chore(deps): update dependency pytest to v9 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pytest (changelog)	>5.4.0,<8 → >9.1,<10

---

pytest has vulnerable tmpdir handling

CVE-2025-71176 / GHSA-6w46-j5rx-g56g

More information

Details

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly gain privileges.

Severity

• CVSS Score: 6.8 / 10 (Medium)
• Vector String: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-71176
• https://github.com/pytest-dev/pytest/issues/13669
• https://www.openwall.com/lists/oss-security/2026/01/21/5
• https://github.com/pytest-dev/pytest/pull/14343
• https://github.com/pytest-dev/pytest/commit/95d8423bd24992deea5b9df32555fa1741679e2c
• https://github.com/pytest-dev/pytest/releases/tag/9.0.3
• https://github.com/advisories/GHSA-6w46-j5rx-g56g

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock

Updating dependencies
Resolving dependencies...


The current project's supported Python range (>=3.7,<4.0) is not compatible with some of the required packages Python requirement:
  - pytest requires Python >=3.10, so it will not be installable for Python >=3.7,<3.10
  - pytest requires Python >=3.10, so it will not be installable for Python >=3.7,<3.10
  - pytest requires Python >=3.10, so it will not be installable for Python >=3.7,<3.10
  - pytest requires Python >=3.10, so it will not be installable for Python >=3.7,<3.10
  - pytest requires Python >=3.10, so it will not be installable for Python >=3.7,<3.10

Because no versions of pytest match >9.0,<9.0.1 || >9.0.1,<9.0.2 || >9.0.2,<9.0.3 || >9.0.3,<9.1.0 || >9.1.0,<9.1.1 || >9.1.1,<10
 and pytest (9.0.1) requires Python >=3.10, pytest is forbidden.
And because pytest (9.0.2) requires Python >=3.10, pytest is forbidden.
And because pytest (9.0.3) requires Python >=3.10
 and pytest (9.1.0) requires Python >=3.10, pytest is forbidden.
So, because pytest (9.1.1) requires Python >=3.10
 and pytest-splunk-addon depends on pytest (>9.0,<10), version solving failed.

  * Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties

    For pytest, a possible solution would be to set the `python` property to ">=3.10,<4.0"
For pytest, a possible solution would be to set the `python` property to ">=3.10,<4.0"
For pytest, a possible solution would be to set the `python` property to ">=3.10,<4.0"
For pytest, a possible solution would be to set the `python` property to ">=3.10,<4.0"
For pytest, a possible solution would be to set the `python` property to ">=3.10,<4.0"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers