diff --git a/pyproject.toml b/pyproject.toml
index fd9dc734e..75ad6b598 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -58,7 +58,7 @@ tests = [
     # CVE-2025-71176 (pytest <9.0.3 tmp-dir predictability) is dev-only and
     # not fixable on 3.9 — risk is bounded to local CI runners.
     "pytest>=9.0.3; python_version >= '3.10'",
-    "pytest>=8.4,<9; python_version < '3.10'",
+    "pytest>=9.1,<10; python_version < '3.10'",
     "pytest-cov>=5",
     # pytest-asyncio 1.4.0 dropped Python 3.9 support; on 3.9 we stay on the last
     # release that still supports it (1.2.0). Bumping this to 1.4.0 (renovate, #1584)