. | |
| #224 build(deps): update pytest for OSV | craft-platforms | merged | Merged #224 via commit 2e4d183, addressing the pytest OSV by retaining pytest below v9 for Python versions that do not support pytest 9. | |
| #453 build(deps): bump pytest | craft-cli | merged | Renovate-style PR #453 bumped the dev pytest dependency in pyproject.toml to fix an OSV advisory; merged as commit f1a13ce with 1 approval and all CI checks green. | |
| #1550 build(deps): bump pytest | craft-parts | merged | Merged craft-parts#1550 in commit e5a6febb, updating pytest to resolve an OSV finding; all lint, test, and security checks passed. | |
| #635 build(deps): update dependency pytest to v8.3.2 | craft-providers | merged | Renovate PR merged as commit 13ef81c, bumping the dev pytest pin from ==8.2.0 to ==8.3.2 (1-line change, approved by 2 reviewers). Later superseded by pytest 9 bumps (#464, #524). | |
| #179 build(test): update pytest dependencies | craft-archives | merged | Merged in commit 5de6ac2, updating pytest dependencies and replacing broken PRs #177 and #178; all CI checks passed. | |
| #464 build(deps): update dependency pytest to v9 (main) | starbase | merged | Merged PR #464 as commit 744f1ad, updating pytest from ~=8.0 to ~=9.0 in the development dependencies and lockfile; all CI checks passed. | |
| #280 build(deps): update dependency pytest to v8.3.3 | craft-cli | merged | Merged PR #280 as commit 1a4e1fc, upgrading pytest from 8.2.1 to 8.3.3. | |
| #216 build(deps): update dependency pytest to v9 (main) | craft-archives | merged | Merged PR #216 via commit 2390cfc, upgrading pytest from ~=8.4 to ~=9.0; all listed CI checks passed. |