pip audit is showing an insecure dependency on py with no available

fix. It seems like that package is getting pulled in by the very old

version of pytest-env that was pinned in dev-requirements.txt. This

change updates pytest and pytest-env for modern(ish) versions of Python.

Ran unit tests.