Bump pytest from 8.3.3 to 9.0.3 in the pip group across 1 directory by dependabot[bot] · Pull Request #7 · RemyLoveLogicAI/OmniParser

dependabot · 2026-04-13T23:45:09Z

Bumps the pip group with 1 update in the / directory: pytest.

Updates pytest from 8.3.3 to 9.0.3

Release notes

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

#12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

#13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

Previously this resulted in an internal assertion failure during plugin loading.

Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

#13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

#14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

#14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

#13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.

#13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.

#14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.

#14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

#12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

-- by aleguy02

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

... (truncated)

Commits

a7d58d7 Prepare release version 9.0.3
089d981 Merge pull request #14366 from bluetech/revert-14193-backport
8127eaf Revert "Fix: assertrepr_compare respects dict insertion order (#14050) (#14193)"
99a7e60 Merge pull request #14363 from pytest-dev/patchback/backports/9.0.x/95d8423bd...
ddee02a Merge pull request #14343 from bluetech/cve-2025-71176-simple
74eac69 doc: Update training info (#14298) (#14301)
f92dee7 Merge pull request #14267 from pytest-dev/patchback/backports/9.0.x/d6fa26c62...
7ee58ac Merge pull request #12378 from Pierre-Sassoulas/fix-implicit-str-concat-and-d...
37da870 Merge pull request #14259 from mitre88/patch-4 (#14268)
c34bfa3 Add explanation for string context diffs (#14257) (#14266)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by cubic

Upgrade pytest from 8.3.3 to 9.0.3 to pick up a security fix (CVE-2025-71176) and several bug fixes. Test runs should behave the same; see minor CLI changes below.

Dependencies
- pytest → 9.0.3
Migration
- You can’t block conftest.py with -p no: anymore; remove that flag if used.
- Terminal progress is off by default (except on Windows); enable with -p terminalprogress if needed.

^{Written for commit ac106c1. Summary will update on new commits.}

Bumps the pip group with 1 update in the / directory: [pytest](https://github.com/pytest-dev/pytest). Updates `pytest` from 8.3.3 to 9.0.3 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.3...9.0.3) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

safedep · 2026-04-13T23:45:16Z

SafeDep Report Summary

Package Details

Package	Malware	Vulnerability	Risky License	Report
`pytest @ 9.0.3` _{requirements.txt}				🔗

View complete scan results →

_{This report is generated by SafeDep Github App}

haiec-compliance · 2026-04-13T23:45:16Z

🛡️ HAIEC Attestation Readiness: -- → 20 (0)

Frameworks Evaluated: SOC2, ISO27001, PCI-DSS
Progress: ██░░░░░░░░ 20%

HAIEC scans your repository for compliance evidence across multiple frameworks simultaneously.

⚠️ 6 Compliance Gaps Found

⚡ 2 HIGH across 3 frameworks

🟠 Missing code ownership documentation [HIGH]

Affects: ISO27001 · PCI-DSS

Why This Matters: PCI auditors will fail you immediately. Without documented access controls, you cannot prove that only authorized personnel can modify payment processing code.

How to Fix:

Create CODEOWNERS with strict ownership rules
Assign payment code to PCI-trained developers only
Enable required reviews from code owners

📄 Ready-to-use template: Download CODEOWNERS →

⏱️ ~25 min to fix

🟠 Dependabot not enabled [HIGH]

Affects: SOC2 · ISO27001 · PCI-DSS

Why This Matters: Unpatched vulnerabilities in payment systems are a common cause of breaches. The Equifax breach happened because of an unpatched vulnerability. Don't be next.

How to Fix:

Enable Dependabot immediately
Set up alerts for critical vulnerabilities
Document patch management SLA

📄 Ready-to-use template: Download dependabot.yml →

⏱️ ~10 min to fix

🟡 No recent activity (90+ days) [MEDIUM]

Affects: SOC2 · ISO27001 · PCI-DSS

Why This Matters: No automated testing means bugs reach production. A broken deployment could take down your service for hours while customers lose trust.

How to Fix:

Create .github/workflows/ci.yml
Add basic tests (lint, unit tests, build)
Run on every PR
Template: https://haiec.com/templates/ci-workflow

📄 Ready-to-use template: Download CI Workflow →

⏱️ ~20 min to fix

📋 +3 more issues not shown. View complete report →

💡 Quick Wins: 1 issue fixable in ~5 minutes

💡 First scan complete. Showing top 3 priority items. View complete analysis →

🎯 Next Steps

View Complete Report → - See all findings and recommendations
Run Detailed Scan → - Get comprehensive compliance analysis
Download Evidence Report → - Export for auditors

💡 Quick wins: Add the missing files shown above to improve your score to 100%

🔍 Free AI Code Security Scan

This scan checked repository metadata. Upgrade to AI Code Analysis (free for public repos) to scan your code for:

Category	Examples
Prompt Injection	User input reaching system prompts
Data Leakage	PII/secrets in AI responses
Access Control	Missing auth on AI endpoints
82+ AI Security Rules	OWASP Top 10 for LLMs

Enable Free Code Analysis → | Learn More →

_{🤖 Automated by HAIEC — AI Compliance & Security Platform | Documentation | Support}

codeant-ai · 2026-04-13T23:45:16Z

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

ai-document-creator · 2026-04-13T23:45:22Z

ℹ️ No Configured Files to Document

This PR doesn't contain any files that match your documentation configuration.

Files Changed

✏️ requirements.txt

Why No Documentation?

None of the files configured to be watched in your .github/wai-docbot.yml have changed in this PR.

DocBot processes files based on:

Include patterns - Which file types/paths to document
Exclude patterns - Which files/folders to skip

Need to document these files?

Check your .github/wai-docbot.yml configuration:

Verify your include patterns cover the files you want documented
Check if any exclude patterns are blocking these files
Ensure file extensions are configured for documentation

View configuration guide →

If changes were expected but not processed, please review your configuration settings.

socket-security · 2026-04-13T23:46:29Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pytest@8.3.3 ⏵ 9.0.3	^-3	⁺²

View full report

cubic-dev-ai

No issues found across 1 file

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 13, 2026

cubic-dev-ai Bot reviewed Apr 13, 2026

View reviewed changes

Navigation Menu

Bump pytest from 8.3.3 to 9.0.3 in the pip group across 1 directory - #7

Bump pytest from 8.3.3 to 9.0.3 in the pip group across 1 directory#7
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/pip-590e9db7b9

dependabot Bot commented on behalf of github Apr 13, 2026 •

edited by cubic-dev-ai Bot

Loading

Uh oh!

safedep Bot commented Apr 13, 2026 •

edited

Loading

Uh oh!

haiec-compliance Bot commented Apr 13, 2026

Uh oh!

codeant-ai Bot commented Apr 13, 2026

Uh oh!

ai-document-creator Bot commented Apr 13, 2026

Uh oh!

socket-security Bot commented Apr 13, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 13, 2026 • edited by cubic-dev-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

Improved documentation

Contributor-facing changes

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

Summary by cubic

Uh oh!

safedep Bot commented Apr 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

SafeDep Report Summary

Uh oh!

haiec-compliance Bot commented Apr 13, 2026

🛡️ HAIEC Attestation Readiness: -- → 20 (0)

⚠️ 6 Compliance Gaps Found

🟠 Missing code ownership documentation [HIGH]

🟠 Dependabot not enabled [HIGH]

🟡 No recent activity (90+ days) [MEDIUM]

🎯 Next Steps

🔍 Free AI Code Security Scan

Uh oh!

codeant-ai Bot commented Apr 13, 2026

Uh oh!

ai-document-creator Bot commented Apr 13, 2026

ℹ️ No Configured Files to Document

Files Changed

Why No Documentation?

Need to document these files?

Uh oh!

socket-security Bot commented Apr 13, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 13, 2026 •

edited by cubic-dev-ai Bot

Loading

safedep Bot commented Apr 13, 2026 •

edited

Loading