chore: bump pytest to 9.0.3

[kendrickb-nvidia]

Summary

Update to pytest>=9.0.3 to address CVE-2025-71176.

uv lock also picked up updates of transitive dependencies: hf_xet.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Refactoring

Testing

• make test passes locally
• make check passes locally (format + lint + typecheck + lock-check)
• Added/updated tests for changes

Documentation

• If docs changed: make docs-build passes locally

Related Issues

[github-actions]

All contributors have signed the DCO ✍️ ✅
_{Posted by the DCO Assistant Lite bot.}

[greptile-apps]

Greptile Summary

This PR performs a major-version bump of the pytest dev dependency from >=8.0,<9 to >=9.0.3,<10 and regenerates uv.lock to match. The lock regeneration also silently upgrades hf-xet from 1.3.0b0 to 1.5.0.

• pyproject.toml: constraint changed to >=9.0.3,<10, resolving to pytest 9.0.3 in the lock file.
• uv.lock: pytest pinned to 9.0.3; hf-xet incidentally upgraded from beta 1.3.0b0 to stable 1.5.0 — not mentioned in the PR description.

Confidence Score: 4/5

Safe to merge; the pytest major-version bump is straightforward and hf-xet is a dev-only transitive dependency.

The pytest 8→9 major bump could surface test-suite breakage if any tests rely on deprecated 8.x behaviour, but this is easily caught by CI. The unannounced hf-xet jump from a beta to stable release is a minor transparency gap rather than a correctness risk.

uv.lock — verify the hf-xet upgrade from 1.3.0b0 to 1.5.0 is intentional and that CI passes with the new pytest 9 test runner.

Important Files Changed

Filename	Overview
pyproject.toml	Bumps pytest constraint from >=8.0,<9 to >=9.0.3,<10, a major-version upgrade.
uv.lock	Locks pytest to 9.0.3 and also silently upgrades hf-xet from 1.3.0b0 (beta) to 1.5.0 (stable) — a side-effect not mentioned in the PR title or description.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[pyproject.toml
pytest >=8.0,<9] -->|bump constraint| B[pyproject.toml
pytest >=9.0.3,<10]
    B -->|uv lock re-resolution| C[uv.lock
pytest 9.0.3]
    C -->|side-effect| D[uv.lock
hf-xet 1.3.0b0 → 1.5.0]

Loading

_{Reviews (1): Last reviewed commit: "chore: bump pytest to 9.0.3" | Re-trigger Greptile}

[kendrickb-nvidia]

I have read the DCO document and I hereby sign the DCO.

[kendrickb-nvidia]

recheck

[lipikaramaswamy]

🚢