245: Bump pytest from 6.2.2 to 6.2.3 r=bidoubiwa a=dependabot-preview[bot] Bumps [pytest](https://github.com/pytest-dev/pytest) from 6.2.2 to 6.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pytest-dev/pytest/releases">pytest's releases</a>.</em></p> <blockquote> <h2>6.2.3</h2> <h1>pytest 6.2.3 (2021-04-03)</h1> <h2>Bug Fixes</h2> <ul> <li> <p><a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8414">#8414</a>: pytest used to create directories under <code>/tmp</code> with world-readable permissions. This means that any user in the system was able to read information written by tests in temporary directories (such as those created by the <code>tmp_path</code>/<code>tmpdir</code> fixture). Now the directories are created with private permissions.</p> <p>pytest used silenty use a pre-existing <code>/tmp/pytest-of-<username></code> directory, even if owned by another user. This means another user could pre-create such a directory and gain control of another user's temporary directory. Now such a condition results in an error.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst">pytest's changelog</a>.</em></p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pytest-dev/pytest/commit/3a2fd9630547e224bea6e024a4f6852761235c61"><code>3a2fd96</code></a> Prepare release version 6.2.3</li> <li><a href="https://github.com/pytest-dev/pytest/commit/138b19a9300f49bd7d2041d24a3f805787a0b2e1"><code>138b19a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8517">#8517</a> from bluetech/backport-mktmp</li> <li><a href="https://github.com/pytest-dev/pytest/commit/822686e880b3757977e9d56470e00dcd391371f2"><code>822686e</code></a> tmpdir: prevent using a non-private root temp directory</li> <li><a href="https://github.com/pytest-dev/pytest/commit/9dc54f79b0026da98ee06f6d72be6fece571151a"><code>9dc54f7</code></a> tmpdir: fix temporary directories created with world-readable permissions</li> <li><a href="https://github.com/pytest-dev/pytest/commit/93dbae24e1b975c365c892eb8939284ead020c9d"><code>93dbae2</code></a> pathlib: inline ensure_reset_dir()</li> <li><a href="https://github.com/pytest-dev/pytest/commit/02fdbe2e765ccb9c8c0c933944e05ea31425895e"><code>02fdbe2</code></a> pathlib: remove useless temporary variable</li> <li><a href="https://github.com/pytest-dev/pytest/commit/12e7db85af88058afebd80f4b41cec89bea5a343"><code>12e7db8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8285">#8285</a> from nicoddemus/backport-8280</li> <li><a href="https://github.com/pytest-dev/pytest/commit/56e43924447dae9b9793b62093981dfa36993dda"><code>56e4392</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8280">#8280</a> from xuhdev/module</li> <li><a href="https://github.com/pytest-dev/pytest/commit/8220eca963472e7918ef7e108bdc1cd8ed155a4a"><code>8220eca</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pytest-dev/pytest/issues/8275">#8275</a> from pytest-dev/release-6.2.2</li> <li>See full diff in <a href="https://github.com/pytest-dev/pytest/compare/6.2.2...6.2.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=pytest&package-manager=pip&previous-version=6.2.2&new-version=6.2.3)](https://dependabot.com/compatibility-score/?dependency-name=pytest&package-manager=pip&previous-version=6.2.2&new-version=6.2.3) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) </details> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>