← Back to issue list

build(deps): update dependency coverage to v7.15.4 (main)

View original Github issue

Metadata

Project
craft-cli
Number
#469
Type
pull request
State
merged
Author
renovate[bot]
Labels
PR: Dependencies
Created
Updated
Closed

Current evaluation

Renovate bumped the dev dependency coverage from 7.15.2 to 7.15.4 across 2 files (pin + changelog). Approved by 1 reviewer and merged into main, picking up HTML href-escaping and LCOV control-character fixes. Later superseded by #482 (7.16.0).

Resolution: closed resolved

Reason: The PR itself was merged into main with reviewer approval, applying the coverage 7.15.2 → 7.15.4 pin across two files; upstream fixes for HTML href injection and LCOV control-character forgery came with 7.15.3/7.15.4. A subsequent Renovate PR (#482) bumped coverage to 7.16.0.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [coverage](https://redirect.github.com/coveragepy/coveragepy) | `==7.15.2` → `==7.15.4` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/coverage/7.15.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/coverage/7.15.2/7.15.4?slim=true) | --- ### Release Notes <details> <summary>coveragepy/coveragepy (coverage)</summary> ### [`v7.15.4`](https://redirect.github.com/coveragepy/coveragepy/blob/HEAD/CHANGES.rst#Version-7154--2026-08-06) [Compare Source](https://redirect.github.com/coveragepy/coveragepy/compare/7.15.3...7.15.4) - Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the `href` of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, `Rajath Mohare <pull 2227_>`\_. - Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, `Rajath Mohare <pull 2226_>`\_. - Wheels are now provided for Python 3.15. .. \_pull 2226: [#&#8203;2226](https://redirect.github.com/coveragepy/coveragepy/pull/2226) .. \_pull 2227: [#&#8203;2227](https://redirect.github.com/coveragepy/coveragepy/pull/2227) .. \_changes\_7-15-3: ### [`v7.15.3`](https://redirect.github.com/coveragepy/coveragepy/blob/HEAD/CHANGES.rst#Version-7153--2026-08-02) [Compare Source](https://redirect.github.com/coveragepy/coveragepy/compare/7.15.2...7.15.3) - Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to `Jisang Han <pull 2234_>`*. Closes `issue 2200`*. - A performance improvement in the low-level line number bookkeeping when combining data files, thanks to `Kevin Turcios <pull 2239_>`\_. - Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to `Kevin Turcios <pull 2240_>`\_. .. \_issue 2200: [#&#8203;2200](https://redirect.github.com/coveragepy/coveragepy/issues/2200) .. \_pull 2234: [#&#8203;2234](https://redirect.github.com/coveragepy/coveragepy/pull/2234) .. \_pull 2239: [#&#8203;2239](https://redirect.github.com/coveragepy/coveragepy/pull/2239) .. \_pull 2240: [#&#8203;2240](https://redirect.github.com/coveragepy/coveragepy/pull/2240) .. \_changes\_7-15-2: </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-cli). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMjQuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Renovate bumped the dev dependency coverage from 7.15.2 to 7.15.4 across 2 files (pin + changelog). Approved by 1 reviewer and merged into main, picking up HTML href-escaping and LCOV control-character fixes. Later superseded by #482 (7.16.0).
stealth/space-bunny-alpha — closed resolved Merged canonical/craft-cli#469 into main, updating coverage from v7.15.2 to v7.15.4 following reviewer approval.
qwen/qwen3.6-35b-a3b — — Merged automated dependency update for coverage from v7.15.2 to v7.15.4. Approved by one reviewer, passed CI checks, and merged into main.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 85
needs review Updates coverage dependency to v7.15.4 for security and performance fixes. Approved by one reviewer, CI mostly passes with one isolated failure on Python 3.14.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 10
Confidence: 95
keep open Updates the coverage dependency from v7.15.2 to v7.15.4, addressing security fixes for HTML report injection and LCOV control character handling. PR is approved, CI passes, and automerge is enabled.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 95
needs review Updates the coverage dependency from v7.15.2 to v7.15.4 to address security and performance fixes. Approved by one reviewer, all CI checks passing, and automerge is enabled.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 10
Confidence: 95
needs review Updates the coverage dependency from v7.15.2 to v7.15.4 to address security fixes for HTML report escaping and LCOV control character handling. Currently approved by one reviewer with all CI checks passing and automerge enabled.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 10
Confidence: 95
needs review Updates coverage dependency to v7.15.4, addressing security fixes for HTML and LCOV reports plus performance improvements. Currently approved, CI passing, and ready for merge.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 95
keep open Updates the coverage dependency from v7.15.2 to v7.15.4, addressing security fixes for HTML report escaping and LCOV control characters. PR is approved, all CI checks pass, and automerge is enabled.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 95
needs review Updates the coverage dependency from v7.15.2 to v7.15.4. Automerge is enabled, CI checks are passing, and the PR awaits final review or automatic merge.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 95
needs review Updates the coverage dependency from v7.15.2 to v7.15.4 to apply security and performance fixes. CI checks pass, automerge is enabled, and the PR is awaiting initial maintainer review.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 95
needs review Updates the coverage dependency from v7.15.2 to v7.15.4, addressing security fixes for HTML and LCOV report generation. Currently passing all CI checks and ready for automated merge.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 95
needs review Updates the coverage dependency from v7.15.2 to v7.15.4, addressing security fixes for HTML and LCOV report injection. All CI checks pass, automerge is enabled, and it awaits maintainer review.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 95
needs review Updates the coverage dependency from v7.15.2 to v7.15.4. Generated by Renovate with automerge enabled. All CI checks are passing, awaiting maintainer review.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 95
needs review Updates coverage dependency from v7.15.2 to v7.15.3. All CI checks pass. Pending maintainer review or automated merge.

Update history

Date Change
updated
updated
updated
updated
updated
updated
updated
updated
updated
updated
updated
created

Related work

  • Superseded By: canonical/craft-cli#482 (confidence 92%)

    Later Renovate PR merged coverage 7.15.4 → 7.16.0 into main, moving past the pin set here.

  • Related To: canonical/craft-cli#459 (confidence 80%)

    Predecessor Renovate coverage bump (7.14.2 → 7.15.0) merged as commit 5014730 on the same dependency pin.

Related issues

Issue Project State Summary Similarity
#384 build(deps): update dependency coverage to v7.10.6 craft-cli merged Renovate PR #384 bumped the dev dependency coverage from 7.6.1 to 7.10.6; approved by 2 reviewers and merged to main as commit 6d467a1. Later superseded by coverage updates in #397, #403, #406, #431, #450, #459, #469 and #482 (now 7.16.1).
88%
#310 build(deps): update dependency coverage to v7.10.4 (main) craft-store merged Renovate PR bumping the coverage dev dependency from 7.6.2 to 7.10.4 was approved by two reviewers and merged to main as commit 4f30eec (later followed by #329, #335, #347, #367).
88%
#482 build(deps): update dependency coverage to v7.16.0 (main) craft-cli merged Renovate dependency bump of coverage 7.15.4 → 7.16.0 was approved and merged into main as commit 5873370, with all 48 CI checks passing (2 files, +126/-126).
87%
#450 build(deps): update dependency coverage to v7.14.2 (main) craft-cli merged Renovate PR #450 bumping coverage from 7.13.5 to 7.14.2 was approved and merged as commit ad6c9a0, updating the pin in two files (changelog/constraints) with all CI checks passing.
86%
#406 build(deps): update dependency coverage to v7.13.0 (main) craft-cli merged Renovate PR #406 merged (commit bed5a10), bumping coverage from 7.12.0 to 7.13.0 in main; later superseded by #431, #450, #459, #469, #482.
85%
#690 build(deps): update dependency coverage to v7.6.3 (main) craft-providers merged Renovate PR #690 was merged, updating coverage from 7.6.2 to 7.6.3 via commit 5631cfa.
85%
#403 build(deps): update dependency coverage to v7.12.0 (main) craft-cli merged Renovate PR merged as commit 79f1a8c, bumping coverage from 7.11.0 to 7.12.0 in two dependency files; all CI checks passed and 2 reviewers approved.
84%
#397 build(deps): update dependency coverage to v7.11.0 (main) craft-cli merged Renovate PR #397 merged into main as commit f4f339d, bumping the coverage test dependency from 7.10.6 to 7.11.0 (which also picked up 7.10.7's performance fixes). All CI checks passed with 2 approvals.
84%
#367 build(deps): update dependency coverage to v7.14.0 (main) craft-store merged Merged PR #367 into main, upgrading coverage from 7.13.5 to 7.14.0 in commit 905fea0.
83%
#802 build(deps): update dependency coverage to v7.9.2 (main) craft-application closed Renovate PR #802 proposed coverage 7.9.2 but was closed unmerged after OSV-scanner and file-lint failures; Renovate marked 7.9.2 ignored pending a newer release.
82%