Skip to content

fix(deps): vuln pytest (patch → 7.4.4) #801

Merged
dd-prapprover-prod-77c48c[bot] merged 5 commits into
v3from
engraver-auto-version-upgrade/minorpatch/uv/1-1783384371
Jul 9, 2026
Merged

fix(deps): vuln pytest (patch → 7.4.4) #801
dd-prapprover-prod-77c48c[bot] merged 5 commits into
v3from
engraver-auto-version-upgrade/minorpatch/uv/1-1783384371

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: Security update — 1 package upgraded (patch changes only)

Manifests changed:

  • . (uv)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
pytest 7.4 7.4.4 patch Direct 2 MEDIUM

Security Details

ℹ️ Other Vulnerabilities (2)
Package CVE Severity Summary Unsafe Version Fixed In Case
pytest GHSA-6w46-j5rx-g56g MODERATE pytest has vulnerable tmpdir handling 7.4 9.0.3 -
pytest CVE-2025-71176 MODERATE - 7.4 - -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@datadog-prod-us1-3

This comment has been minimized.

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with v3 — rebased onto ead5f8b.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-26fcfa dd-octo-sts-26fcfa Bot force-pushed the engraver-auto-version-upgrade/minorpatch/uv/1-1783384371 branch from dce3038 to f1cde07 Compare July 8, 2026 12:33
@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor Author

Auto-rebase failed

Could not update your branch. This may be due to a concurrent update; the next push to v3 will retry automatically.

Error details

activity error (type: auto_rebase.AutoRebase_GitPushToTempBranch, scheduledEventID: 45, startedEventID: 46, identity: 1@auto-rebase-worker-7498f48c4f-wnkds@): git push to temp branch auto-rebase/tmp/engraver-auto-version-upgrade/minorpatch/uv/1-1783384371: remote: Permission to DataDog/guarddog.git denied to dd-octo-sts-aad58d[bot].
fatal: unable to access 'https://github.com/DataDog/guarddog.git/': The requested URL returned error: 403: exit status 128 (type: wrapError, retryable: true): exit status 128 (type: ExitError, retryable: true)


Auto-Rebase · Add no-auto-rebase to opt out

@gh-worker-campaigns-3e9aa4

gh-worker-campaigns-3e9aa4 Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with v3 — rebased onto 23f7b1b.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-98cdbc dd-octo-sts-98cdbc Bot force-pushed the engraver-auto-version-upgrade/minorpatch/uv/1-1783384371 branch from f1cde07 to 2ae70f9 Compare July 8, 2026 12:47
@dd-octo-sts-4aefcb dd-octo-sts-4aefcb Bot force-pushed the engraver-auto-version-upgrade/minorpatch/uv/1-1783384371 branch from 2ae70f9 to 7b6af4d Compare July 8, 2026 13:09
@dd-octo-sts-09fbc5 dd-octo-sts-09fbc5 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/uv/1-1783384371 branch from 7b6af4d to 2b4cc5e Compare July 8, 2026 13:15
dd-octo-sts-94e5d1 Bot and others added 5 commits July 8, 2026 15:40
Co-authored-by: dd-octo-sts-09fbc5[bot] <256648608+dd-octo-sts-09fbc5[bot]@users.noreply.github.com>
Co-authored-by: dd-octo-sts-09fbc5[bot] <256648608+dd-octo-sts-09fbc5[bot]@users.noreply.github.com>
Co-authored-by: dd-octo-sts-09fbc5[bot] <256648608+dd-octo-sts-09fbc5[bot]@users.noreply.github.com>
Co-authored-by: dd-octo-sts-09fbc5[bot] <256648608+dd-octo-sts-09fbc5[bot]@users.noreply.github.com>
Co-authored-by: dd-octo-sts-09fbc5[bot] <256648608+dd-octo-sts-09fbc5[bot]@users.noreply.github.com>
@dd-octo-sts-94e5d1 dd-octo-sts-94e5d1 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/uv/1-1783384371 branch from 2b4cc5e to aee334e Compare July 8, 2026 15:40
@campaigner-prod campaigner-prod Bot marked this pull request as ready for review July 9, 2026 12:25
@campaigner-prod campaigner-prod Bot requested a review from a team as a code owner July 9, 2026 12:25
@dd-prapprover-prod-77c48c

dd-prapprover-prod-77c48c Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

  • ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-07-09T12:26:14Z
  • ✅ CI tests passed - 2026-07-09T12:26:18Z
  • ✅ Approved (commit: aee334e) - 2026-07-09T12:26:20Z
  • ✅ Merge Started
  • ✅ Merged - 2026-07-09T12:26:30Z

➡️ Current phase: PR merged successfully! ✅

@dd-prapprover-prod-77c48c dd-prapprover-prod-77c48c Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR has been automatically approved by the DD PR Approver bot.

@dd-prapprover-prod-77c48c dd-prapprover-prod-77c48c Bot merged commit ecf509d into v3 Jul 9, 2026
10 checks passed
@dd-prapprover-prod-77c48c dd-prapprover-prod-77c48c Bot deleted the engraver-auto-version-upgrade/minorpatch/uv/1-1783384371 branch July 9, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants