27372796510
100%

Ran 11 Jun 2026 07:44PM UTC

Jobs 1

Files 69

Run time 1min

Badge

Embed ▾

Committed 11 Jun 2026 07:41PM UTC coverage: 99.874%. Remained the same

Build # 27372796510

Build Type

push

github

Committed by

web-flow

Commit Message

ci(security): bump pinned pytest 9.0.2 -> 9.0.3 (GHSA tmpdir handling) (#9)

pytest <= 9.0.2 on UNIX uses a predictable /tmp/pytest-of-{user} basetemp
directory, letting a local user cause a denial of service or possibly gain
privileges (Dependabot alert #3, CVSS 6.8 moderate). Fixed in 9.0.3.

The version-pin lives in .github/requirements-ci.txt (a pip constraints
file, not a lockfile), so Dependabot's automatic security update can't
resolve it ("can't update vulnerable dependencies without a lockfile") —
hence this manual bump. CI-only tooling pin; pyproject runtime bounds are
unaffected. 9.0.3 is a patch release; the suite is unchanged.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Coverage Stats

23730 of 23760 relevant lines covered (99.87%)

1.0 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	27372796510.1	11 Jun 2026 07:44PM UTC	69	99.87	GitHub Action Run

tiagojcperez / maestro-cli / 27372796510
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27372796510

tiagojcperez / maestro-cli / 27372796510 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27372796510

tiagojcperez / maestro-cli / 27372796510
100%

README BADGES
x