deps(python): bump the testing group with 3 updates by dependabot[bot] · Pull Request #25 · sodiq-code/vaultwatch

dependabot · 2026-07-20T05:14:55Z

Updates the requirements on pytest, pytest-asyncio and pytest-cov to permit the latest version.
Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates pytest-asyncio to 1.4.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.0

1.4.0 - 2026-05-26

Deprecated

Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged.

Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)

Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)

Updated minimum supported pytest version to v8.4.0. (#1397)

Fixed

Fixed a ResourceWarning: unclosed event loop warning that could occur when a synchronous test called asyncio.run() or otherwise unset the current event loop after pytest-asyncio had run an async test or fixture. (#724)

Notes for Downstream Packagers

Added dependency on sphinx-tabs >= 3.5 to organize documentation examples into tabs. (#1395)

Commits

6e14cd2 chore: Prepare release of v1.4.0.
4b900fb Build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1
ab9f632 Build(deps): Bump zipp from 3.23.1 to 4.1.0
a56fc77 Build(deps): Bump hypothesis from 6.152.6 to 6.152.8
e8bae9b Build(deps): Bump requests from 2.34.0 to 2.34.2
fc43340 Build(deps): Bump idna from 3.14 to 3.15
762eaf5 Build(deps): Bump jaraco-functools from 4.4.0 to 4.5.0
b62e222 Build(deps): Bump click from 8.3.3 to 8.4.0
9190447 Build(deps): Bump pydantic from 2.13.3 to 2.13.4
82a393c ci: Remove unnecessary debug output.
Additional commits viewable in compare view

Updates pytest-cov to 7.1.0

Changelog

Sourced from pytest-cov's changelog.

7.1.0 (2026-03-21)

Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.

Improve handling of ResourceWarning from sqlite3.

The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.

With this fix one can suppress ResourceWarning from sqlite3 from command line::

pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

Various improvements to documentation. Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and "vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>. Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.

Fixed some assertions in tests. Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.

Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

7.0.0 (2025-09-09)

Dropped support for subprocesses measurement.

It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interations with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

.. code-block:: ini

[run] patch = subprocess

This release also requires at least coverage 7.10.6.

Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

Removed some not really necessary testing deps like six.

... (truncated)

Commits

66c8a52 Bump version: 7.0.0 → 7.1.0
f707662 Make the examples use pypy 3.11.
6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
8ebf20b Update changelog.
861d30e Remove the backup context manager - shouldn't be needed since coverage 5.0, ...
fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
78c9c4e Only run the 3.9 on older deps.
4849a92 Punctuation.
197c35e Update changelog and hopefully I don't forget to publish release again :))
14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…nged (#11)

…, #11, #12, #25)

#11, #13)

, #11)

…cloud key (#3, #6, #7, #9, #16, #18)

…xposed keys (#6, #7, #16)

)

…subscribe, queryIntelligence (#3)

)

…subscribe, queryIntelligence (#3)

)

…try points (#21)

)

…#4, #15)

…ent (#14, #15)

…ect Groq (#10, #15)

… API calls through backend (#6, #7, #18)

… array (#18)

…xy (#16)

…in attestation (#28, #15)

…d x402 flow (#20)

…chitecture docs

)

…2+4 hybrid pivot Critical Fixes (28/28): - Fix #1: Rewrite broadcast_interactions.py with correct entry points matching Rust contracts - Fix #2: Add demo_upgrade_policy.py demonstrating v1→v2 contract upgrade on RiskPolicyManager - Fix #3: Implement real x402 flow with HTTP 402 middleware, demo_x402_subscribe.js, VaultWatchX402 class - Fix #4: AuditAgent uses record_finding entry point (was record_action) - Fix #5: MCP tools query real chain - fix ReputationEngine import, parse CLValue, fix query paths - Fix #6: Remove leaked CSPR.cloud API key from broadcast_interactions.py, server-side proxy - Fix #7: Move Groq API key server-side, remove all module-level groq_client singletons - Fix #8: SubscriberVault.open_vault and top_up now #[odra(payable)] with attached_value() - Fix #9: IntelAgent.serve_intel_with_x402 uses contract_hash=, deduct_credit entry point, query_type arg - Fix #10: SelfCorrectionAgent queries RiskPolicyManager.get_current_policy via Casper RPC - Fix #11: Add Odra events to all 8 contracts (15 events total) - Fix #12: Replace String address fields with Address type in RiskPolicyManager - Fix #13: Fix SentinelAlertLog.address_logs from comma-String to Vec<u64> capped at 256 - Fix #14: SafetyGuard fail-closed on model error - Fix #15: Remove all module-level groq_client, inject via constructor for testability - Fix #16: Add API key auth + slowapi rate limiting to FastAPI - Fix #17: Demo video script placeholder (demo_upgrade_policy.py, demo_x402_subscribe.js) - Fix #18: Replace hardcoded LIVE_FINDINGS with real API fetches in dashboard - Fix #19: Add 7 direct contract-query methods to SDK client - Fix #20: Add e2e test suite running against real Casper testnet - Fix #21: Update PROOF.md with verified markers and verification instructions - Fix #22: Complete CONTRACT_AUDIT.md with red-team security analysis - Fix #23: Landing page references added to README - Fix #24: Community engagement guidance in LAUNCH_AND_IMPACT.md - Fix #25: RBAC with OPERATOR/ADMIN roles in RiskPolicyManager - Fix #26: CSPR.click documentation added to DEPLOYMENT_GUIDE - Fix #27: Create vaultwatch-rwa-mcp domain-specific MCP server (5 tools) - Fix #28: RWA agent wired to real DeFiLlama + CoinGecko + Groq Compound data sources Practical Guidance (7/7 Recommendations): 1. Verify before submit - PROOF.md now has verification instructions 2. Demo video script - demo_upgrade_policy.py and demo_x402_subscribe.js 3. x402 flow demo-able in 60 seconds - scripted demo_x402_subscribe.js 4. Pin every claim to file:line - README now has file:line references 5. CSPR.click for agent wallets - documented in DEPLOYMENT_GUIDE 6. Domain-specific MCP server - vaultwatch_rwa_mcp with 5 tools 7. Community engagement - X/Twitter and Discord guidance in LAUNCH_AND_IMPACT.md Strategic Insights: - Track 2+4 hybrid narrative: compliance-gated RWA oracle on upgradable Casper contracts - README rewritten for VaultWatch RWA positioning - LAUNCH_AND_IMPACT.md updated with 3-phase roadmap including ZK-KYC - CONTRACT_AUDIT.md with 13-section red-team analysis - ARCHITECTURE.md corrected with real entry point names 30 files changed, 3865 insertions(+), 1645 deletions(-)

…atch, RWA MCP count, community docs Critical Fixes (from verification audit): - Fix #6 COMPLETE: Remove hardcoded CSPR_CLOUD_API_KEY from 4 additional files (broadcast_deploys.py, deploy_live.py, broadcast_transfers.py, deploy_new_account.py) All now read from CSPR_CLOUD_API_KEY environment variable - Fix #16 COMPLETE: Add @limiter.limit() decorators to ALL 9 API routes Add Depends(verify_api_key) to /api/intel, /api/findings, /api/rwa, /api/policy, /api/traces, /api/market, /api/chain Previously only 2/9 endpoints had auth; now 9/9 protected - Fix #21 COMPLETE: AuditTrail hash mismatch fixed in 7 files Wrong: ...6336a7 → Correct: ...6333a7 (matching transaction_hashes_live.json) Fixed in: sdk/client.py, mcp/server.py, e2e tests, BUILD_VERIFICATION.md, liveApi.js, mockApi.js, .env.example RWA MCP Tool Count Fix: - README.md: Updated from 8 to 5 RWA MCP tools with correct tool names (rwa_risk_assessment, compliance_check, rwa_oracle_query, subscribe_rwa_feed, agent_reputation) - ARCHITECTURE.md: Updated RWA MCP section from 8 to 5 tools - LAUNCH_AND_IMPACT.md: Updated 20+8 to 20+5 Community & Documentation: - LAUNCH_AND_IMPACT.md: Added X/Twitter strategy, Discord community channels, YouTube, and newsletter to Section 9 - DEPLOYMENT_GUIDE.md: Added Step 0 — CSPR.click wallet creation with browser and CLI instructions, agent wallet security guidelines - DEMO_SCRIPT.md: Added demo_x402_subscribe.js reference to Scene 3 Contract Fix: - risk_policy_manager.rs: Changed RiskPolicy.updated_by from String to Address type (Fix #12 now fully complete) CONTRACT_AUDIT.md: - Fixed executive summary counts: SentinelRegistry 0H→1H, total 3H→4H, 10M→11M

…ehavior_index.rs, sentinel_registry.rs, subscriber_vault.rs

Updates the requirements on [pytest](https://github.com/pytest-dev/pytest), [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) and [pytest-cov](https://github.com/pytest-dev/pytest-cov) to permit the latest version. Updates `pytest` to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.0.0...9.1.1) Updates `pytest-asyncio` to 1.4.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v0.23.0...v1.4.0) Updates `pytest-cov` to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v5.0.0...v7.1.0) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production dependency-group: testing - dependency-name: pytest-asyncio dependency-version: 1.4.0 dependency-type: direct:production dependency-group: testing - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:production dependency-group: testing ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-20T05:14:55Z

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-07-20T05:14:57Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vaultwatch	Ready	Preview, Comment	Jul 20, 2026 5:15am

sodiq-code and others added 30 commits July 18, 2026 09:00

fix(contracts): AuditTrail — add Odra events FindingRecorded/OwnerCha…

ec4c5d9

…nged (#11)

fix(contracts): RiskPolicyManager — upgrade_to_v2_rwa, RBAC, events (#2…

809221c

…, #11, #12, #25)

fix(contracts): SentinelAlertLog — Vec<u64> storage, AlertLogged event (

ecb14fe

#11, #13)

fix(contracts): SentinelCredit — payable deposit, withdraw(), events (#8

457d8f0

, #11)

fix(api): x402 payment gate, API key auth, rate limiting, proxy CSPR.…

e3ebc0f

…cloud key (#3, #6, #7, #9, #16, #18)

fix(config): Update .env.example with all required env vars, remove e…

ca1eb97

…xposed keys (#6, #7, #16)

fix(mcp): Correct contract hashes, wire all tools to real Casper RPC (#5

64ffb32

)

fix(x402): Complete real x402 implementation — payment verification, …

4eea68a

…subscribe, queryIntelligence (#3)

fix(mcp): Correct contract hashes, wire all tools to real Casper RPC (#5

b7d7c81

)

fix(x402): Complete real x402 implementation — payment verification, …

b35c790

…subscribe, queryIntelligence (#3)

docs: Add CONTRACT_AUDIT.md — red-team analysis for all 8 contracts (#22

19d9350

)

docs: Add DEMO_SCRIPT.md — 4-minute buildathon video script (#17)

c3a6ae3

docs(proof): Add BUILD_VERIFICATION.md with real build outputs and en…

00be08d

…try points (#21)

feat(scripts): Add create_agent_wallet.js using CSPR.click pattern (#26)

4e279b1

feat(mcp): Add vaultwatch-rwa-mcp dedicated RWA intelligence server (#27

fb2b84d

)

feat(mcp): Add vaultwatch-rwa-mcp package.json for npm publication (#27)

4ea7e7f

fix(agents): Fix AuditAgent entry-point mismatch + inject Groq client (…

affdfc1

…#4, #15)

fix(agents): SafetyGuard fail-closed on model error + inject Groq cli…

5bc13e1

…ent (#14, #15)

fix(agents): Wire SelfCorrectionAgent to live RiskPolicyManager + inj…

9c121d7

…ect Groq (#10, #15)

fix(dashboard): Remove exposed API keys from client bundle, proxy all…

265f690

… API calls through backend (#6, #7, #18)

fix(dashboard): Wire LiveFeed to live API — remove hardcoded findings…

b7266e7

… array (#18)

fix(deps): Add slowapi for rate limiting and httpx for Casper RPC pro…

4cc2368

…xy (#16)

fix(agents): Wire RWAAgent to real DeFiLlama + Groq Compound + on-cha…

4312c95

…in attestation (#28, #15)

fix(sdk): Add direct contract query methods for all 8 contracts (#19)

ba96a0b

feat(tests): Add e2e tests directory (#20)

c9e7472

feat(tests): Add comprehensive E2E testnet tests for all contracts an…

8b115bc

…d x402 flow (#20)

docs(readme): Comprehensive rewrite — pin all claims to code, full ar…

0d79ad0

…chitecture docs

revert(readme): Revert README to pre-update state (revert commit 0d79ad0

d672093

)

Z User and others added 3 commits July 18, 2026 16:04

fix: add demo_x402_subscribe.js reference to DEMO_SCRIPT.md Scene 3

99495d3

fix: correct file:line references in README — risk_oracle.rs, agent_b…

3574f0b

…ehavior_index.rs, sentinel_registry.rs, subscriber_vault.rs

vercel Bot deployed to Preview July 20, 2026 05:15 View deployment

sodiq-code force-pushed the main branch from 3574f0b to 1a189fe Compare July 21, 2026 12:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps(python): bump the testing group with 3 updates#25

deps(python): bump the testing group with 3 updates#25
dependabot[bot] wants to merge 33 commits into
mainfrom
dependabot/pip/testing-977d1b941f

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

vercel Bot commented Jul 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

pytest-asyncio v1.4.0

1.4.0 - 2026-05-26

Deprecated

Added

Changed

Fixed

Notes for Downstream Packagers

7.1.0 (2026-03-21)

7.0.0 (2025-09-09)

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Labels

Uh oh!

vercel Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Jul 20, 2026 •

edited

Loading