chore(deps): Bump pytest from 7.4.4 to 9.0.3 in /sdk/python/requirements#6272
chore(deps): Bump pytest from 7.4.4 to 9.0.3 in /sdk/python/requirements#6272dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.4.4 to 9.0.3. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@7.4.4...9.0.3) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
| pytest==9.0.3 \ | ||
| --hash=sha256:2c5efc453d45394fdd706ade797c0a81091eccd1d6e4bccfcd476e2b8e0ab5d9 \ | ||
| --hash=sha256:b86ada508af81d19edeb213c681b1d48246c1a91d304c6c81a427674c17eb91c |
There was a problem hiding this comment.
🔴 pytest 9.0.3 in lock files violates pyproject.toml constraint of pytest<8
The lock files are updated to pytest==9.0.3, but pyproject.toml:139 specifies "pytest>=6.0.0,<8". This means the lock files are inconsistent with the declared dependency constraint. Installing from the lock file will install pytest 9.0.3, which the project explicitly excludes.
Was this helpful? React with 👍 or 👎 to provide feedback.
| pytest==9.0.3 \ | ||
| --hash=sha256:2c5efc453d45394fdd706ade797c0a81091eccd1d6e4bccfcd476e2b8e0ab5d9 \ | ||
| --hash=sha256:b86ada508af81d19edeb213c681b1d48246c1a91d304c6c81a427674c17eb91c |
There was a problem hiding this comment.
🔴 pytest 9.0.3 is incompatible with pytest-lazy-fixture 0.6.3
pytest-lazy-fixture==0.6.3 is known to be broken with pytest 8+ (it uses removed internal APIs). The project actively uses lazy_fixture in test files (sdk/python/tests/unit/local_feast_tests/test_local_feature_store.py, sdk/python/tests/integration/registration/test_universal_registry.py, sdk/python/tests/integration/registration/test_feature_store.py) with dozens of usages. Upgrading to pytest 9.0.3 while keeping pytest-lazy-fixture==0.6.3 (pinned in pyproject.toml:142) will cause test collection failures.
Prompt for agents
The PR upgrades pytest from 7.4.4 to 9.0.3, but pytest-lazy-fixture==0.6.3 is incompatible with pytest 8+. It uses internal pytest APIs (like SubRequest) that were removed. The project has dozens of lazy_fixture() calls across test files.
To fix this, either:
1. Keep pytest<8 (revert this change), or
2. Replace pytest-lazy-fixture with pytest-lazy-fixtures (note the plural 's') which is a maintained fork compatible with pytest 8+, and update the imports from `from pytest_lazyfixture import lazy_fixture` to `from pytest_lazy_fixtures import lf` across test files, or
3. Use pytest's built-in indirect parametrize feature to replace lazy_fixture usage.
Also update the constraint in pyproject.toml:139 which currently says pytest<8.
Was this helpful? React with 👍 or 👎 to provide feedback.
Bumps pytest from 7.4.4 to 9.0.3.
Release notes
Sourced from pytest's releases.
... (truncated)
Commits
a7d58d7Prepare release version 9.0.3089d981Merge pull request #14366 from bluetech/revert-14193-backport8127eafRevert "Fix: assertrepr_compare respects dict insertion order (#14050) (#14193)"99a7e60Merge pull request #14363 from pytest-dev/patchback/backports/9.0.x/95d8423bd...ddee02aMerge pull request #14343 from bluetech/cve-2025-71176-simple74eac69doc: Update training info (#14298) (#14301)f92dee7Merge pull request #14267 from pytest-dev/patchback/backports/9.0.x/d6fa26c62...7ee58acMerge pull request #12378 from Pierre-Sassoulas/fix-implicit-str-concat-and-d...37da870Merge pull request #14259 from mitre88/patch-4 (#14268)c34bfa3Add explanation for string context diffs (#14257) (#14266)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.