Skip to content

build(uv): bump pytest-env from 1.5.0 to 1.6.0 in the uv group#943

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-0fb3f7bc99
Closed

build(uv): bump pytest-env from 1.5.0 to 1.6.0 in the uv group#943
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-0fb3f7bc99

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 13, 2026

Bumps the uv group with 1 update: pytest-env.

Updates pytest-env from 1.5.0 to 1.6.0

Release notes

Sourced from pytest-env's releases.

1.6.0

What's Changed

Full Changelog: pytest-dev/pytest-env@1.5.1...1.6.0

1.5.1

What's Changed

New Contributors

Full Changelog: pytest-dev/pytest-env@1.5.0...1.5.1

Commits
  • 8bd22d1 ✨ feat(env): preserve existing env values (#213)
  • 81f9e0e Fix verbose source attribution when falling back to INI env (#211)
  • 81dc95d [pre-commit.ci] pre-commit autoupdate (#210)
  • 439cc76 [pre-commit.ci] pre-commit autoupdate (#209)
  • b1b498e Standardize .github files to .yaml suffix
  • 066dadc Add missing .github config files
  • 7d01327 Add SECURITY.md to .github/
  • 04259c9 build(deps): bump actions/download-artifact from 7 to 8 (#205)
  • 4fdb9d8 build(deps): bump actions/upload-artifact from 6 to 7 (#204)
  • 672e44f Add permissions to workflows (#203)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the uv group with 1 update: [pytest-env](https://github.com/pytest-dev/pytest-env).


Updates `pytest-env` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/pytest-dev/pytest-env/releases)
- [Commits](pytest-dev/pytest-env@1.5.0...1.6.0)

---
updated-dependencies:
- dependency-name: pytest-env
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 13, 2026
@dependabot dependabot bot requested a review from yxtay as a code owner March 13, 2026 09:19
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 13, 2026
@github-actions github-actions bot enabled auto-merge (squash) March 13, 2026 09:19
@github-actions
Copy link
Contributor

kics-logo

KICS version: v2.1.20

Category Results
CRITICAL CRITICAL 0
HIGH HIGH 0
MEDIUM MEDIUM 4
LOW LOW 0
INFO INFO 0
TRACE TRACE 0
TOTAL TOTAL 4
Metric Values
Files scanned placeholder 7
Files parsed placeholder 7
Files failed to scan placeholder 0
Total executed queries placeholder 73
Queries failed to execute placeholder 0
Execution time placeholder 1

Queries Results

Query Name Query Id Severity Platform Cwe Risk Score Category Experimental Description File Name Line Issue Type Search Key Expected Value Actual Value
Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 5.7 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 46 MissingAttribute FROM={{base AS dev}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends build-essential && rm -rf /var/lib/apt/lists/*}} Package 'build-essential' has version defined Package 'build-essential' does not have version defined
Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 5.7 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 36 MissingAttribute FROM={{debian:stable-slim@sha256:85dfcffff3c1e193877f143d05eaba8ae7f3f95cb0a32e0bc04a448077e1ac69 AS base}}.RUN={{apt-get update && apt-get upgrade --yes && apt-get install --yes --no-install-recommends curl && rm -rf /var/lib/apt/lists/*}} Package 'curl' has version defined Package 'curl' does not have version defined
Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 5.7 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 94 MissingAttribute FROM={{dev AS compile}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends binutils patchelf && rm -rf /var/lib/apt/lists/*}} Package 'patchelf' has version defined Package 'patchelf' does not have version defined
Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 5.7 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 94 MissingAttribute FROM={{dev AS compile}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends binutils patchelf && rm -rf /var/lib/apt/lists/*}} Package 'binutils' has version defined Package 'binutils' does not have version defined

@github-actions
Copy link
Contributor

MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ COPYPASTE jscpd yes no no 1.53s
✅ EDITORCONFIG editorconfig-checker 1 0 0 0.01s
✅ REPOSITORY checkov yes no no 22.24s
✅ REPOSITORY gitleaks yes no no 1.8s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 40.38s
✅ REPOSITORY secretlint yes no no 1.6s
✅ REPOSITORY semgrep yes no no 26.1s
✅ REPOSITORY syft yes no no 2.53s
✅ REPOSITORY trivy yes no no 13.47s
✅ REPOSITORY trivy-sbom yes no no 0.25s
✅ REPOSITORY trufflehog yes no no 4.52s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 16, 2026

Looks like pytest-env is no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Mar 16, 2026
auto-merge was automatically disabled March 16, 2026 07:44

Pull request was closed

@dependabot dependabot bot deleted the dependabot/uv/uv-0fb3f7bc99 branch March 16, 2026 07:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code size/XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant