chore(deps): update development dependencies (non-major)
Metadata
Current evaluation
Merged in #539 via commit 2629789, updating coverage, Black, Pyright, types-pyyaml, and types-setuptools to newer non-major versions.
Resolution: closed resolved
Reason: PR #539 merged into main as commit 2629789. The merge applied the five development-dependency version bumps, including Black 24.3.0, which fixes CVE-2024-21503.
Evaluated by: mr-cal-bot
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [dev/coverage](https://togithub.com/nedbat/coveragepy) | `==7.4.3` -> `==7.4.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [dev/types-pyyaml](https://togithub.com/python/typeshed) ([changelog](https://togithub.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/PyYAML.md)) | `==6.0.12.12` -> `==6.0.12.20240311` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [dev/types-setuptools](https://togithub.com/python/typeshed) ([changelog](https://togithub.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/setuptools.md)) | `==69.1.0.20240310` -> `==69.2.0.20240317` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [lint/black](https://togithub.com/psf/black) ([changelog](https://togithub.com/psf/black/blob/main/CHANGES.md)) | `==24.2.0` -> `==24.3.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [types/pyright](https://togithub.com/RobertCraigie/pyright-python) | `==1.1.353` -> `==1.1.354` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>nedbat/coveragepy (dev/coverage)</summary>
### [`v7.4.4`](https://togithub.com/nedbat/coveragepy/blob/HEAD/CHANGES.rst#Version-744--2024-03-14)
[Compare Source](https://togithub.com/nedbat/coveragepy/compare/7.4.3...7.4.4)
- Fix: in some cases, even with `[run] relative_files=True`, a data file
could be created with absolute path names. When combined with other relative
data files, it was random whether the absolute file names would be made
relative or not. If they weren't, then a file would be listed twice in
reports, as detailed in `issue 1752`\_. This is now fixed: absolute file
names are always made relative when combining. Thanks to Bruno Rodrigues dos
Santos for support.
- Fix: the last case of a match/case statement had an incorrect message if the
branch was missed. It said the pattern never matched, when actually the
branch is missed if the last case always matched.
- Fix: clicking a line number in the HTML report now positions more accurately.
- Fix: the `report:format` setting was defined as a boolean, but should be a
string. Thanks, `Tanaydin Sirin <pull 1754_>`\_. It is also now documented
on the :ref:`configuration page <config_report_format>`.
.. \_issue 1752:[https://github.com/nedbat/coveragepy/issues/1752](https://togithub.com/nedbat/coveragepy/issues/1752)2
.. \_pull 1754[https://github.com/nedbat/coveragepy/pull/1754](https://togithub.com/nedbat/coveragepy/pull/1754)54
.. \_changes\_7-4-3:
</details>
<details>
<summary>psf/black (lint/black)</summary>
### [`v24.3.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2430)
[Compare Source](https://togithub.com/psf/black/compare/24.2.0...24.3.0)
##### Highlights
This release is a milestone: it fixes Black's first CVE security vulnerability. If you
run Black on untrusted input, or if you habitually put thousands of leading tab
characters in your docstrings, you are strongly encouraged to upgrade immediately to fix
[CVE-2024-21503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503).
This release also fixes a bug in Black's AST safety check that allowed Black to make
incorrect changes to certain f-strings that are valid in Python 3.12 and higher.
##### Stable style
- Don't move comments along with delimiters, which could cause crashes ([#​4248](https://togithub.com/psf/black/issues/4248))
- Strengthen AST safety check to catch more unsafe changes to strings. Previous versions
of Black would incorrectly format the contents of certain unusual f-strings containing
nested strings with the same quote type. Now, Black will crash on such strings until
support for the new f-string syntax is implemented. ([#​4270](https://togithub.com/psf/black/issues/4270))
- Fix a bug where line-ranges exceeding the last code line would not work as expected
([#​4273](https://togithub.com/psf/black/issues/4273))
##### Performance
- Fix catastrophic performance on docstrings that contain large numbers of leading tab
characters. This fixes
[CVE-2024-21503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503).
([#​4278](https://togithub.com/psf/black/issues/4278))
##### Documentation
- Note what happens when `--check` is used with `--quiet` ([#​4236](https://togithub.com/psf/black/issues/4236))
</details>
<details>
<summary>RobertCraigie/pyright-python (types/pyright)</summary>
### [`v1.1.354`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.353...v1.1.354)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.353...v1.1.354)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - "every weekend" in timezone Etc/UTC.
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/canonical/craft-providers).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNDUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI0NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged in #539 via commit 2629789, updating coverage, Black, Pyright, types-pyyaml, and types-setuptools to newer non-major versions. | |
| qwen/qwen3.6-35b-a3b | — | closed resolved | Merged routine dependency update PR upgrading coverage, black, pyright, types-pyyaml, and types-setuptools to their latest non-major versions. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #254 chore(deps): update development dependencies (non-major) | craft-cli | merged | Merged in #254 as commit cd4bb1a, updating coverage, pytest, Black, codespell, mypy, and pyright to the listed non-major versions. | |
| #148 chore(deps): update development dependencies (non-major) | craft-store | merged | Merged in #148 via commit 3621b07; updated coverage to 7.4.0, pytest to 7.4.4, Black to 23.12.1, mypy to 1.8.0, and pyright to 1.1.344. | |
| #124 chore(deps): update development dependencies (non-major) | starbase | merged | Merged PR #124 in commit a913629, updating coverage 7.3.0, Black 23.7.0, mypy 1.5.1, and pyright 1.1.323. | |
| #185 chore(deps): update development dependencies (non-major) | craft-store | merged | Merged PR #185 via commit dde3621, updating coverage, pytest, codespell, mypy, and pyright development dependencies. | |
| #244 chore(deps): update development dependencies (non-major) | craft-cli | merged | Merged PR #244 as commit a8d693f, updating coverage, pytest, pytest-mock, Black, yamllint, mypy, and Pyright development dependencies. | |
| #161 chore(deps): update development dependencies (non-major) | craft-application | merged | Merged in commit 883083f0, updating coverage 7.3.2→7.4.1, pytest-check 2.2.2→2.3.1, yamllint 1.32.0→1.33.0, and mypy 1.6.1→1.8.0. | |
| #216 chore(deps): update development dependencies (non-major) | craft-cli | merged | Renovate PR merged as commit 5a53a01, bumping dev deps: coverage 7.4.1, pytest 7.4.4, black 23.12.1, mypy 1.8.0, pyright 1.1.348. | |
| #286 chore(deps): update development dependencies (non-major) | craft-application | merged | Merged in commit 80a9ecb3, updating coverage to 7.4.4, pytest-mock to 3.14.0, and Pyright to 1.1.356. | |
| #432 chore(deps): update development dependencies (non-major) | craft-providers | merged | Renovate non-major dev-dependency bump merged: black 23.9.1→23.10.0, types-mypy 1.6.0→1.6.1, types-pyright 1.1.331→1.1.332. Merged into main as commit e31ee97; coverage unchanged at 99%. | |
| #168 chore(deps): update development dependencies (non-major) | craft-store | merged | Merged PR #168 in commit b7affd9, updating coverage 7.4.4, pytest-mock 3.14.0, yamllint 1.35.1, mypy 1.9.0, and pyright 1.1.358. |