pytest had a security release recently which triggered our pip-audit

jobs. This change removes the version pin from our dev-requirements (and

updates the one for kgb, which legitimately uses semantic versioning).

Ran unit tests with the latest pytest.