Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
coverage	>=7.9,<7.10 -> >=7.10,<7.11
semgrep	>=1.128,<1.129 -> >=1.130,<1.131

---

Release Notes

nedbat/coveragepy (coverage)

v7.10.0

Compare Source

• A new configuration option: ":ref:config_run_patch" specifies named patches
  to work around some limitations in coverage measurement. These patches are
  available:

  • patch = _exit lets coverage save its data even when :func:os._exit() <python:os._exit> is used to abruptly end the process. This closes
    long-standing issue 310_ as well as its duplicates: issue 312, issue 1673, issue 1845, and issue 1941.

  • patch = subprocess measures coverage in Python subprocesses created
    with :mod:subprocess, :func:os.system, or one of the :func:execv <python:os.execl> or :func:spawnv <python:os.spawnl> family of
    functions. Closes old issue 367_ and duplicate issue 378_.

  • patch = execv adjusts the :func:execv <python:os.execl> family of
    functions to save coverage data before ending the current program and
    starting the next. Not available on Windows. Closes issue 43_ after 15
    years!

• The HTML report now dimly colors subsequent lines in multi-line statements.
  They used to have no color. This gives a better indication of the amount of
  code missing in the report. Closes issue 1308_.

• Two new exclusion patterns are part of the defaults: ... is automatically
  excluded as a line and if TYPE_CHECKING: is excluded as a branch. Closes
  issue 831_.

• A new command-line option: --save-signal=USR1 specifies a signal that
  coverage.py will listen for. When the signal is sent, the coverage data will
  be saved. This makes it possible to save data from within long-running
  processes. Thanks, Arkady Gilinsky <pull 1998_>_.

• A new configuration option: ":ref:config_report_partial_also" is a list of
  regexes to add as pragmas for partial branches. This parallels the
  ":ref:config_report_exclude_also" setting for adding line exclusion
  patterns.

• A few file path configuration settings didn't allow for tilde expansion:
  :ref:config_json_output, :ref:config_lcov_output and
  :ref:config_run_debug_file. This is now fixed.

• Wheels are included for 3.14 now that 3.14 rc1 is available.

• We no longer ship a PyPy-specific wheel. PyPy will install the pure-Python
  wheel. Closes issue 2001_.

• In the very unusual situation of not having a current frame, coverage no
  longer crashes when using the sysmon core, fixing issue 2005_.

.. _issue 43:https://github.com/nedbat/coveragepy/issues/433
.. _issue 310https://github.com/nedbat/coveragepy/issues/31010
.. _issue 31https://github.com/nedbat/coveragepy/issues/312312
.. _issue 3https://github.com/nedbat/coveragepy/issues/367/367
.. _issue https://github.com/nedbat/coveragepy/issues/378s/378
.. _issuehttps://github.com/nedbat/coveragepy/issues/831es/831
.. _issuehttps://github.com/nedbat/coveragepy/issues/1308es/1308
.. _issuhttps://github.com/nedbat/coveragepy/issues/1673ues/1673
.. _isshttps://github.com/nedbat/coveragepy/issues/1845sues/1845
.. _ishttps://github.com/nedbat/coveragepy/issues/1941ssues/1941
.. _https://github.com/nedbat/coveragepy/pull/1998y/pull/1998
.. _https://github.com/nedbat/coveragepy/issues/2001/issues/2001
.. [https://github.com/nedbat/coveragepy/issues/2005](https://redirect.github.com/nedbat/coveragepy/issues/2005)y/issues/2005

.. _changes_7-9-2:

returntocorp/semgrep (semgrep)

v1.130.0

Fixed

• Fix the Python parser to correctly handle and parse valid structural dictionary patterns. (gh-11100)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud