Skip to content

build(deps): (deps): bump coverage from 6.4.4 to 7.3.0 - #3590

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/coverage-7.3.0
Closed

build(deps): (deps): bump coverage from 6.4.4 to 7.3.0#3590
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/coverage-7.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2023

Copy link
Copy Markdown
Contributor

Bumps coverage from 6.4.4 to 7.3.0.

Changelog

Sourced from coverage's changelog.

Version 7.3.0 — 2023-08-12

  • Added a :meth:.Coverage.collect context manager to start and stop coverage data collection.

  • Dropped support for Python 3.7.

  • Fix: in unusual circumstances, SQLite cannot be set to asynchronous mode. Coverage.py would fail with the error Safety level may not be changed inside a transaction. This is now avoided, closing issue 1646_. Thanks to Michael Bell for the detailed bug report.

  • Docs: examples of configuration files now include separate examples for the different syntaxes: .coveragerc, pyproject.toml, setup.cfg, and tox.ini.

  • Fix: added nosemgrep comments to our JavaScript code so that semgrep-based SAST security checks won't raise false alarms about security problems that aren't problems.

  • Added a CITATION.cff file, thanks to Ken Schackart <pull 1641_>_.

.. _pull 1641: nedbat/coveragepy#1641 .. _issue 1646: nedbat/coveragepy#1646

.. _changes_7-2-7:

Version 7.2.7 — 2023-05-29

  • Fix: reverted a change from 6.4.3 <pull 1347_>_ that helped Cython, but also increased the size of data files when using dynamic contexts, as described in the now-fixed issue 1586. The problem is now avoided due to a recent change (issue 1538). Thanks to Anders Kaseorg <pull 1629_>_ and David Szotten for persisting with problem reports and detailed diagnoses.

  • Wheels are now provided for CPython 3.12.

.. _issue 1586: nedbat/coveragepy#1586 .. _pull 1629: nedbat/coveragepy#1629

.. _changes_7-2-6:

Version 7.2.6 — 2023-05-23

  • Fix: the lcov command could raise an IndexError exception if a file is translated to Python but then executed under its own name. Jinja2 does this

... (truncated)

Commits
  • 9c2f924 docs: sample HTML for 7.3.0
  • 0421fdb docs: prep for 7.3.0
  • f2aa871 build: move pylint config into pyproject.toml
  • 1873ccb docs: drop a bunch of badges
  • 5937a62 feat: cov.collect() context manager
  • da7ee52 build(deps): bump sigstore/gh-action-sigstore-python from 2.0.0 to 2.0.1
  • d87f64a test: excluding NotImplementedError excluded too much
  • e51b1f7 test: ensure lines are properly ignored during metacov
  • b02de96 test(refactor): abstract method compatible with both pytest and mypy
  • ada3ade test(build): PytestCollectionWarning should be an error
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
dependabot Bot requested a review from a team as a code owner August 14, 2023 14:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 14, 2023
Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.4.4 to 7.3.0.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@6.4.4...7.3.0)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/develop/coverage-7.3.0 branch from 0d5cdad to f09c20d Compare August 23, 2023 12:28
@Panaetius Panaetius closed this Jan 11, 2024
@dependabot @github

dependabot Bot commented on behalf of github Jan 11, 2024

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/develop/coverage-7.3.0 branch January 11, 2024 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant