Update Poetry dependencies by renovate[bot] · Pull Request #296 · SonarSource/sonar-scanner-python

renovate · 2026-03-11T11:12:28Z

This PR contains the following updates:

Package	Change	Age	Confidence
black (changelog)	`25.1.0` → `25.12.0`
coverage	`7.10.6` → `7.13.4`
debugpy (source)	`1.8.13` → `1.8.20`
mypy (changelog)	`1.15.0` → `1.19.1`
pyfakefs (changelog)	`5.9.3` → `5.10.2`
pytest-docker	`3.2.0` → `3.2.5`
pytest-subtests	`0.14.1` → `0.15.0`
responses (changelog)	`0.25.8` → `0.26.0`
tomli (changelog)	`2.2.1` → `2.4.0`
types-requests (changelog)	`2.32.0.20250328` → `2.32.4.20260107`

Release Notes

psf/black (black)

`v25.12.0`

Compare Source

Highlights

Black no longer supports running with Python 3.9 (#4842)

Stable style

Fix bug where comments preceding # fmt: off/# fmt: on blocks were incorrectly
removed, particularly affecting Jupytext's # %% [markdown] comments (#4845)
Fix crash when multiple # fmt: skip comments are used in a multi-part if-clause, on
string literals, or on dictionary entries with long lines (#4872)
Fix possible crash when fmt: directives aren't on the top level (#4856)

Preview style

Fix fmt: skip skipping the line after instead of the line it's on (#4855)
Remove unnecessary parentheses from the left-hand side of assignments while preserving
magic trailing commas and intentional multiline formatting (#4865)
Fix fix_fmt_skip_in_one_liners crashing on with statements (#4853)
Fix fix_fmt_skip_in_one_liners crashing on annotated parameters (#4854)
Fix new lines being added after imports with # fmt: skip on them (#4894)

Packaging

Releases now include arm64 Windows binaries and wheels (#4814)

Integrations

Add output-file input to GitHub Action psf/black to write formatter output to a
file for artifact capture and log cleanliness (#4824)

`v25.11.0`

Compare Source

Highlights

Enable base 3.14 support (#4804)
Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
Comments containing fmt directives now preserve their exact formatting instead of
being normalized (#4811)

Preview style

Move multiline_string_handling from --unstable to --preview (#4760)
Fix bug where module docstrings would be treated as normal strings if preceded by
comments (#4764)
Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
Standardize type comments to form # type: <value> (#4645)
Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound
statements with semicolon-separated bodies (#4800)

Configuration

Add no_cache option to control caching behavior. (#4803)

Packaging

Releases now include arm64 Linux binaries (#4773)

Output

Write unchanged content to stdout when excluding formatting from stdin using pipes
(#4610)

Blackd

Implemented BlackDClient. This simple python client allows to easily send formatting
requests to blackd (#4774)

Integrations

Enable 3.14 base CI (#4804)
Enhance GitHub Action psf/black to support the required-version major-version-only
"stability" format when using pyproject.toml (#4770)
Improve error message for vim plugin users. It now handles independently vim version
Vim: Warn on unsupported Vim and Python versions independently (#4772)
Vim: Print the import paths when importing black fails (#4675)
Vim: Fix handling of virtualenvs that have a different Python version (#4675)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names
(#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with
statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items
(#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still
be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after
expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without
as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from
and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type
parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in
pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

coveragepy/coveragepy (coverage)

`v7.13.4`

Compare Source

Fix: the third-party code fix in 7.13.3 required examining the parent
directories where coverage was run. In the unusual situation that one of the
parent directories is unreadable, a PermissionError would occur, as
described in issue 2129_. This is now fixed.
Fix: in test suites that change sys.path, coverage.py could fail with
"RuntimeError: Set changed size during iteration" as described and fixed in
pull 2130_. Thanks, Noah Fatsi.
We now publish ppc64le wheels, thanks to Pankhudi Jain <pull 2121_>_.

.. _pull 2121: #2121
.. _issue 2129: #2129
.. _pull 2130: #2130

.. _changes_7-13-3:

`v7.13.3`

Compare Source

Fix: in some situations, third-party code was measured when it shouldn't have
been, slowing down test execution. This happened with layered virtual
environments such as uv sometimes makes. The problem is fixed, closing issue 2082_. Now any directory on sys.path that is inside a virtualenv is
considered third-party code.

.. _issue 2082: #2082

.. _changes_7-13-2:

`v7.13.2`

Compare Source

Fix: when Python is installed via symlinks, for example with Homebrew, the
standard library files could be incorrectly included in coverage reports.
This is now fixed, closing issue 2115_.
Fix: if a data file is created with no read permissions, the combine step
would fail completely. Now a warning is issued and the file is skipped.
Closes issue 2117_.

.. _issue 2115: #2115
.. _issue 2117: #2117

.. _changes_7-13-1:

`v7.13.1`

Compare Source

Added: the JSON report now includes a "start_line" key for function and
class regions, indicating the first line of the region in the source. Closes
issue 2110_.
Added: The debug data command now takes file names as arguments on the
command line, so you can inspect specific data files without needing to set
the COVERAGE_FILE environment variable.
Fix: the JSON report used to report module docstrings as executed lines,
which no other report did, as described in issue 2105_. This is now fixed,
thanks to Jianrong Zhao.
Fix: coverage.py uses a more disciplined approach to detecting where
third-party code is installed, and avoids measuring it. This shouldn't change
any behavior. If you find that it does, please get in touch.
Performance: data files that will be combined now record their hash as part
of the file name. This lets us skip duplicate data more quickly, speeding the
combining step.
Docs: added a section explaining more about what is considered a missing
branch and how it is reported: :ref:branch_explain, as requested in issue 1597. Thanks to Ayisha Mohammed <pull 2092_>.
Tests: the test suite misunderstood what core was being tested if
COVERAGE_CORE wasn't set on 3.14+. This is now fixed, closing issue 2109_.

.. _issue 1597: #1597
.. _pull 2092: #2092
.. _issue 2105: #2105
.. _issue 2109: #2109
.. _issue 2110: #2110

.. _changes_7-13-0:

`v7.13.0`

Compare Source

Feature: coverage.py now supports :file:.coveragerc.toml configuration
files. These files use TOML syntax and take priority over
:file:pyproject.toml but lower priority than :file:.coveragerc files.
Closes issue 1643_ thanks to Olena Yefymenko <pull 1952_>_.
Fix: we now include a permanent .pth file which is installed with the code,
fixing issue 2084. In 7.12.1b1 this was done incorrectly: it didn't work
when using the source wheel (py3-none-any). This is now fixed. Thanks,
Henry Schreiner <pull 2100_>.
Deprecated: when coverage.py is installed, it creates three command entry
points: coverage, coverage3, and coverage-3.10 (if installed for
Python 3.10). The second and third of these are not needed and will
eventually be removed. They still work for now, but print a message about
their deprecation.

.. _issue 1643: #1643
.. _pull 1952: #1952
.. _pull 2100: #2100

.. _changes_7-12-1b1:

`v7.12.0`

Compare Source

The HTML report now shows separate coverage totals for statements and
branches, as well as the usual combined coverage percentage. Thanks to Ryuta
Otsuka for the discussion <issue 2081_>_ and the implementation <pull 2085_>_.
The JSON report now includes separate coverage totals for statements and
branches, thanks to Ryuta Otsuka <pull 2090_>_.
Fix: except* clauses were not handled properly under the "sysmon"
measurement core, causing KeyError exceptions as described in issue 2086_.
This is now fixed.
Fix: we now defend against aggressive mocking of open() that could cause
errors inside coverage.py. An example of a failure is in issue 2083_.
Fix: in unusual cases where a test suite intentionally exhausts the system's
file descriptors to test handling errors in open(), coverage.py would
fail when trying to open source files, as described in issue 2091_. This
is now fixed.
A small tweak to the HTML report: file paths now use thin spaces around
slashes to make them easier to read.

.. _issue 2081: #2081
.. _issue 2083: #2083
.. _pull 2085: #2085
.. _issue 2086: #2086
.. _pull 2090: #2090
.. _issue 2091: #2091

.. _changes_7-11-3:

`v7.11.3`

Compare Source

Fix: the 7.11.1 changes meant that conflicts between a requested measurement
core and other settings would raise an error. This was a breaking change from
previous behavior, as reported in issue 2076_ and issue 2078_.

The previous behavior has been restored: when the requested core conflicts
with other settings, another core is used instead, and a warning is issued.
For contributors: the repo has moved from Ned's nedbat GitHub account_ to
the coveragepy GitHub organization_. The default branch has changed from
master to main.

.. _issue 2076: #2076
.. _issue 2078: #2078
.. _nedbat GitHub account: https://github.com/nedbat
.. _coveragepy GitHub organization: https://github.com/coveragepy

.. _changes_7-11-2:

`v7.11.2`

Compare Source

Fix: using the "sysmon" measurement core in 7.11.1, if Python code was
claimed to come from a non-Python file, a NotPython exception could be
raised. This could happen for example with Jinja templates compiled to
Python, as reported in issue 2077_. This is now fixed.
Doc: corrected the first entry in the 7.11.1 changelog.

.. _issue 2077: #2077

.. _changes_7-11-1:

`v7.11.1`

Compare Source

Fix: some chanages to details of how the measurement core is chosen, and how
conflicting settings are handled. The "sysmon" core cannot be used with some
conurrency settings, with dynamic context, and in Python 3.12/3.13, with
branch measurement.
- If the core is not specified and defaults to "sysmon" (Python 3.14+), but
  other settings conflict with sysmon, then the "ctrace" core will be used
  instead with no warning. For concurrency conflicts, this used to produce an
  error, as described in issue 2064_.
- If the "sysmon" core is explicitly requested in your configuration, but
  other settings conflict, an error is now raised. This used to produce a
  warning.
Fix: some multi-line case clauses or for loops (and probably other
constructs) could cause incorrect claims of missing branches with the
sys.monitoring core, as described in issue 2070_. This is now fixed.
Fix: when running in pytest under coverage, a breakpoint() would stop in
the wrong frame, one level down from where it should, as described in issue 1420_. This was due to a coverage change in v6.4.1 that seemed to give a
slight performance improvement, but I couldn't reproduce the performance
gain, so it's been reverted, fixing the debugger problem.
A new debug option --debug=core shows which core is in use and why.
Split sqlite debugging information out of the sys :ref:coverage debug <cmd_debug> and :ref:cmd_run_debug options since it's bulky and not
very useful.
Updated the :ref:howitworks page to better describe the three different
measurement cores.

.. _issue 1420: #1420
.. _issue 2064: #2064
.. _issue 2070: #2070

.. _changes_7-11-0:

`v7.11.0`

Compare Source

Dropped support for Python 3.9, declared support for Python 3.15 alpha.

.. _changes_7-10-7:

`v7.10.7`

Compare Source

Performance: with branch coverage in large files, generating HTML, JSON, or
LCOV reports could take far too long due to some quadratic behavior when
creating the function and class index pages. This is now fixed, closing
issue 2048_. Thanks to Daniel Diniz for help diagnosing the problem.
Most warnings and a few errors now have links to a page in the docs
explaining the specific message. Closes issue 1921_.

.. _issue 1921: #1921
.. _issue 2048: #2048

.. _changes_7-10-6:

microsoft/debugpy (debugpy)

`v1.8.20`: debugpy v1.8.20

Compare Source

Fixes for:

annotate in 3.14 causing exceptions: #1971

Enhancements:

Use remote_exec if available: c7e86a1
Support more architectures: 1bbecdf

Infrastructure work:

Support devcontainers for development: 7dbc229

Thanks to @rameshvarun, @Xeonacid, and @pdepetro for the commits

`v1.8.19`: debugpy v1.8.19

Compare Source

More fixes for #1980. Spaces in python files are handled now too.

`v1.8.18`: debugpy v1.8.18

Compare Source

Fixes:

Spaces in python interpreter cause debug launch failure

`v1.8.17`

Compare Source

`v1.8.16`: debugpy v1.8.16

Compare Source

Fixes

Fix bug in attach for 3.11 and lower on Windows

Thanks to @osiewicz

`v1.8.15`: debugpy v1.8.15

Compare Source

Fixes:

Thanks to @MichaelSpece, @jborean93, @ConradIrwin for your help

`v1.8.14`: debugpy v1.8.14

Compare Source

Fixes for:

binskim warnings on linux
support for posix_spawnp

python/mypy (mypy)

`v1.19.1`

Compare Source

Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)
Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)
Allow types.NoneType in match cases (A5rocks, PR 20383)
Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)
Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)
Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)
Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)
Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)

`v1.19.0`

Compare Source

`v1.18.2`

Compare Source

Fix crash on recursive alias (Ivan Levkivskyi, PR 19845)
Add additional guidance for stubtest errors when runtime is object.__init__ (Stephen Morton, PR 19733)
Fix handling of None values in f-string expressions in mypyc (BobTheBuidler, PR 19846)

`v1.18.1`

Compare Source

`v1.17.1`

Compare Source

Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, PR 19485)
Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, PR 19428)
Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, PR 19453)

pytest-dev/pyfakefs (pyfakefs)

`v5.10.2`

Compare Source

Fixes a problem with pathlib.glob in Python 3.14.

Fixes

fixed pathlib.glob() for Python 3.14 (see #1239)

`v5.10.1`

Compare Source

Fixes a regression introduced in version 5.9.0.

Fixes

fixed a deadlock in shutil.copytree if copying using an shutil function as
copy_function argument (see #1235)

`v5.10.0`

Compare Source

Adds official support for Python 3.14. Last minor version before the 6.0 release.

Changes

the errno codes set in OSError have changed for some specific error conditions
in Windows 11/Windows Server 2025; pyfakefs now matches this behavior
instead of the previous behavior under Windows 10
added official support for Python 3.14

Enhancements

added support for os.readinto in Python 3.14
added support for pathlib.copy and pathlib.copy_into in Python 3.14

Fixes

fixes patching of Debian-specific tempfile in Python 3.13 (see #1214)

avast/pytest-docker (pytest-docker)

`v3.2.5`

Compare Source

What's Changed

ci improvements by @augi in #128
Use --wait in the default setup command by @mikeroll in #129

New Contributors

@mikeroll made their first contribution in #129

Full Changelog: avast/pytest-docker@v3.2.4...v3.2.5

`v3.2.4`

Compare Source

What's Changed

chore(deps): pytest 9.x allowed by @augi in #127

Full Changelog: avast/pytest-docker@v3.2.3...v3.2.4

`v3.2.3`

Compare Source

What's Changed

Fix mypy error in the plugin by @s-t-e-v-e-n-k in #125

New Contributors

@s-t-e-v-e-n-k made their first contribution in #125

Full Changelog: avast/pytest-docker@v3.2.2...v3.2.3

`v3.2.2`

Compare Source

What's Changed

fix: docker host doesn't need to start with tcp:// by @lexi-k in #121

Full Changelog: avast/pytest-docker@v3.2.1...v3.2.2

`v3.2.1`

Compare Source

What's Changed

Fix non-existing docker_setup_command into docker_setup by @alexbarcelo in #118
Make the plugin.Services class available at the base module level for easier typing by @jenstroeger in #119

New Contributors

@alexbarcelo made their first contribution in #118
@jenstroeger made their first contribution in #119

Full Changelog: avast/pytest-docker@v3.2.0...v3.2.1

pytest-dev/pytest-subtests (pytest-subtests)

`v0.15.0`

Compare Source

2025-10-20

Added experimental --no-subtests-reports CLI option. This disables
subtests output unless it's a failed subtest. (#198_)

.. _#198: #198

`v0.14.2`

Compare Source

2025-06-13

Print output "dots" for successful unittest subtests (#164_).
Improved reporting in case subtests raise pytest.xfail (#194_).

.. _#164: #164
.. _#194: #194

getsentry/responses (responses)

`v0.26.0`

Compare Source

When using assert_all_requests_are_fired=True, assertions about
unfired requests are now raised even when an exception occurs in the context manager or
decorated function. Previously, these assertions were suppressed when exceptions occurred.
This new behavior provides valuable debugging context about which mocked requests were
or weren't called.
Consider the Retry-After header when handling retries

hukkin/tomli (tomli)

`v2.4.0`

Compare Source

Added
- TOML v1.1.0 compatibility
- Binary wheels for Windows arm64

`v2.3.0`

Compare Source

Added
- Binary wheels for Python 3.14 (also free-threaded)
Performance
- Reduced import time

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Update Poetry dependencies

e62cd0a

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update Poetry dependencies#296

Update Poetry dependencies#296
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/poetry-dependencies

renovate bot commented Mar 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 11, 2026

Release Notes

Highlights

Stable style

Preview style

Packaging

Integrations

Highlights

Stable style

Preview style

Configuration

Packaging

Output

Blackd

Integrations

Highlights

Stable style

Preview style

Parser

Performance

Integrations

Documentation

v1.8.20: debugpy v1.8.20

v1.8.19: debugpy v1.8.19

v1.8.18: debugpy v1.8.18

v1.8.16: debugpy v1.8.16

v1.8.15: debugpy v1.8.15

v1.8.14: debugpy v1.8.14

Fixes

Fixes

Changes

Enhancements

Fixes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v1.8.20`: debugpy v1.8.20

`v1.8.19`: debugpy v1.8.19

`v1.8.18`: debugpy v1.8.18

`v1.8.16`: debugpy v1.8.16

`v1.8.15`: debugpy v1.8.15

`v1.8.14`: debugpy v1.8.14