Skip to content

Bump the python-dependencies group across 1 directory with 42 updates - #21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-f0e25503f3
Open

Bump the python-dependencies group across 1 directory with 42 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-f0e25503f3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the python-dependencies group with 42 updates in the / directory:

Package From To
click 8.1.8 8.4.2
robotframework 6.1 7.4.2
astroid 3.3.7 4.1.2
build 1.2.2.post1 1.5.0
certifi 2024.12.14 2026.7.22
charset-normalizer 3.4.0 3.4.9
check-manifest 0.50 0.51
coverage 7.6.9 7.15.2
dill 0.3.9 0.4.1
docutils 0.21.2 0.23
exceptiongroup 1.2.2 1.3.1
idna 3.10 3.18
importlib-metadata 8.5.0 9.0.0
iniconfig 2.0.0 2.3.0
isort 5.13.2 8.0.1
jaraco-context 6.0.1 6.1.2
jaraco-functools 4.1.0 4.6.0
keyring 25.5.0 25.7.0
markdown-it-py 3.0.0 4.2.0
more-itertools 10.5.0 11.1.0
mypy 1.14.0 2.3.0
mypy-extensions 1.0.0 1.1.0
nh3 0.2.20 0.3.6
packaging 24.2 26.2
pkginfo 1.12.0 1.12.1.2
platformdirs 4.3.6 4.11.0
pluggy 1.5.0 1.6.0
pygments 2.18.0 2.20.0
pylint 3.3.2 4.0.6
pytest 8.3.4 9.1.1
pytest-cov 6.0.0 7.1.0
pytest-spec 4.0.0 6.1.0
readme-renderer 44.0 45.0
requests 2.32.3 2.34.2
rich 13.9.4 15.0.0
ruff 0.8.4 0.16.0
tomli 2.2.1 2.4.1
tomlkit 0.13.2 0.15.1
twine 6.0.1 7.0.0
typing-extensions 4.12.2 4.16.0
urllib3 2.3.0 2.7.0
zipp 3.21.0 4.1.0

Updates click from 8.1.8 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32

  • get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
  • Zsh completion scripts parse correctly on Windows. #3277 # 3466
  • Shell completion of Choice Enum values produces a valid completion result. #3015
  • Fix empty byte-string handling in echo. #3487
  • Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our [Version Support Policy][version] on our website.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

Version 8.4.1

Released 2026-05-21

  • get_parameter_source() is available during eager callbacks and type conversion again. {issue}3458 {pr}3484
  • Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
  • Shell completion of Enum values used as Choice options produces a valid completion result. {issue}3015 {pr}3471
  • Fix empty byte-string handling in echo. {issue}3487 {pr}3493
  • Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
  • Fix open_url on Windows when the file path contains spaces. {issue}2994 {pr}3478

Version 8.4.0

Released 2026-05-17

  • {class}ParamType typing improvements. {pr}3371

    • {class}ParamType is now a generic abstract base class,

... (truncated)

Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates robotframework from 6.1 to 7.4.2

Release notes

Sourced from robotframework's releases.

Robot Framework 7.4.2

Robot Framework 7.4.2 is the last planned bug fix release in the Robot Framework 7.4.x series. It contains some bug fixes as well as documentation enhancements. The most important change is the deprecation of the built-in Testdoc tool in favor of the external Testdoc tool.

For more details, see the full release notes.

Robot Framework 7.4.1

Robot Framework 7.4.1 is the first bug fix release in the Robot Framework 7.4.x series. It fixes all reported regressions in Robot Framework 7.4.

For more details, see the full release notes.

Robot Framework 7.4

Robot Framework 7.4 is a feature release with support for secret variables, typed standard library keywords, enhancements to working with bytes and various other features and fixes.

Robot Framework 7.4 was released on Friday December 12, 2025. For more information, see the full release notes.

Robot Framework 7.4 release candidate 2

Robot Framework 7.4 is a feature release with support for secret variables, typed standard library keywords, enhancements to working with bytes and various other features and fixes.

Robot Framework 7.4 release candidate 2 was released on Tuesday December 9, 2025. For more information, see the full release notes.

Robot Framework 7.4 release candidate 1

Robot Framework 7.4 is a feature release with support for secret variables, typed standard library keywords, enhancements to working with bytes and various other features and fixes.

Robot Framework 7.4 release candidate 1 was released on Tuesday December 2, 2025. For more information, see the full release notes.

Robot Framework 7.4 beta 2

Robot Framework 7.4 is a feature release with support for secret variables and various other enhancements and bug fixes. This beta release contains the majority of the planned features and it is especially targeted for users interested to test the aforementioned secret variables.

Robot Framework 7.4 beta 2 was released on Saturday November 8, 2025. For more information, see the full release notes.

Robot Framework 7.4 beta 1

Robot Framework 7.4 is a feature release with support for secret variables and various other enhancements and bug fixes. This beta release contains the majority of the planned features and it is especially targeted for users interested to test the aforementioned secret variables.

Robot Framework 7.4 beta 1 was released on Tuesday October 7, 2025. For more information see the full release notes.

Robot Framework 7.3.2

Robot Framework 7.3.2 is the second and the last planned bug fix release in the Robot Framework 7.3.x series. It fixes few regressions in earlier RF 7.3.x releases as well as some issues affecting also earlier releases.

For more details, see the full release notes.

Robot Framework 7.3.1

Robot Framework 7.3.1 is the first bug fix release in the Robot Framework 7.3.x series. It fixes all reported regressions in Robot Framework 7.3.

For more details, see the full release notes.

Robot Framework 7.3

Robot Framework 7.3 is a feature release with variable type conversion, enhancements and fixes related to timeouts, official Python 3.14 compatibility and various other exciting new features and high priority bug fixes.

Robot Framework 7.3 was released on Friday May 30, 2025. For more information see the full release notes.

... (truncated)

Commits
  • b30225f Updated version to 7.4.2
  • 9e9f889 Release notes for 7.4.2
  • 050dd39 formatting
  • 3300db1 Merge pull request #5623 from robotframework/dependabot/npm_and_yarn/src/web/...
  • 0a2b0b6 Bump actions/upload-artifact from 6 to 7 (#5621)
  • cbdbc58 Explicit error if importing by path and module name contains dots
  • c745f0c Fix accessing NormalizedDict with non-string keys
  • 7dafb73 Better name for keyword used in test
  • faaf958 Bump the npm_and_yarn group across 1 directory with 2 updates
  • f03e945 Cleanup
  • Additional commits viewable in compare view

Updates astroid from 3.3.7 to 4.1.2

Release notes

Sourced from astroid's releases.

v4.1.2

What's New in astroid 4.1.2?

Release date: 2026-03-22

  • Fix crash accessing property fset in generic classes with type annotations. Closes #2996

  • Fix infinite recursion caused by cyclic inference in Constraint.

  • Fix RecursionError in _compute_mro() when circular class hierarchies are created through runtime name rebinding. Circular bases are now resolved to the original class instead of recursing.

    Closes #2967 Closes pylint-dev/pylint#10821

  • Fix DuplicateBasesError crash in dataclass transform when a class has duplicate bases in its MRO (e.g., Protocol appearing both directly and indirectly). Catch MroError at .mro() call sites in brain_dataclasses.py, consistent with the existing pattern elsewhere.

    Closes #2628

  • Fix FunctionModel returning descriptor attributes for builtin functions.

    Closes #2743

  • Catch MemoryError when inferring f-strings with extremely large format widths (e.g. f'{0:11111111111}') so that inference yields Uninferable instead of crashing.

    Closes #2762

  • Fix ValueError in __str__/repr and error messages when nodes have extreme values (very long identifiers or large integers). Clamp pprint width to a minimum of 1 and truncate oversized values in error messages.

    Closes #2764

v4.1.1

What's New in astroid 4.1.1?

Release date: 2026-02-22

  • Let UnboundMethodModel inherit from FunctionModel to improve inference of dunder methods for unbound methods.

    Refs #2741

... (truncated)

Changelog

Sourced from astroid's changelog.

What's New in astroid 4.1.2?

Release date: 2026-03-22

  • Fix crash accessing property fset in generic classes with type annotations. Closes #2996

  • Fix infinite recursion caused by cyclic inference in Constraint.

  • Fix RecursionError in _compute_mro() when circular class hierarchies are created through runtime name rebinding. Circular bases are now resolved to the original class instead of recursing.

    Closes #2967 Closes pylint-dev/pylint#10821

  • Fix DuplicateBasesError crash in dataclass transform when a class has duplicate bases in its MRO (e.g., Protocol appearing both directly and indirectly). Catch MroError at .mro() call sites in brain_dataclasses.py, consistent with the existing pattern elsewhere.

    Closes #2628

  • Fix FunctionModel returning descriptor attributes for builtin functions.

    Closes #2743

  • Catch MemoryError when inferring f-strings with extremely large format widths (e.g. f'{0:11111111111}') so that inference yields Uninferable instead of crashing.

    Closes #2762

  • Fix ValueError in __str__/repr and error messages when nodes have extreme values (very long identifiers or large integers). Clamp pprint width to a minimum of 1 and truncate oversized values in error messages.

    Closes #2764

What's New in astroid 4.1.1?

Release date: 2026-02-22

  • Let UnboundMethodModel inherit from FunctionModel to improve inference of dunder methods for unbound methods.

    Refs #2741

  • Filter Unknown from UnboundMethod and Super special attribute

... (truncated)

Commits
  • 91dac13 Bump astroid to 4.1.2, update changelog (#3011)
  • 796eba8 objectmodel: fix crash analyzing property fset in generic classes with type a...
  • ca814f0 Update CI workflow to include maintenance branch (#2999)
  • 7593877 [Backport maintenance/4.1.x] Fix cyclic inference by constraints (#2998)
  • 3f63f90 Fix builtin functions incorrectly exposing descriptor attributes (#2983)
  • be7479e Fix ValueError in str/repr and error messages with extreme values (#2971)
  • 1c9938d Fix RecursionError in _compute_mro() on circular class hierarchies (#2968)
  • 98938ad [Backport maintenance/4.1.x] Fix DuplicateBasesError crash in dataclass trans...
  • 33fabe0 [Backport maintenance/4.1.x] Fix MemoryError when inferring f-string with lar...
  • f11d7ae Bump astroid to 4.1.1, update changelog
  • Additional commits viewable in compare view

Updates build from 1.2.2.post1 to 1.5.0

Release notes

Sourced from build's releases.

1.5.0

What's Changed

Full Changelog: pypa/build@1.4.4...1.5.0

1.4.4

What's Changed

Full Changelog: pypa/build@1.4.3...1.4.4

1.4.3

What's Changed

... (truncated)

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################

Features

  • Drop Python 3.9 support - by :user:henryiii (:issue:1036)

Bugfixes

  • Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

Miscellaneous

  • :issue:1033

#################### 1.4.4 (2026-04-22) ####################

Bugfixes

  • Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)
  • Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)
  • Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)
  • Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

Miscellaneous

  • :issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################

Features

... (truncated)

Commits

Updates certifi from 2024.12.14 to 2026.7.22

Commits

Updates charset-normalizer from 3.4.0 to 3.4.9

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.9

3.4.9 (2026-07-07)

Fixed

  • Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

Version 3.4.8

3.4.8 (2026-07-06)

Fixed

  • Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)
  • Unnecessary json import at runtime (#753)
  • Inverse capitalization not seen by noise detector (#731)

Changed

  • No longer holding a global cache for our noise / coherence measurements. Relax RSS memory usage.
  • Micro-optimizations in our noise / coherence measurements.
  • No longer using regex search by default for our preemptive charset mark algorithm.
  • Raised upperbound of setuptools to v83.
  • Raised upperbound of mypy(c) to v2.1.

Removed

  • Redundant UTF7 BOM marker (#730)

Version 3.4.7

3.4.7 (2026-04-02)

Changed

  • Pre-built optimized version using mypy[c] v1.20.
  • Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

  • Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

Version 3.4.6

3.4.6 (2026-03-15)

Changed

  • Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...) in favor of feed_info(...).
  • Raised upper bound for mypy[c] to 1.20, for our optimized version.
  • Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

  • Edge case where noise difference between two candidates can be almost insignificant. (#672)
  • CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

  • Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

... (truncated)

Changelog

Sourced from charset-normalizer's changelog.

3.4.9 (2026-07-07)

Fixed

  • Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

3.4.8 (2026-07-06)

Fixed

  • Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)
  • Unnecessary json import at runtime (#753)
  • Inverse capitalization not seen by noise detector (#731)

Changed

  • No longer holding a global cache for our noise / coherence measurements. Relax RSS memory usage.
  • Micro-optimizations in our noise / coherence measurements.
  • No longer using regex search by default for our preemptive charset mark algorithm.
  • Raised upperbound of setuptools to v83.
  • Raised upperbound of mypy(c) to v2.1.

Removed

  • Redundant UTF7 BOM marker (#730)

3.4.7 (2026-04-02)

Changed

  • Pre-built optimized version using mypy[c] v1.20.
  • Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

  • Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

3.4.6 (2026-03-15)

Changed

  • Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...) in favor of feed_info(...).
  • Raised upper bound for mypy[c] to 1.20, for our optimized version.
  • Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

  • Edge case where noise difference between two candidates can be almost insignificant. (#672)
  • CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

  • Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

3.4.5 (2026-03-06)

Changed

... (truncated)

Commits
  • cc68407 Merge pull request #772 from jawah/fix-regression-fallback-path
  • 152b923 chore: release 3.4.9
  • 2bc2607 fix: unicodedecodeerror in fallback path
  • be252d7 chore(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#767)
  • 71c7bdd chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 (#768)
  • aeea391 chore(deps): bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#758)
  • a6f8feb Merge pull request #770 from jawah/unblock-ci
  • 528e16c chore: add osv-scanner.toml
  • 5993498 chore: ast_serialize musl missing prebuilt riscv,s390x,ppc64le
  • aa2ddd8 Release 3.4.8 (#766)
  • Additional commits viewable in compare view

Updates check-manifest from 0.50 to 0.51

Changelog

Sourced from check-manifest's changelog.

0.51 (2025-10-15)

  • Add Python 3.14 support.
  • Drop Python 3.7 support.
Commits
  • 61edb75 Preparing release 0.51
  • 396b822 Merge pull request #173 from mgedmin/py314
  • 93159b9 Python script to update branch protection rules
  • 6a97f2e Revert "Why not go for broke? Let's try breezy"
  • 0ccbcda Why not go for broke? Let's try breezy
  • 950a047 Giving up
  • 3f69fa0 Let's also detect TTYs please
  • a59a82d Print more debug info
  • 4848c16 Move OS-level installs back to top
  • 304f15e Sort VCSes alphabetically
  • Additional commits viewable in compare view

Updates coverage from 7.6.9 to 7.15.2

Release notes

Sourced from coverage's releases.

7.15.2

Version 7.15.2 — 2026-07-15

  • Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.

➡️  PyPI page: coverage 7.15.2. :arrow_right:  To install: python3 -m pip install coverage==7.15.2

7.15.1

Version 7.15.1 — 2026-07-12

  • Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare.
  • A number of performance improvements thanks to Paul Kehrer, in pull requests 2213, 2214, 2215, 2216, 2218, 2220, and 2221.

➡️  PyPI page: coverage 7.15.1. :arrow_right:  To install: python3 -m pip install coverage==7.15.1

7.15.0

Version 7.15.0 — 2026-07-02

  • Since 7.14.0, reporting commands implicitly combine parallel data files. Now those commands have a new option --keep-combined to retain the data files after combining them instead of the default, which is to delete them. Finishes issue 2198.
  • Fix: the LCOV report would incorrectly count excluded functions as uncovered, as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen.
  • When running your program, coverage now correctly sets yourmodule.__spec__.loader as strongly recommended, avoiding the deprecation warning described in issue 2208. Thanks, A5rocks.
  • Fix: with Python 3.10, running with the -I (isolated mode) option didn’t correctly omit the current directory from the module search path, as described in issue 2103. That is now fixed thanks to Ilia Sorokin.

➡️  PyPI page: coverage 7.15.0. :arrow_right:  To install: python3 -m pip install coverage==7.15.0

7.14.3

Version 7.14.3 — 2026-06-22

  • Fix: the default ... exclusion rule now also matches function bodies whose closing return-type bracket is on its own line (for example, after a long -> dict[ ... ] annotation that a formatter has split over multiple lines). Closes issue 2185, thanks Mengjia Shang.
  • Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors. We can’t import the C tracer because in 7.14.2 we stopped shipping compiled wheels for 3.13t. Thanks, Hugo van Kemenade.

➡️  PyPI page: coverage 7.14.3. :arrow_right:  To install: python3 -m pip install coverage==7.14.3

7.14.2

Version 7.14.2 — 2026-06-20

  • Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197.
  • Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd.
  • Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don’t really make sense, so now we search for a usable one instead. Fixes issue 2187.
  • Following the advice of cibuildwheel, we no longer distribute wheels for Python 3.13 free-threaded.

➡️  PyPI page: coverage 7.14.2. :arrow_right:  To install: python3 -m pip install coverage==7.14.2

7.14.1

Version 7.14.1 — 2026-05-26

... (truncated)

Changelog

Sourced from coverage's changelog.

Version 7.15.2 — 2026-07-15

  • Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229_.

.. _issue 2229: coveragepy/coveragepy#2229

.. _changes_7-15-1:

Version 7.15.1 — 2026-07-12

  • Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare <pull 2224_>_.

  • A number of performance improvements thanks to Paul Kehrer, in pull requests 2213 <pull 2213_>, 2214 <pull 2214_>, 2215 <pull 2215_>, 2216 <pull 2216_>, 2218 <pull 2218_>, 2220 <pull 2220_>, and 2221 <pul...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 25, 2026
@dependabot
Bump the python-dependencies group across 1 directory with 42 updates
c782a9a 
Bumps the python-dependencies group with 42 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [robotframework](https://github.com/robotframework/robotframework) | `6.1` | `7.4.2` |
| [astroid](https://github.com/pylint-dev/astroid) | `3.3.7` | `4.1.2` |
| [build](https://github.com/pypa/build) | `1.2.2.post1` | `1.5.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2024.12.14` | `2026.7.22` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.0` | `3.4.9` |
| [check-manifest](https://github.com/mgedmin/check-manifest) | `0.50` | `0.51` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.6.9` | `7.15.2` |
| [dill](https://github.com/uqfoundation/dill) | `0.3.9` | `0.4.1` |
| [docutils](https://github.com/rtfd/recommonmark) | `0.21.2` | `0.23` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.2.2` | `1.3.1` |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.18` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.5.0` | `9.0.0` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.0.0` | `2.3.0` |
| [isort](https://github.com/PyCQA/isort) | `5.13.2` | `8.0.1` |
| [jaraco-context](https://github.com/jaraco/jaraco.context) | `6.0.1` | `6.1.2` |
| [jaraco-functools](https://github.com/jaraco/jaraco.functools) | `4.1.0` | `4.6.0` |
| [keyring](https://github.com/jaraco/keyring) | `25.5.0` | `25.7.0` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [more-itertools](https://github.com/more-itertools/more-itertools) | `10.5.0` | `11.1.0` |
| [mypy](https://github.com/python/mypy) | `1.14.0` | `2.3.0` |
| [mypy-extensions](https://github.com/python/mypy_extensions) | `1.0.0` | `1.1.0` |
| [nh3](https://github.com/messense/nh3) | `0.2.20` | `0.3.6` |
| [packaging](https://github.com/pypa/packaging) | `24.2` | `26.2` |
| [pkginfo](https://code.launchpad.net/~tseaver/pkginfo/trunk) | `1.12.0` | `1.12.1.2` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.3.6` | `4.11.0` |
| [pluggy](https://github.com/pytest-dev/pluggy) | `1.5.0` | `1.6.0` |
| [pygments](https://github.com/pygments/pygments) | `2.18.0` | `2.20.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `3.3.2` | `4.0.6` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.4` | `9.1.1` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.0.0` | `7.1.0` |
| [pytest-spec](https://github.com/pchomik/pytest-spec) | `4.0.0` | `6.1.0` |
| [readme-renderer](https://github.com/pypa/readme_renderer) | `44.0` | `45.0` |
| [requests](https://github.com/psf/requests) | `2.32.3` | `2.34.2` |
| [rich](https://github.com/Textualize/rich) | `13.9.4` | `15.0.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.8.4` | `0.16.0` |
| [tomli](https://github.com/hukkin/tomli) | `2.2.1` | `2.4.1` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.2` | `0.15.1` |
| [twine](https://github.com/pypa/twine) | `6.0.1` | `7.0.0` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.12.2` | `4.16.0` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.3.0` | `2.7.0` |
| [zipp](https://github.com/jaraco/zipp) | `3.21.0` | `4.1.0` |



Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.1.8...8.4.2)

Updates `robotframework` from 6.1 to 7.4.2
- [Release notes](https://github.com/robotframework/robotframework/releases)
- [Commits](robotframework/robotframework@v6.1...v7.4.2)

Updates `astroid` from 3.3.7 to 4.1.2
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](pylint-dev/astroid@v3.3.7...v4.1.2)

Updates `build` from 1.2.2.post1 to 1.5.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.2.2.post1...1.5.0)

Updates `certifi` from 2024.12.14 to 2026.7.22
- [Commits](certifi/python-certifi@2024.12.14...2026.07.22)

Updates `charset-normalizer` from 3.4.0 to 3.4.9
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.0...3.4.9)

Updates `check-manifest` from 0.50 to 0.51
- [Changelog](https://github.com/mgedmin/check-manifest/blob/master/CHANGES.rst)
- [Commits](mgedmin/check-manifest@0.50...0.51)

Updates `coverage` from 7.6.9 to 7.15.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.6.9...7.15.2)

Updates `dill` from 0.3.9 to 0.4.1
- [Release notes](https://github.com/uqfoundation/dill/releases)
- [Commits](uqfoundation/dill@0.3.9...0.4.1)

Updates `docutils` from 0.21.2 to 0.23
- [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rtfd/recommonmark/commits)

Updates `exceptiongroup` from 1.2.2 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](agronholm/exceptiongroup@1.2.2...1.3.1)

Updates `idna` from 3.10 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.10...v3.18)

Updates `importlib-metadata` from 8.5.0 to 9.0.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.5.0...v9.0.0)

Updates `iniconfig` from 2.0.0 to 2.3.0
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.0.0...v2.3.0)

Updates `isort` from 5.13.2 to 8.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@5.13.2...8.0.1)

Updates `jaraco-context` from 6.0.1 to 6.1.2
- [Release notes](https://github.com/jaraco/jaraco.context/releases)
- [Changelog](https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst)
- [Commits](jaraco/jaraco.context@v6.0.1...v6.1.2)

Updates `jaraco-functools` from 4.1.0 to 4.6.0
- [Release notes](https://github.com/jaraco/jaraco.functools/releases)
- [Changelog](https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst)
- [Commits](jaraco/jaraco.functools@v4.1.0...v4.6.0)

Updates `keyring` from 25.5.0 to 25.7.0
- [Release notes](https://github.com/jaraco/keyring/releases)
- [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst)
- [Commits](jaraco/keyring@v25.5.0...v25.7.0)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](executablebooks/markdown-it-py@v3.0.0...v4.2.0)

Updates `more-itertools` from 10.5.0 to 11.1.0
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v10.5.0...v11.1.0)

Updates `mypy` from 1.14.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.14.0...v2.3.0)

Updates `mypy-extensions` from 1.0.0 to 1.1.0
- [Commits](python/mypy_extensions@1.0.0...1.1.0)

Updates `nh3` from 0.2.20 to 0.3.6
- [Release notes](https://github.com/messense/nh3/releases)
- [Commits](messense/nh3@v0.2.20...v0.3.6)

Updates `packaging` from 24.2 to 26.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@24.2...26.2)

Updates `pkginfo` from 1.12.0 to 1.12.1.2

Updates `platformdirs` from 4.3.6 to 4.11.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.3.6...4.11.0)

Updates `pluggy` from 1.5.0 to 1.6.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.5.0...1.6.0)

Updates `pygments` from 2.18.0 to 2.20.0
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.18.0...2.20.0)

Updates `pylint` from 3.3.2 to 4.0.6
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.3.2...v4.0.6)

Updates `pytest` from 8.3.4 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.4...9.1.1)

Updates `pytest-cov` from 6.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.0.0...v7.1.0)

Updates `pytest-spec` from 4.0.0 to 6.1.0
- [Release notes](https://github.com/pchomik/pytest-spec/releases)
- [Changelog](https://github.com/pchomik/pytest-spec/blob/master/CHANGES.txt)
- [Commits](pchomik/pytest-spec@4.0.0...6.1.0)

Updates `readme-renderer` from 44.0 to 45.0
- [Release notes](https://github.com/pypa/readme_renderer/releases)
- [Changelog](https://github.com/pypa/readme_renderer/blob/main/CHANGES.rst)
- [Commits](pypa/readme_renderer@44.0...45.0)

Updates `requests` from 2.32.3 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.34.2)

Updates `rich` from 13.9.4 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](Textualize/rich@v13.9.4...v15.0.0)

Updates `ruff` from 0.8.4 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.4...0.16.0)

Updates `tomli` from 2.2.1 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](hukkin/tomli@2.2.1...2.4.1)

Updates `tomlkit` from 0.13.2 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](python-poetry/tomlkit@0.13.2...0.15.1)

Updates `twine` from 6.0.1 to 7.0.0
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@6.0.1...7.0.0)

Updates `typing-extensions` from 4.12.2 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.12.2...4.16.0)

Updates `urllib3` from 2.3.0 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.3.0...2.7.0)

Updates `zipp` from 3.21.0 to 4.1.0
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.21.0...v4.1.0)

---
updated-dependencies:
- dependency-name: astroid
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: build
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: check-manifest
  dependency-version: '0.51'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: coverage
  dependency-version: 7.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: dill
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: docutils
  dependency-version: '0.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: exceptiongroup
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: idna
  dependency-version: '3.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: importlib-metadata
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: iniconfig
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: isort
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: jaraco-context
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: jaraco-functools
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: keyring
  dependency-version: 25.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: markdown-it-py
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: more-itertools
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: mypy-extensions
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: nh3
  dependency-version: 0.3.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pkginfo
  dependency-version: 1.12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: platformdirs
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pluggy
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pygments
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pylint
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pytest-spec
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: readme-renderer
  dependency-version: '45.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: robotframework
  dependency-version: 7.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: tomli
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: tomlkit
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: twine
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: typing-extensions
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: zipp
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/python-dependencies-f0e25503f3 branch from a3fe6b9 to c782a9a Compare July 27, 2026 22:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants