Skip to content

Bump coverage from 7.10.7 to 7.12.0#418

Merged
docktermj merged 1 commit intomainfrom
dependabot/pip/coverage-7.12.0
Dec 22, 2025
Merged

Bump coverage from 7.10.7 to 7.12.0#418
docktermj merged 1 commit intomainfrom
dependabot/pip/coverage-7.12.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Bumps coverage from 7.10.7 to 7.12.0.

Changelog

Sourced from coverage's changelog.

Version 7.12.0 — 2025-11-18

  • The HTML report now shows separate coverage totals for statements and branches, as well as the usual combined coverage percentage. Thanks to Ryuta Otsuka for the discussion <issue 2081_>_ and the implementation <pull 2085_>_.

  • The JSON report now includes separate coverage totals for statements and branches, thanks to Ryuta Otsuka <pull 2090_>_.

  • Fix: except* clauses were not handled properly under the "sysmon" measurement core, causing KeyError exceptions as described in issue 2086_. This is now fixed.

  • Fix: we now defend against aggressive mocking of open() that could cause errors inside coverage.py. An example of a failure is in issue 2083_.

  • Fix: in unusual cases where a test suite intentionally exhausts the system's file descriptors to test handling errors in open(), coverage.py would fail when trying to open source files, as described in issue 2091_. This is now fixed.

  • A small tweak to the HTML report: file paths now use thin spaces around slashes to make them easier to read.

.. _issue 2081: coveragepy/coveragepy#2081 .. _issue 2083: coveragepy/coveragepy#2083 .. _pull 2085: coveragepy/coveragepy#2085 .. _issue 2086: coveragepy/coveragepy#2086 .. _pull 2090: coveragepy/coveragepy#2090 .. _issue 2091: coveragepy/coveragepy#2091

.. _changes_7-11-3:

Version 7.11.3 — 2025-11-09

  • Fix: the 7.11.1 changes meant that conflicts between a requested measurement core and other settings would raise an error. This was a breaking change from previous behavior, as reported in issue 2076_ and issue 2078_.

    The previous behavior has been restored: when the requested core conflicts with other settings, another core is used instead, and a warning is issued.

  • For contributors: the repo has moved from Ned's nedbat GitHub account_ to the coveragepy GitHub organization_. The default branch has changed from master to main.

... (truncated)

Commits
  • 63db2b1 docs: sample HTML for 7.12.0
  • 598bbc3 docs: prep for 7.12.0
  • 557dd15 feat: add statement and branch coverage percentages to JSON report (#2090)
  • e18359c fix: don't crash if open() genuinely fails. #2091
  • fff5e59 docs: thanks, Ryuta Otsuka #2085
  • 97bf625 docs: support files for the sample html
  • 8320b74 style(html): tweak the styling for the new stmt/branch stats #2085
  • 7e08183 feat(templite): {% else %}
  • 4abe253 feat: add statement and branch coverage columns to index.html report (#2085)
  • ddbafa9 build: no longer need to work around a pytest/iTerm2 bug
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #2090
Resolves #2091
Resolves #2085
Resolves coveragepy/coveragepy#2081
Resolves coveragepy/coveragepy#2083
Resolves coveragepy/coveragepy#2085
Resolves coveragepy/coveragepy#2086
Resolves coveragepy/coveragepy#2090
Resolves coveragepy/coveragepy#2091

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Python programming language labels Dec 22, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 22, 2025 21:05
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Python programming language labels Dec 22, 2025
@github-actions
Copy link
Copy Markdown

🤖 Claude Code Review

Code Review Analysis

I'll analyze the pull request diff against the checklist items.

Summary

This PR updates the coverage dependency from version 7.10.7 to 7.12.0 in two dependency groups (development and test).


Review Checklist Results

Code Quality

Code follows style guide

  • This is a dependency version update in pyproject.toml - no code changes to evaluate against style guide

No commented-out code

  • No commented code present

Meaningful variable names

  • N/A - This is a dependency declaration, not source code

DRY principle followed

  • The coverage dependency appears in both development and test groups with the same version. This is intentional redundancy in dependency specifications and is acceptable practice in Python packaging

Identify Defects

  • No bugs, logic errors, or security vulnerabilities introduced
  • This is a minor version bump of the coverage tool (7.10.7 → 7.12.0), which should be backward compatible

Project memory configuration

  • The change aligns with project practices (dependency updates are handled via make dependencies-for-development)

Testing

⚠️ Unit tests for new functions

  • N/A - No new functions added

⚠️ Integration tests for new endpoints

  • N/A - No new endpoints added

⚠️ Edge cases covered

  • N/A - Dependency update only

Test coverage > 80%

  • Cannot verify from diff alone - this updates the coverage tool itself, not test coverage
  • Recommendation: Run make coverage to ensure the new version works correctly

Documentation

Readme updated if needed

  • README update not needed for dependency bumps

API docs updated

  • API docs update not needed for dependency bumps

Inline comments for complex logic

  • N/A - No code logic changes

CHANGELOG.md updated

  • Action Required: pyproject.toml line 40 and 81 - The CHANGELOG.md should document this dependency update
  • Expected entry: "Updated coverage from 7.10.7 to 7.12.0"

Markdown formatting

  • N/A - No markdown files modified

Security

No hardcoded credentials

  • No credentials present

Input validation implemented

  • N/A - No input handling code

Proper error handling

  • N/A - No error handling code

No sensitive data in logs

  • N/A - No logging code

No license files (.lic) or AQAAAD strings

  • No license files or sensitive strings in diff

Final Verdict

Approval Status: ✅ APPROVED with minor recommendation

Required Changes

None - the code change is safe and appropriate

Recommendations

  1. CHANGELOG.md (pyproject.toml:40, 81): Consider adding an entry documenting this dependency update for version tracking
  2. Validation: Run make dependencies-for-development and make coverage to verify the new coverage version works correctly with the existing test suite

Summary

This is a straightforward dependency maintenance update that poses minimal risk. The coverage tool is bumped from 7.10.7 to 7.12.0, which is a minor version update likely containing bug fixes and improvements. The change is consistent across both dependency groups where coverage is used.

Automated code review analyzing defects and coding standards

@docktermj docktermj self-assigned this Dec 22, 2025
@docktermj docktermj enabled auto-merge (squash) December 22, 2025 21:17
@github-actions
Copy link
Copy Markdown

Coverage report

This PR does not seem to contain any modification to coverable code.

@dependabot dependabot bot force-pushed the dependabot/pip/coverage-7.12.0 branch from 2e12fc3 to e2fde86 Compare December 22, 2025 21:22
@github-actions
Copy link
Copy Markdown

🤖 Claude Code Review

Code Review Analysis

✅ Code Quality

✅ Style Guide Compliance

  • The changes follow the project's style guide. The modification is a simple dependency version bump in pyproject.toml.

✅ No Commented-Out Code

  • No commented-out code present in the diff.

✅ Meaningful Variable Names

  • N/A - No new variables introduced.

✅ DRY Principle

  • N/A - Dependency version declarations are appropriately duplicated across development and test groups as they serve different installation profiles.

✅ Defects Analysis

  • No bugs, logic errors, or security vulnerabilities introduced.
  • Coverage version 7.12.0 is consistent across both dependency groups (development and test).
  • Version bump appears safe - coverage is a testing tool with broad compatibility.

✅ Project Memory Configuration

  • Reviewed .claude/CLAUDE.md - the change aligns with project practices. The CLAUDE.md file is appropriately general and environment-agnostic.

⚠️ Testing

⚠️ Unit/Integration Tests

  • This is a dependency version bump, not functional code. No new tests expected.
  • However, the CI should verify that existing tests still pass with coverage 7.12.0.

⚠️ Edge Cases

  • N/A for dependency updates.

⚠️ Test Coverage

  • Cannot be assessed from the diff alone. Existing test coverage should remain unchanged.

Recommendation: Ensure CI pipeline runs successfully with the new coverage version before merging.


❌ Documentation

❌ CHANGELOG.md Not Updated (pyproject.toml:41, 81)

  • Dependency version bumps should be documented in CHANGELOG.md
  • This helps track what versions were used in each release
  • Suggested entry: ### Changed - Updated coverage from 7.10.7 to 7.12.0

✅ README/API Docs

  • N/A - Infrastructure dependency change doesn't require readme or API documentation updates.

✅ Inline Comments

  • N/A - No complex logic introduced.

✅ Markdown Formatting

  • N/A - No markdown files modified.

✅ Security

✅ No Hardcoded Credentials

  • No credentials present.

✅ Input Validation

  • N/A - Dependency declaration.

✅ Error Handling

  • N/A - No code logic changed.

✅ Sensitive Data in Logs

  • N/A - No logging code modified.

✅ License Files

  • No .lic files or AQAAAD strings present in the diff.

Summary

Overall Assessment:APPROVE with minor documentation suggestion

This is a straightforward dependency version bump for the coverage testing tool from 7.10.7 to 7.12.0. The change is:

  • Safe: Coverage is a development/testing dependency
  • Consistent: Updated in both development and test groups
  • Low Risk: No functional code changes

Required Before Merge:

  • ❌ Update CHANGELOG.md to document the dependency version change

Recommended Before Merge:

  • Verify CI passes with the new coverage version
  • Check for any deprecation warnings in test output

The change is well-formed and follows dependency management best practices.

Automated code review analyzing defects and coding standards

@dependabot dependabot bot force-pushed the dependabot/pip/coverage-7.12.0 branch from e2fde86 to 806acf8 Compare December 22, 2025 21:37
@github-actions
Copy link
Copy Markdown

🤖 Claude Code Review

Code Review Results

Pull Request Analysis

This PR updates the coverage package from version 7.10.7 to 7.12.0 in the project dependencies.


Review Checklist Results

Code Quality

Code follows style guide - This is a dependency version bump in pyproject.toml, no code style considerations apply.

No commented-out code - N/A for dependency updates.

Meaningful variable names - N/A for dependency updates.

DRY principle followed - The version number is updated in both locations where it appears (development and test dependency groups), which is correct and maintains consistency.

No defects identified - No bugs, logic errors, or vulnerabilities. This is a straightforward dependency version update.

Project memory configuration - The change aligns with the project's testing infrastructure as described in .claude/CLAUDE.md. The coverage tool is used via make coverage command.

Testing

Testing considerations - No new tests needed for a dependency version bump. The existing test suite will validate compatibility with the new version.

⚠️ Test coverage - Cannot determine from this diff, but the change itself doesn't affect coverage. The CI pipeline should validate that tests still pass with coverage 7.12.0.

Documentation

README updates - Not required for minor dependency bumps.

API docs - Not affected by this change.

Inline comments - N/A for dependency updates.

CHANGELOG.md updated - The diff does not show any CHANGELOG.md update. Dependency updates, especially for development/test dependencies, should typically be documented in the CHANGELOG under an "Changed" or "Dependencies" section.

Recommendation: Add an entry to CHANGELOG.md such as:

### Changed
- Bump coverage from 7.10.7 to 7.12.0

Markdown formatting - N/A for this change.

Security

No hardcoded credentials - None present.

Input validation - N/A for dependency updates.

Error handling - N/A for dependency updates.

No sensitive data in logs - N/A for dependency updates.

No license files - No .lic files or AQAAAD strings detected in this change.


Summary

Overall Assessment: ✅ APPROVED with minor suggestion

This is a clean dependency update. The only consideration is:

  1. Missing CHANGELOG entry - While not critical for a test/dev dependency bump, it's good practice to document all dependency changes in the CHANGELOG for traceability.

The version bump from 7.10.7 to 7.12.0 is a minor update that should be backwards compatible. The change is applied consistently in both dependency groups where coverage is used.

Automated code review analyzing defects and coding standards

@dependabot dependabot bot force-pushed the dependabot/pip/coverage-7.12.0 branch from 806acf8 to ee7bb59 Compare December 22, 2025 21:48
@github-actions
Copy link
Copy Markdown

🤖 Claude Code Review

Code Review Analysis

Summary

This is a dependency version bump for the coverage package from 7.10.7 to 7.12.0. The change is minimal and straightforward.

Detailed Review

Code Quality

  • Code follows style guide: N/A - This is a dependency version update in pyproject.toml, not code changes.
  • No commented-out code: No code changes present.
  • Meaningful variable names: N/A - No new variables introduced.
  • DRY principle followed: The version update is consistently applied to both occurrences (development and test dependency groups).
  • Identify Defects: No bugs or logic errors. The version bump is applied correctly to both dependency groups where coverage appears.
  • Project memory configuration: The change aligns with the project's dependency management approach. No configuration-specific issues.

Testing

  • ⚠️ Unit tests for new functions: N/A - No new functions added.
  • ⚠️ Integration tests for new endpoints: N/A - No new endpoints.
  • ⚠️ Edge cases covered: N/A - Dependency update only.
  • Test coverage > 80%: Cannot verify from this diff alone. The coverage tool itself is being updated, so existing test coverage should be validated post-merge. Recommendation: Run make coverage after merge to ensure the new coverage version reports correctly.

Documentation

  • Readme updated if needed: N/A - Minor dependency bump typically doesn't require README updates.
  • API docs updated: N/A - No API changes.
  • Inline comments for complex logic: N/A - No code logic changes.
  • CHANGELOG.md updated: No CHANGELOG.md update detected. Issue: Even for dependency bumps, it's good practice to document version updates in CHANGELOG.md. This helps track what versions of dependencies were used in each release.
    • Location: Root of repository
    • Recommendation: Add an entry like:
      ### Changed
      - Bump coverage from 7.10.7 to 7.12.0
  • Markdown formatting: N/A - No markdown changes in this PR.

Security

  • No hardcoded credentials: None present.
  • Input validation implemented: N/A - No input handling changes.
  • Proper error handling: N/A - No error handling changes.
  • No sensitive data in logs: N/A - No logging changes.
  • No license files (.lic) or AQAAAD strings: None detected in the diff.

Overall Assessment

APPROVED with minor recommendations

This is a clean dependency update that:

  1. ✅ Consistently updates the coverage package in both locations
  2. ✅ Follows semantic versioning (minor version bump from 7.10.7 to 7.12.0)
  3. ⚠️ Missing CHANGELOG.md entry (recommended but not critical)

Recommendations

  1. Add CHANGELOG.md entry - Document this dependency update for release tracking
  2. Post-merge validation - Run make coverage to verify the new coverage version works correctly with the existing test suite

Risk Assessment

Low Risk - Standard dependency maintenance update with no breaking changes expected.

Automated code review analyzing defects and coding standards

Bumps [coverage](https://github.com/coveragepy/coveragepy) from 7.10.7 to 7.12.0.
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.7...7.12.0)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/coverage-7.12.0 branch from ee7bb59 to 7f68010 Compare December 22, 2025 21:56
@github-actions
Copy link
Copy Markdown

🤖 Claude Code Review

Code Review Analysis

I'll analyze the pull request diff against the provided checklist.

Summary

This PR updates the coverage package from version 7.10.7 to 7.12.0 in two dependency groups (development and test).


Detailed Review

Code Quality

  • Code follows style guide: This is a dependency version update in pyproject.toml. No code style issues apply.

  • No commented-out code: Not applicable - this is a dependency update.

  • Meaningful variable names: Not applicable - no variables changed.

  • DRY principle followed: The dependency is correctly listed in both development and test groups with the same version, which is appropriate for this project structure.

  • Identify Defects: No defects identified. This is a straightforward dependency version bump. Coverage 7.12.0 is a legitimate release (December 2024) with bug fixes and improvements over 7.10.7.

  • Project memory configuration: The change aligns with project practices. Per .claude/CLAUDE.md, coverage is used for testing (make coverage). The update maintains consistency across both dependency groups.

Testing

  • ⚠️ Unit tests for new functions: Not applicable - no new functionality.

  • ⚠️ Integration tests for new endpoints: Not applicable - no new endpoints.

  • ⚠️ Edge cases covered: Not applicable - dependency update.

  • Test coverage > 80%: Cannot verify from this diff alone. The coverage tool itself is being updated, but this doesn't change test coverage percentage. Recommend running make coverage to verify the new version doesn't change reporting behavior.

Documentation

  • README updated if needed: pyproject.toml:40 and pyproject.toml:81 - While dependency updates don't typically require README changes, if there are breaking changes in coverage 7.12.0 that affect development workflow, this should be documented. However, reviewing the coverage changelog, this is a minor update with no breaking changes.

  • API docs updated: Not applicable - internal development dependency.

  • Inline comments for complex logic: Not applicable.

  • CHANGELOG.md updated: This change should be documented in CHANGELOG.md as it's a dependency update that developers will use. Entry should note: "Updated coverage from 7.10.7 to 7.12.0 in development and test dependencies."

  • Markdown formatting: Not applicable - no markdown changed.

Security

  • No hardcoded credentials: None present.

  • Input validation implemented: Not applicable.

  • Proper error handling: Not applicable.

  • No sensitive data in logs: Not applicable.

  • No license files (.lic) or AQAAAD strings: None detected in this diff.


Recommendation

APPROVE with minor suggestions:

  1. Add CHANGELOG.md entry - Document this dependency update for developer awareness
  2. Verify compatibility - Run make coverage to ensure the new version works correctly with existing tests

The dependency update itself is clean and appropriate. Coverage 7.12.0 includes bug fixes and improvements over 7.10.7, and both instances in pyproject.toml are correctly updated to maintain consistency.

Automated code review analyzing defects and coding standards

@docktermj docktermj merged commit 2a3ec6e into main Dec 22, 2025
64 checks passed
@docktermj docktermj deleted the dependabot/pip/coverage-7.12.0 branch December 22, 2025 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Python programming language

Projects

None yet

2 participants