Bump pytest-bdd from 8.1.0 to 9.0.0

[dependabot]

Bumps pytest-bdd from 8.1.0 to 9.0.0.

Changelog

Sourced from pytest-bdd's changelog.

[9.0.0] - 2026-09-30

Added +++++

Changed +++++++

• Relaxed gherkin-official dependency requirement to >=29.0.0 to allow for newer versions of the gherkin-official package.
• Excluded gherkin-official 31.0.0 and 32.0.0, which crash with StopIteration when parsing empty descriptions (fixed upstream in 32.0.1).
• The --gherkin-terminal-reporter incompatibility errors (with another terminal reporter or with xdist) are now raised as pytest.UsageError instead of a bare Exception.

Deprecated ++++++++++

Removed +++++++

• Dropped support for python 3.9 (end-of-life, and its locked dev dependencies had unfixable security alerts). Supported python versions: 3.10, 3.11, 3.12, 3.13, 3.14.
• The following private attributes are not available anymore ([#658](https://github.com/pytest-dev/pytest-bdd/issues/658) <https://github.com/pytest-dev/pytest-bdd/pull/658>_):
  • _pytest.reports.TestReport.scenario; replaced by pytest_bdd.reporting.test_report_context WeakKeyDictionary (internal use)
  • __scenario__ attribute of test functions generated by the @scenario (and @scenarios) decorator; replaced by pytest_bdd.scenario.scenario_wrapper_template_registry WeakKeyDictionary (internal use)
  • _pytest.nodes.Item.__scenario_report__; replaced by pytest_bdd.reporting.scenario_reports_registry WeakKeyDictionary (internal use)
  • _pytest_bdd_step_context attribute of internal test function markers; replaced by pytest_bdd.steps.step_function_context_registry WeakKeyDictionary (internal use)

Fixed +++++

• Backslashes in datatable and examples table cells are no longer over-quoted. A cell containing a single backslash now reaches the step as a single backslash, matching the Gherkin escaping rules. If you compensated by doubling backslashes in feature files, undo that. [#769](https://github.com/pytest-dev/pytest-bdd/issues/769) <https://github.com/pytest-dev/pytest-bdd/issues/769>_
• Made type annotations stronger and removed most of the typing.Any usages and # type: ignore annotations. [#658](https://github.com/pytest-dev/pytest-bdd/issues/658) <https://github.com/pytest-dev/pytest-bdd/pull/658>_
• Empty docstrings are now correctly forwarded to step functions as an empty string instead of being silently dropped, which previously caused pytest to report a missing docstring fixture. [#809](https://github.com/pytest-dev/pytest-bdd/issues/809) <https://github.com/pytest-dev/pytest-bdd/issues/809>_
• Injecting a target_fixture no longer emits PytestRemovedIn10Warning on pytest 9.1+, which deprecated passing nodeid to _register_fixture. [#823](https://github.com/pytest-dev/pytest-bdd/issues/823) <https://github.com/pytest-dev/pytest-bdd/issues/823>_

Security ++++++++

Commits

• c6cea53 Bump to version 9.0.0
• 9eb8a78 Merge pull request #836 from pytest-dev/ruff-extend-select
• 75c12e6 Don't require xdist to test the xdist incompatibility error
• 673bddc Test gherkin-terminal-reporter incompatibility usage errors
• c352767 Use ruff lint.extend-select to keep ruff's default rules
• f67096a [pre-commit.ci] pre-commit autoupdate (#826)
• 33b2b30 Merge pull request #834 from pytest-dev/switch-to-uv
• e0346d3 Reintroduce license
• 38d6b2f Update CI configuration to use --only-group flag for twine commands
• f120acf Migrate project from Poetry to UV for dependency management and build processes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sourcery-ai]

Sorry @dependabot[bot], you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 3 hours and 11 minutes by commenting @sourcery-ai review. Upgrade to get a review now.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 53c82a54-034b-4559-9727-4449d687820c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}