chore(deps-dev): update pytest-asyncio requirement from <1,>=0.24 to >=0.24,<2#119
Merged
TexasCoding merged 1 commit intoMay 17, 2026
Merged
Conversation
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
2 tasks
TexasCoding
added a commit
that referenced
this pull request
May 17, 2026
Root cause: GitHub does not expose repo secrets (including CLAUDE_CODE_OAUTH_TOKEN) to workflow runs triggered by dependabot- authored PRs — a security default that blocks malicious deps from exfiltrating credentials. The action exits with an empty-credential failure on every dep bump, so all 5 currently-open dependabot PRs (#115-#119) show a red claude-review check despite tests + drift being green. Skip the job entirely for dependabot[bot] rather than try to wire Dependabot secrets — dep-version-bump diffs are low-signal for AI review anyway. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Owner
|
@dependabot recreate |
Updates the requirements on [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) to permit the latest version. - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v0.24.0...v1.3.0) --- updated-dependencies: - dependency-name: pytest-asyncio dependency-version: 1.3.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/pip/pytest-asyncio-gte-0.24-and-lt-2
branch
from
9eb13e3 to
59ad465
Compare
4 tasks
TexasCoding
added a commit
that referenced
this pull request
May 17, 2026
pip-audit on main flagged pytest 8.4.2 for CVE-2025-71176 — predictable /tmp/pytest-of-{user} directory allows local DoS / privilege escalation on UNIX. Fix is in pytest 9.0.3. Dev-only dep; zero risk to SDK users. Affects developers running the test suite on shared UNIX systems. Notes: - uv.lock on main was already at pytest 9.0.3 + pytest-asyncio 1.3.0 (cascaded from #119's pytest-asyncio bump), so this commit only realigns pyproject.toml with the lockfile. - Local full suite: 1607 passed, 51 warnings. mypy strict + ruff clean. - Integration suite has 11 pre-existing failures unrelated to this bump (verified by running tests/integration/ against plain main with pytest 8.4.2 — same 11 failures). Tracked in a separate follow-up issue covering integration-test health overall. - pip-audit also surfaced cryptography CVE-2026-26007 + CVE-2026-34073 (both fixed in 46.0+); pin already allows up to <49 so the floating lockfile picks up 48.0.0 with no pyproject change needed. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on pytest-asyncio to permit the latest version.
Release notes
Sourced from pytest-asyncio's releases.
Commits
2e9695fdocs: Compile changelog for v1.3.0dd0e9badocs: Reference correct issue in news fragment.4c31abeBuild(deps): Bump nh3 from 0.3.1 to 0.3.213e9477Link to migration guides from changelog4d2cf3ctests: handle Python 3.14 DefaultEventLoopPolicy deprecation warningsee3549btest: Remove obsolete test for the event_loop fixture.7a67c82tests: Fix failing test by preventing warning conversion to error.a17b689test: add pytest config to isolated test directories18afc9dfix(tests): replace runpytest_subprocess with runpytestcdc6bd1Add support for pytest 9 and drop Python 3.9 support