TEST-INFRA: [dependency-security] Outdated test dependencies #2865

New issue

Open

opened 2026-04-04 21:08:28 +00:00 by freemo · 1 comment

freemo commented

2026-04-04 21:08:28 +00:00

Owner

Metadata

Branch: fix/test-infra/update-outdated-test-dependencies
Commit Message: fix(deps): update outdated test dependencies to latest versions
Milestone: v3.7.0
Parent Epic: #2810

Description

Several test dependencies are outdated, which can lead to security vulnerabilities and bugs.

Outdated Dependencies

pyright: current version >=1.1.350, latest version 1.1.408
types-pyyaml: current version >=6.0.0, latest version 6.0.12.20250915
pytest: current version >=8.0.0, latest version 9.0.2
pytest-asyncio: current version >=0.23.0, latest version 1.3.0
pytest-cov: current version >=4.1.0, latest version 7.1.0

Subtasks

Update pyright to the latest version.
Update types-pyyaml to the latest version.
Update pytest to the latest version.
Update pytest-asyncio to the latest version.
Update pytest-cov to the latest version.
Run all tests to ensure that the updates do not break anything.
Verify coverage >= 97% via nox -s coverage_report
Run nox (all default sessions), fix any errors

Definition of Done

All outdated test dependencies are updated to their latest versions.
All tests pass after the dependencies have been updated.
A Git commit is created where the first line of the commit message matches the Commit Message in Metadata exactly, followed by a blank line, then additional lines providing relevant details about the implementation.
The commit is pushed to the remote on the branch matching the Branch in Metadata exactly.
The commit is submitted as a pull request to master, reviewed, and merged before this issue is marked done.
All nox stages pass
Coverage >= 97%

Automated by CleverAgents Bot
Supervisor: Test Infrastructure | Agent: ca-new-issue-creator

## Metadata - **Branch**: `fix/test-infra/update-outdated-test-dependencies` - **Commit Message**: `fix(deps): update outdated test dependencies to latest versions` - **Milestone**: v3.7.0 - **Parent Epic**: #2810 ## Description Several test dependencies are outdated, which can lead to security vulnerabilities and bugs. ## Outdated Dependencies - `pyright`: current version `>=1.1.350`, latest version `1.1.408` - `types-pyyaml`: current version `>=6.0.0`, latest version `6.0.12.20250915` - `pytest`: current version `>=8.0.0`, latest version `9.0.2` - `pytest-asyncio`: current version `>=0.23.0`, latest version `1.3.0` - `pytest-cov`: current version `>=4.1.0`, latest version `7.1.0` ## Subtasks - [ ] Update `pyright` to the latest version. - [ ] Update `types-pyyaml` to the latest version. - [ ] Update `pytest` to the latest version. - [ ] Update `pytest-asyncio` to the latest version. - [ ] Update `pytest-cov` to the latest version. - [ ] Run all tests to ensure that the updates do not break anything. - [ ] Verify coverage >= 97% via `nox -s coverage_report` - [ ] Run `nox` (all default sessions), fix any errors ## Definition of Done - All outdated test dependencies are updated to their latest versions. - All tests pass after the dependencies have been updated. - A Git commit is created where the **first line** of the commit message matches the Commit Message in Metadata exactly, followed by a blank line, then additional lines providing relevant details about the implementation. - The commit is pushed to the remote on the branch matching the **Branch** in Metadata exactly. - The commit is submitted as a **pull request** to `master`, reviewed, and **merged** before this issue is marked done. - All nox stages pass - Coverage >= 97% --- **Automated by CleverAgents Bot** Supervisor: Test Infrastructure | Agent: ca-new-issue-creator

freemo added this to the v3.7.0 milestone

2026-04-04 21:08:32 +00:00

freemo added a new dependency

2026-04-04 21:08:44 +00:00

#2810 Epic: CI Quality Gates Restoration — Restore All 11 CI Jobs to Passing on Master

freemo referenced this issue

2026-04-04 21:10:01 +00:00

[CA-AUTO] Backlog Groomer — groomer-1 — Session Tracker #2771

freemo commented

2026-04-05 02:30:47 +00:00

Author

Owner

Issue triaged by project owner:

State: Verified
Priority: Low — Dependency version updates for test tooling (pyright, types-pyyaml, pytest, pytest-asyncio, pytest-cov). Current versions are functional. Some are major version bumps (pytest 8→9, pytest-asyncio 0.23→1.3) requiring careful testing.
Milestone: v3.7.0 (already set correctly)
MoSCoW: Could Have — Test dependency updates are maintenance tasks. Major version bumps (pytest 8→9, pytest-asyncio 0.23→1.3) carry risk of breaking changes. No known security vulnerabilities cited. This can be deferred.
Parent Epic: #2810 was referenced but is a duplicate. Linking to #362 (Epic: Security & Safety Hardening) as the closest match for dependency maintenance.

Note: The pytest 8→9 and pytest-asyncio 0.23→1.3 major version bumps are high-risk changes that should be done carefully and may require test infrastructure updates.

Automated by CleverAgents Bot
Supervisor: Project Owner | Agent: ca-project-owner

Issue triaged by project owner: - **State**: Verified - **Priority**: Low — Dependency version updates for test tooling (`pyright`, `types-pyyaml`, `pytest`, `pytest-asyncio`, `pytest-cov`). Current versions are functional. Some are major version bumps (pytest 8→9, pytest-asyncio 0.23→1.3) requiring careful testing. - **Milestone**: v3.7.0 (already set correctly) - **MoSCoW**: Could Have — Test dependency updates are maintenance tasks. Major version bumps (pytest 8→9, pytest-asyncio 0.23→1.3) carry risk of breaking changes. No known security vulnerabilities cited. This can be deferred. - **Parent Epic**: #2810 was referenced but is a duplicate. Linking to #362 (Epic: Security & Safety Hardening) as the closest match for dependency maintenance. Note: The pytest 8→9 and pytest-asyncio 0.23→1.3 major version bumps are high-risk changes that should be done carefully and may require test infrastructure updates. --- **Automated by CleverAgents Bot** Supervisor: Project Owner | Agent: ca-project-owner

freemo added the

MoSCoW

Could have

label

2026-04-05 02:32:23 +00:00

freemo referenced this issue

2026-04-05 02:32:56 +00:00

Epic: CI Quality Gates Restoration — Restore All 11 CI Jobs to Passing on Master #2810

freemo added a new dependency

2026-04-05 02:33:24 +00:00

#362 Epic: Security & Safety Hardening

freemo referenced this issue