Repository navigation
chore(deps-dev): bump pytest from 8.4.2 to 9.1.1 - #2052
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.4.2 to 9.1.1. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.1.1) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
| name = "pytest-asyncio" | ||
| version = "1.1.1" | ||
| version = "0.23.3" | ||
| source = { registry = "https://pypi.org/simple" } |
There was a problem hiding this comment.
馃敶 Async tests may break after merge: the lock now pairs pytest 9.1.1 with pytest-asyncio 0.23.3, a January 2024 release built for pytest 7. That pytest-asyncio release declares pytest>=7.0.0,<8, and the 0.23 line is known to break under pytest 8+. The cap pytest-asyncio>=0.21.1,<1.2.0 (pyproject.toml:59) excludes every pytest-asyncio release that supports pytest 9, so the relock downgraded instead of failing. Fix: raise the cap to pytest-asyncio>=1.3.0,<2 (the first line declaring pytest 9 support), then relock so pytest and pytest-asyncio metadata agree.
Why this was flagged
The trigger is uv sync with the dev group in CI or locally, then pytest. uv.lock:1732 pins pytest 9.1.1 and uv.lock:1747 pins pytest-asyncio 0.23.3, whose Requires-Dist is pytest<8,>=7.0.0, so the locked pair breaks that package's own constraint. pytest-asyncio 1.1.x and 1.2.x require pytest<9, and pytest 9 support starts in 1.3.0. The <1.2.0 cap in pyproject.toml:59 rules out every compatible release, and the resolver fell back to an old release instead of reporting a conflict. About 81 pytest.mark.asyncio uses (tests/unit/test_batch_evaluation.py, tests/unit/test_observe.py, tests/unit/test_openai.py, tests/unit/test_propagate_attributes.py, and others) depend on this plugin. On the base branch the pair is pytest 8.4.2 with pytest-asyncio 1.1.1, which works. After the merge, those async tests can error at collection or run, and uv lock --check may disagree with the committed lock.
Verification: The diff changes uv.lock from pytest 8.4.2 to version = "9.1.1" (uv.lock ~1732) and pytest-asyncio from 1.1.1 to version = "0.23.3" (uv.lock ~1747). The dev specifier stays pytest-asyncio>=0.21.1,<1.2.0 (pyproject.toml:59). This is a regression: the base lock (pytest 8.4.2 + pytest-asyncio 1.1.1) is a compatible pair.
Bumps pytest from 8.4.2 to 9.1.1.
Release notes
Sourced from pytest's releases.
... (truncated)
Commits
cf470ecPrepare release version 9.1.1e0c8ce6Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...1b82d16Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...501c4bcMerge pull request #14596 from bluetech/doc-classmethodb61f588Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir9a567e0[automated] Update plugin list (#14617) (#14618)ef8b299Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...66abd07Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup79fbf93Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...0d312ebMerge pull request #14611 from bluetech/parametrize-argvalues-typingDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)