Update all dependencies #289

renovate · 2026-01-24T02:12:51Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v5` → `v6`
actions/setup-python	action	major	`v5` → `v6`
attrs (changelog)	dependencies	minor	`25.3.0` → `25.4.0`
bandit (source, changelog)	dev	minor	`1.8.6` → `1.9.3`
black (changelog)	dev	major	`25.1.0` → `26.1.0`
codecov/codecov-action (changelog)	action	digest	`fdcc847` → `671740a`
mypy (changelog)	dev	minor	`1.17.1` → `1.19.1`
pubtools-pulplib (changelog)	dependencies	minor	`2.42.1` → `2.43.2`
pytest (changelog)	test	major	`8.4.1` → `9.0.2`
pytest-cov (changelog)	dev	major	`6.2.1` → `7.0.0`
requests-gssapi	dependencies	minor	`1.3.0` → `1.4.0`
sphinx (changelog)	docs	major	`8.2.3` → `9.1.0`
ubi-config	dependencies	patch	`3.2.1` → `3.2.2`

Release Notes

actions/checkout (actions/checkout)

`v6`

Compare Source

actions/setup-python (actions/setup-python)

`v6`

Compare Source

python-attrs/attrs (attrs)

`v25.4.0`

Compare Source

Backwards-incompatible Changes

Class-level kw_only=True behavior is now consistent with dataclasses.

Previously, a class that sets kw_only=True makes all attributes keyword-only, including those from base classes.
If an attribute sets kw_only=False, that setting is ignored, and it is still made keyword-only.

Now, only the attributes defined in that class that doesn't explicitly set kw_only=False are made keyword-only.

This shouldn't be a problem for most users, unless you have a pattern like this:
```
@&#8203;attrs.define(kw_only=True)
class Base:
    a: int
    b: int = attrs.field(default=1, kw_only=False)

@&#8203;attrs.define
class Subclass(Base):
    c: int
```
Here, we have a kw_only=True attrs class (Base) with an attribute that sets kw_only=False and has a default (Base.b), and then create a subclass (Subclass) with required arguments (Subclass.c).
Previously this would work, since it would make Base.b keyword-only, but now this fails since Base.b is positional, and we have a required positional argument (Subclass.c) following another argument with defaults.
#1457

Changes

Values passed to the __init__() method of attrs classes are now correctly passed to __attrs_pre_init__() instead of their default values (in cases where kw_only was not specified).
#1427
Added support for Python 3.14 and PEP 749.
#1446,
#1451
attrs.validators.deep_mapping() now allows to leave out either key_validator xor value_validator.
#1448
attrs.validators.deep_iterator() and attrs.validators.deep_mapping() now accept lists and tuples for all validators and wrap them into a attrs.validators.and_().
#1449
Added a new experimental way to inspect classes:

attrs.inspect(cls) returns the effective class-wide parameters that were used by attrs to construct the class.

The returned class is the same data structure that attrs uses internally to decide how to construct the final class.
#1454
Fixed annotations for attrs.field(converter=...).
Previously, a tuple of converters was only accepted if it had exactly one element.
#1461
The performance of attrs.asdict() has been improved by 45–260%.
#1463
The performance of attrs.astuple() has been improved by 49–270%.
#1469
The type annotation for attrs.validators.or_() now allows for different types of validators.

This was only an issue on Pyright.
#1474

PyCQA/bandit (bandit)

`v1.9.3`

Compare Source

What's Changed

Bump actions/checkout from 5 to 6 by @dependabot[bot] in #1334
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1335
Fix B608 to detect VALUES( without space by @kfess in #1337
Add check for hardcoded passwords in dicts. by @alanverresen in #1338
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1341
Update tox tests for Python 3.10 by @willschlitzer in #1346
Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1347
Limit B614 to torch.load deserializers by @dibussoc in #1348

New Contributors

@kfess made their first contribution in #1337
@alanverresen made their first contribution in #1338
@willschlitzer made their first contribution in #1346
@dibussoc made their first contribution in #1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

`v1.9.2`

Compare Source

What's Changed

Argparse Python 3.14 enhancements by @ericwb in #1331
Check whether Constant value is str by @ericwb in #1333

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

`v1.9.1`

Compare Source

What's Changed

More Python version related fixes by @ericwb in #1327

Full Changelog: PyCQA/bandit@1.9.0...1.9.1

psf/black (black)

`v26.1.0`

Compare Source

Highlights

Introduces the 2026 stable style (#4892), stabilizing the following changes:

always_one_newline_after_import: Always force one blank line after import
statements, except when the line after the import is a comment or an import statement
(#4489)
fix_fmt_skip_in_one_liners: Fix # fmt: skip behavior on one-liner declarations,
such as def foo(): return "mock" # fmt: skip, where previously the declaration would
have been incorrectly collapsed (#4800)
fix_module_docstring_detection: Fix module docstrings being treated as normal
strings if preceded by comments (#4764)
fix_type_expansion_split: Fix type expansions split in generic functions (#4777)
multiline_string_handling: Make expressions involving multiline strings more compact
(#1879)
normalize_cr_newlines: Add \r style newlines to the potential newlines to
normalize file newlines both from and to (#4710)
remove_parens_around_except_types: Remove parentheses around multiple exception
types in except and except* without as (#4720)
remove_parens_from_assignment_lhs: Remove unnecessary parentheses from the left-hand
side of assignments while preserving magic trailing commas and intentional multiline
formatting (#4865)
standardize_type_comments: Format type comments which have zero or more spaces
between # and type: or between type: and value to # type: (value) (#4645)

The following change was not in any previous stable release:

Regenerated the _width_table.py and added tests for the Khmer language (#4253)

This release alo bumps pathspec to v1 and fixes inconsistencies with Git's
.gitignore logic (#4958). Now, files will be ignored if a pattern matches them, even
if the parent directory is directly unignored. For example, Black would previously
format exclude/not_this/foo.py with this .gitignore:

exclude/
!exclude/not_this/

Now, exclude/not_this/foo.py will remain ignored. To ensure exclude/not_this/ and
all of it's children are included in formatting (and in Git), use this .gitignore:

*/exclude/*
!*/exclude/not_this/

This new behavior matches Git. The leading */ are only necessary if you wish to ignore
matching subdirectories (like the previous behavior did), and not just matching root
directories.

Output

Explicitly shutdown the multiprocessing manager when run in diff mode too (#4952)

Integrations

Upgraded PyPI upload workflow to use Trusted Publishing (#4611)

`v25.12.0`

Compare Source

Highlights

Black no longer supports running with Python 3.9 (#4842)

Stable style

Fix bug where comments preceding # fmt: off/# fmt: on blocks were incorrectly
removed, particularly affecting Jupytext's # %% [markdown] comments (#4845)
Fix crash when multiple # fmt: skip comments are used in a multi-part if-clause, on
string literals, or on dictionary entries with long lines (#4872)
Fix possible crash when fmt: directives aren't on the top level (#4856)

Preview style

Fix fmt: skip skipping the line after instead of the line it's on (#4855)
Remove unnecessary parentheses from the left-hand side of assignments while preserving
magic trailing commas and intentional multiline formatting (#4865)
Fix fix_fmt_skip_in_one_liners crashing on with statements (#4853)
Fix fix_fmt_skip_in_one_liners crashing on annotated parameters (#4854)
Fix new lines being added after imports with # fmt: skip on them (#4894)

Packaging

Releases now include arm64 Windows binaries and wheels (#4814)

Integrations

Add output-file input to GitHub Action psf/black to write formatter output to a
file for artifact capture and log cleanliness (#4824)

`v25.11.0`

Compare Source

Highlights

Enable base 3.14 support (#4804)
Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
Comments containing fmt directives now preserve their exact formatting instead of
being normalized (#4811)

Preview style

Move multiline_string_handling from --unstable to --preview (#4760)
Fix bug where module docstrings would be treated as normal strings if preceded by
comments (#4764)
Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
Standardize type comments to form # type: <value> (#4645)
Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound
statements with semicolon-separated bodies (#4800)

Configuration

Add no_cache option to control caching behavior. (#4803)

Packaging

Releases now include arm64 Linux binaries (#4773)

Output

Write unchanged content to stdout when excluding formatting from stdin using pipes
(#4610)

Blackd

Implemented BlackDClient. This simple python client allows to easily send formatting
requests to blackd (#4774)

Integrations

Enable 3.14 base CI (#4804)
Enhance GitHub Action psf/black to support the required-version major-version-only
"stability" format when using pyproject.toml (#4770)
Improve error message for vim plugin users. It now handles independently vim version
Vim: Warn on unsupported Vim and Python versions independently (#4772)
Vim: Print the import paths when importing black fails (#4675)
Vim: Fix handling of virtualenvs that have a different Python version (#4675)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names
(#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with
statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items
(#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still
be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after
expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without
as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from
and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type
parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in
pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

python/mypy (mypy)

`v1.19.1`

Compare Source

Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)
Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)
Allow types.NoneType in match cases (A5rocks, PR 20383)
Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)
Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)
Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)
Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)
Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)

`v1.19.0`

Compare Source

`v1.18.2`

Compare Source

Fix crash on recursive alias (Ivan Levkivskyi, PR 19845)
Add additional guidance for stubtest errors when runtime is object.__init__ (Stephen Morton, PR 19733)
Fix handling of None values in f-string expressions in mypyc (BobTheBuidler, PR 19846)

`v1.18.1`

Compare Source

We’ve just uploaded mypy 1.18.1 to the Python Package Index (PyPI).
Mypy is a static type checker for Python. This release includes new features, performance
improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Mypy Performance Improvements

Mypy 1.18.1 includes numerous performance improvements, resulting in about 40% speedup
compared to 1.17 when type checking mypy itself. In extreme cases, the improvement
can be 10x or higher. The list below is an overview of the various mypy optimizations.
Many mypyc improvements (discussed in a separate section below) also improve performance.

Type caching optimizations have a small risk of causing regressions. When
reporting issues with unexpected inferred types, please also check if
--disable-expression-cache will work around the issue, as it turns off some of
these optimizations.

Improve self check performance by 1.8% (Jukka Lehtosalo, PR 19768, 19769, 19770)
Optimize fixed-format deserialization (Ivan Levkivskyi, PR 19765)
Use macros to optimize fixed-format deserialization (Ivan Levkivskyi, PR 19757)
Two additional micro‑optimizations (Ivan Levkivskyi, PR 19627)
Another set of micro‑optimizations (Ivan Levkivskyi, PR 19633)
Cache common types (Ivan Levkivskyi, PR 19621)
Skip more method bodies in third‑party libraries for speed (Ivan Levkivskyi, PR 19586)
Simplify the representation of callable types (Ivan Levkivskyi, PR 19580)
Add cache for types of some expressions (Ivan Levkivskyi, PR 19505)
Use cache for dictionary expressions (Ivan Levkivskyi, PR 19536)
Use cache for binary operations (Ivan Levkivskyi, PR 19523)
Cache types of type objects (Ivan Levkivskyi, PR 19514)
Avoid duplicate work when checking boolean operations (Ivan Levkivskyi, PR 19515)
Optimize generic inference passes (Ivan Levkivskyi, PR 19501)
Speed up the default plugin (Jukka Lehtosalo, PRs 19385 and 19462)
Remove nested imports from the default plugin (Ivan Levkivskyi, PR 19388)
Micro‑optimize type expansion (Jukka Lehtosalo, PR 19461)
Micro‑optimize type indirection (Jukka Lehtosalo, PR 19460)
Micro‑optimize the plugin framework (Jukka Lehtosalo, PR 19464)
Avoid temporary set creation in subtype checking (Jukka Lehtosalo, PR 19463)
Subtype checking micro‑optimization (Jukka Lehtosalo, PR 19384)
Return early where possible in subtype check (Stanislav Terliakov, PR 19400)
Deduplicate some types before joining (Stanislav Terliakov, PR 19409)
Speed up type checking by caching argument inference context (Jukka Lehtosalo, PR 19323)
Optimize binding method self argument type and deprecation checks (Ivan Levkivskyi, PR 19556)
Keep trivial instance types/aliases during expansion (Ivan Levkivskyi, PR 19543)

Fixed‑Format Cache (Experimental)

Mypy now supports a new cache format used for faster incremental builds. It makes
incremental builds up to twice as fast. The feature is experimental and
currently only supported when using a compiled version of mypy. Use --fixed-format-cache
to enable the new format, or fixed_format_cache = True in a configuration file.

We plan to enable this by default in a future mypy release, and we'll eventually
deprecate and remove support for the original JSON-based format.

Unlike the JSON-based cache format, the new binary format is currently
not easy to parse and inspect by mypy users. We are planning to provide a tool to
convert fixed-format cache files to JSON, but details of the output JSON may be
different from the current JSON format. If you rely on being able to inspect
mypy cache files, we recommend creating a GitHub issue and explaining your use
case, so that we can more likely provide support for it. (Using
MypyFile.read(binary_data) to inspect cache data may be sufficient to support
some use cases.)

This feature was contributed by Ivan Levkivskyi (PR 19668, 19735, 19750, 19681, 19752, 19815).

Flexible Variable Definitions: Update

Mypy 1.16.0 introduced --allow-redefinition-new, which allows redefining variables
with different types, and inferring union types for variables from multiple assignments.
The feature is now documented in the --help output, but the feature is still experimental.

We are planning to enable this by default in mypy 2.0, and we will also deprecate the
older --allow-redefinition flag. Since the new behavior differs significantly from
the older flag, we encourage users of --allow-redefinition to experiment with
--allow-redefinition-new and create a GitHub issue if the new functionality doesn't
support some important use cases.

This feature was contributed by Jukka Lehtosalo.

Inferred Type for Bare ClassVar

A ClassVar without an explicit type annotation now causes the type of the variable
to be inferred from the initializer:

from typing import ClassVar

class Item:

### Type of 'next_id' is now 'int' (it was 'Any')
    next_id: ClassVar = 1

    ...

This feature was contributed by Ivan Levkivskyi (PR 19573).

Disjoint Base Classes (@disjoint_base, PEP 800)

Mypy now understands disjoint bases (PEP 800): it recognizes the @disjoint_base
decorator, and rejects class definitions that combine mutually incompatible base classes,
and takes advantage of the fact that such classes cannot exist in reachability and
narrowing logic.

This class definition will now generate an error:

release-engineering/pubtools-pulplib (pubtools-pulplib)

`v2.43.2`

Compare Source

Extra release due to issues with pypi release

`v2.43.0`

Compare Source

Added filelist attr and get_files() method to RpmUnit

pytest-dev/pytest (pytest)

`v9.0.2`

Compare Source

pytest 9.0.2 (2025-12-06)

Bug fixes

#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.
#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.
#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0.
Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim.
It will be deprecated in pytest 9.1 and removed in pytest 10.
#13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.

Improved documentation

#4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.

`v9.0.1`

Compare Source

pytest 9.0.1 (2025-11-12)

Bug fixes

#13895: Restore support for skipping tests via raise unittest.SkipTest.
#13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.
#13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.
#13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

#13933: The tox configuration has been adjusted to make sure the desired
version string can be passed into its package_env through
the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment
variable as a part of the release process -- by webknjaz.

Contributor-facing changes

#13891, #13942: The CI/CD part of the release automation is now capable of
creating GitHub Releases without having a Git checkout on
disk -- by bluetech and webknjaz.
#13933: The tox configuration has been adjusted to make sure the desired
version string can be passed into its package_env through
the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment
variable as a part of the release process -- by webknjaz.

`v9.0.0`

Compare Source

pytest 9.0.0 (2025-11-05)

New features

#1367: Support for subtests has been added.

subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

Example:
```
def contains_docstring(p: Path) -> bool:
    """Return True if the given Python file contains a top-level docstring."""
    ...

def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
    for path in Path.cwd().glob("*.py"):
        with subtests.test(path=str(path)):
            assert contains_docstring(path)
```
Each assert failure or error is caught by the context manager and reported individually, giving a clear picture of all files that are missing a docstring.

In addition, unittest.TestCase.subTest is now also supported.

This feature was originally implemented as a separate plugin in pytest-subtests, but since then has been merged into the core.

[!NOTE]
This feature is experimental and will likely evolve in future releases. By that we mean that we might change how subtests are reported on failure, but the functionality and how to use it are stable.
#13743: Added support for native TOML configuration files.

While pytest, since version 6, supports configuration in pyproject.toml files under [tool.pytest.ini_options],
it does so in an "INI compatibility mode", where all configuration values are treated as strings or list of strings.
Now, pytest supports the native TOML data model.

In pyproject.toml, the native TOML configuration is under the [tool.pytest] table.
```
# pyproject.toml
[tool.pytest]
minversion = "9.0"
addopts = ["-ra", "-q"]
testpaths = [
    "tests",
    "integration",
]
```
The [tool.pytest.ini_options] table remains supported, but both tables cannot be used at the same time.

If you prefer to use a separate configuration file, or don't use pyproject.toml, you can use pytest.toml or .pytest.toml:
```
# pytest.toml or .pytest.toml
[pytest]
minversion = "9.0"
addopts = ["-ra", "-q"]
testpaths = [
    "tests",
    "integration",
]
```
The documentation now (sometimes) shows configuration snippets in both TOML and INI formats, in a tabbed interface.

See config file formats for full details.
#13823: Added a "strict mode" enabled by the strict configuration option.

When set to true, the strict option currently enables
- strict_config
- strict_markers
- strict_parametrization_ids
- strict_xfail
The individual strictness options can be explicitly set to override the global strict setting.

The previously-deprecated --strict command-line flag now enables strict mode.

If pytest adds new strictness options in the future, they will also be enabled in strict mode.
Therefore, you should only enable strict mode if you use a pinned/locked version of pytest,
or if you want to proactively adopt new strictness options as they are added.

See strict mode for more details.
#13737: Added the strict_parametrization_ids configuration option.

When set, pytest emits an error if it detects non-unique parameter set IDs,
rather than automatically making the IDs unique by adding 0, 1, ... to them.
This can be particularly useful for catching unintended duplicates.
#13072: Added support for displaying test session progress in the terminal tab using the OSC 9;4; ANSI sequence.
When pytest runs in a supported terminal emulator like ConEmu, Gnome Terminal, Ptyxis, Windows Terminal, Kitty or Ghostty,
you'll see the progress in the terminal tab or window,
allowing you to monitor pytest's progress at a glance.

This feature is automatically enabled when running in a TTY. It is implemented as an internal plugin. If needed, it can be disabled as follows:
- On a user level, using -p no:terminalprogress on the command line or via an environment variable PYTEST_ADDOPTS='-p no:terminalprogress'.
- On a project configuration level, using addopts = "-p no:terminalprogress".
#478: Support PEP420 (implicit namespace packages) as --pyargs target when consider_namespace_packages is true in the config.

Previously, this option only impacted package imports, now it also impacts tests discovery.
#13678: Added a new faulthandler_exit_on_timeout configuration option set to "false" by default to let faulthandler interrupt the pytest process after a timeout in case of deadlock.

Previously, a faulthandler timeout would only dump the traceback of all threads to stderr, but would not interrupt the pytest process.

-- by ogrisel.
#13829: Added support for configuration option aliases via the aliases parameter in Parser.addini() <pytest.Parser.addini>.

Plugins can now register alternative names for configuration options,
allowing for more flexibility in configuration naming and supporting backward compatibility when renaming options.
The canonical name always takes precedence if both the canonical name and an alias are specified in the configuration file.

Improvements in existing functionality

#13330: Having pytest configuration spread over more than one file (for example having both a pytest.ini file and pyproject.toml with a [tool.pytest.ini_options] table) will now print a warning to make it clearer to the user that only one of them is actually used.

-- by sgaist
#13574: The single argument --version no longer loads the entire plugin infrastructure, making it faster and more reliable when displaying only the pytest version.

Passing --version twice (e.g., pytest --version --version) retains the original behavior, showing both the pytest version and plugin information.

[!NOTE]
Since --version is now processed early, it only takes effect when passed directly via the command line. It will not work if set through other mechanisms, such as PYTEST_ADDOPTS or addopts.
#13823: Added strict_xfail as an alias to the xfail_strict option,
strict_config as an alias to the --strict-config flag,
and strict_markers as an alias to the --strict-markers flag.
This makes all strictness options consistently have configuration options with the prefix strict_.
#13700: --junitxml no longer prints the generated xml file summary at the end of the pytest session when --quiet is given.
#13732: Previously, when filtering warnings, pytest would fail if the filter referenced a class that could not be imported. Now, this only outputs a message indicating the problem.
#13859: Clarify the error message for pytest.raises() when a regex match fails.
#13861: Better sentence structure in a test's expected error message. Previously, the error message would be "expected exception must be <expected>, but got <actual>". Now, it is "Expected <expected>, but got <actual>".

Removals and backward incompatible breaking changes

#12083: Fixed a bug where an invocation such as pytest a/ a/b would cause only tests from a/b to run, and not other tests under a/.

The fix entails a few breaking changes to how such overlapping arguments and duplicates are handled:
1. pytest a/b a/ or pytest a/ a/b are equivalent to pytest a; if an argument overlaps another arguments, only the prefix remains.
2. pytest x.py x.py is equivalent to pytest x.py; previously such an invocation was taken as an explicit request to run the tests from the file twice.
If you rely on these behaviors, consider using --keep-duplicates <duplicate-paths>, which retains its existing behavior (including the bug).
#13719: Support for Python 3.9 is dropped following its end of life.
#13766: Previously, pytest would assume it was running in a CI/CD environment if either of the environment variables $CI or $BUILD_NUMBER was defined;
now, CI mode is only activated if at least one of those variables is defined and set to a non-empty value.
#13779: PytestRemovedIn9Warning deprecation warnings are now errors by default.

Following our plan to remove deprecated features with as little disruption as
possible, all warnings of type PytestRemovedIn9Warning now generate errors
instead of warning messages by default.

The affected features will be effectively removed in pytest 9.1, so please consult the
deprecations section in the docs for directions on how to update existing code.

In the pytest 9.0.X series, it is possible to change the errors back into warnings as a
stopgap measure by adding this to your pytest.ini file:
```
[pytest]
filterwarnings =
    ignore::pytest.PytestRemovedIn9Warning
```
But this will stop working when pytest 9.1 is released.

If you have concerns about the removal of a specific feature, please add a
comment to 13779.

Deprecations (removal in next major release)

#13807: monkeypatch.syspath_prepend() <pytest.MonkeyPatch.syspath_prepend> now issues a deprecation warning when the prepended path contains legacy namespace packages (those using pkg_resources.declare_namespace()).
Users should migrate to native namespace packages (420).
See monkeypatch-fixup-namespace-packages for details.

Bug fixes

#13445: Made the type annotations of pytest.skip and friends more spec-complaint to have them work across more type checkers.
#13537: Fixed a bug in which ExceptionGroup with only Skipped exceptions in teardown was not handled correctly and showed as error.
#13598: Fixed possible collection confusion on Windows when short paths and symlinks are involved.
#13716: Fixed a bug where a nonsensical invocation like pytest x.py[a] (a file cannot be parametrized) was silently treated as pytest x.py. This is now a usage error.
#13722: Fixed a misleading assertion failure message when using pytest.approx on mappings with differing lengths.
#13773: Fixed the static fixture closure calculation to properly consider transitive dependencies requested by overridden fixtures.
#13816: Fixed pytest.approx which now returns a clearer error message when comparing mappings with different keys.
#13849: Hidden .pytest.ini files are now picked up as the config file even if empty.
This was an inconsistency with non-hidden pytest.ini.
#13865: Fixed --show-capture with --tb=line.
#13522: Fixed pytester in subprocess mode ignored all :attr`pytester.plugins <pytest.Pytester.plugins>` except the first.

Fixed pytester in subprocess mode silently ignored non-str pytester.plugins <pytest.Pytester.plugins>.
Now it errors instead.
If you are affected by this, specify the plugin by name, or switch the affected tests to use pytester.runpytest_inprocess <pytest.Pytester.runpytest_inprocess> explicitly instead.

Packaging updates and notes for downstreams

#13791: Minimum requirements on iniconfig and packaging were bumped to 1.0.1 and 22.0.0, respectively.

Contributor-facing changes

#12244: Fixed self-test failures when TERM=dumb.
#12474: Added scheduled GitHub Action Workflow to run Sphinx linkchecks in repo documentation.
#13621: pytest's own testsuite now handles the lsof command hanging (e.g. due to unreachable network filesystems), with the affected selftests being skipped after 10 seconds.
#13638: Fixed deprecated gh pr new command in scripts/prepare-release-pr.py.
The script now uses gh pr create which is compatible with GitHub CLI v2.0+.
#13695: Flush stdout and stderr in Pytester.run to avoid truncated outputs in test_faulthandler.py::test_timeout on CI -- by ogrisel.
#13771: Skip test_do_not_collect_symlink_siblings on Windows environments without symlink support to avoid false negatives.
#13841: tox>=4 is now required when contributing to pytest.
#13625: Added missing docstrings to pytest_addoption(), pytest_configure(), and cacheshow() functions in cacheprovider.py.

Miscellaneous internal changes

#13830: Configuration overrides (-o/--override-ini) are now processed during startup rather than during config.getini() <pytest.Config.getini>.

`v8.4.2`

Compare Source

pytest 8.4.2 (2025-09-03)

Bug fixes

#13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.
#13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.
#13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.
#13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.
#13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

#13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

#13480: Self-testing: fixed a few test failures when run w

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Update all dependencies

bd97261

renovate bot requested review from drepelov and rbikar as code owners January 24, 2026 02:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all dependencies #289

Update all dependencies #289

Uh oh!

renovate bot commented Jan 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Update all dependencies #289

Are you sure you want to change the base?

Update all dependencies #289

Uh oh!

Conversation

renovate bot commented Jan 24, 2026

Release Notes

Backwards-incompatible Changes

Changes

What's Changed

New Contributors

What's Changed

What's Changed

Highlights

Output

Integrations

Highlights

Stable style

Preview style

Packaging

Integrations

Highlights

Stable style

Preview style

Configuration

Packaging

Output

Blackd

Integrations

Highlights

Stable style

Preview style

Parser

Performance

Integrations

Documentation

Mypy Performance Improvements

Fixed‑Format Cache (Experimental)

Flexible Variable Definitions: Update

Inferred Type for Bare ClassVar

Disjoint Base Classes (@​disjoint_base, PEP 800)

pytest 9.0.2 (2025-12-06)

Bug fixes

Improved documentation

pytest 9.0.1 (2025-11-12)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

pytest 9.0.0 (2025-11-05)

New features

Improvements in existing functionality

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

Miscellaneous internal changes

pytest 8.4.2 (2025-09-03)

Bug fixes

Improved documentation

Contributor-facing changes

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Disjoint Base Classes (@disjoint_base, PEP 800)