ROB-566 Fix CVE-2025-71176 by upgrading pytest and related dependencies

[moshemorad]

Summary

This PR addresses CVE-2025-71176 by upgrading pytest to version 9.0.3 or later and updating related dependencies to compatible versions.

Key Changes

• pytest: Upgraded from ^7.2.2 to ^9.0.3 to fix the CVE vulnerability
• pytest-asyncio: Updated from >=0.21,<0.24 to ^1.3 for compatibility with pytest 9.x
• typing-extensions: Relaxed constraint from 4.6.0 to >=4.12.0,<5 to satisfy pytest-asyncio >=1.3 requirements

Notable Details

• The typing-extensions version constraint was updated to a range rather than a pinned version to allow flexibility while maintaining compatibility with pytest-asyncio >=1.3, which requires typing-extensions >=4.12
• Added clarifying comments in pyproject.toml explaining the CVE fix and dependency relationships
• Lock file was regenerated to reflect the new dependency versions

https://claude.ai/code/session_01TjjSMyvjymxtXMYFQ1NKbu

[coderabbitai]

Walkthrough

Dependency version constraints were updated across pyproject.toml and requirements.txt: typing-extensions, pytest, and pytest-asyncio were bumped to newer versions to address CVE-related issues, with inline comments documenting the rationale.

Changes

Dependency Updates

Layer / File(s)	Summary
pyproject.toml constraint updates pyproject.toml	typing-extensions widened to >=4.12.0,<5; dev dependencies pytest bumped to ^9.0.3 and pytest-asyncio to ^1.3, with added comments referencing CVE fixes.
requirements.txt pinned bumps requirements.txt	typing-extensions pinned version bumped from 4.6.0 to 4.16.0, and pytest-asyncio bumped from 0.23.7 to 1.4.0.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Suggested reviewers: Avi-Robusta

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly states the CVE fix and the dependency upgrades driving the change.
Description check	✅ Passed	The description matches the dependency updates and CVE fix reflected in the changeset.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/pip-pytest-cve-2025-71176-06tnuw

---

_{Comment @coderabbitai help to get the list of available commands.}