Bump coverage from 7.14.3 to 7.15.0

[dependabot]

Bumps coverage from 7.14.3 to 7.15.0.

Release notes

Sourced from coverage's releases.

7.15.0

Version 7.15.0 — 2026-07-02

• Since 7.14.0, reporting commands implicitly combine parallel data files. Now those commands have a new option --keep-combined to retain the data files after combining them instead of the default, which is to delete them. Finishes issue 2198.
• Fix: the LCOV report would incorrectly count excluded functions as uncovered, as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen.
• When running your program, coverage now correctly sets yourmodule.__spec__.loader as strongly recommended, avoiding the deprecation warning described in issue 2208. Thanks, A5rocks.
• Fix: with Python 3.10, running with the -I (isolated mode) option didn’t correctly omit the current directory from the module search path, as described in issue 2103. That is now fixed thanks to Ilia Sorokin.

➡️  PyPI page: coverage 7.15.0. :arrow_right:  To install: python3 -m pip install coverage==7.15.0

Changelog

Sourced from coverage's changelog.

Version 7.15.0 — 2026-07-02

• Since 7.14.0, reporting commands implicitly combine parallel data files. Now those commands have a new option --keep-combined to retain the data files after combining them instead of the default, which is to delete them. Finishes issue 2198_.

• Fix: the LCOV report would incorrectly count excluded functions as uncovered, as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen <pull 2206_>.

• When running your program, coverage now correctly sets yourmodule.__spec__.loader as strongly recommended <--loader--_>, avoiding the deprecation warning described in issue 2208. Thanks, A5rocks <pull 2209_>_.

• Fix: with Python 3.10, running with the -I (isolated mode) option didn't correctly omit the current directory from the module search path, as described in issue 2103. That is now fixed thanks to Ilia Sorokin <pull 2211_>.

.. --loader--: https://docs.python.org/3/reference/datamodel.html#module.__loader_ .. _issue 2103: coveragepy/coveragepy#2103 .. _issue 2198: coveragepy/coveragepy#2198 .. _issue 2205: coveragepy/coveragepy#2205 .. _pull 2206: coveragepy/coveragepy#2206 .. _issue 2208: coveragepy/coveragepy#2208 .. _pull 2209: coveragepy/coveragepy#2209 .. _pull 2211: coveragepy/coveragepy#2211

.. _changes_7-14-3:

Commits

• c8c8020 docs: sample HTML for 7.15.0
• ae19db1 docs: prep for 7.15.0
• 17b45a1 docs: --keep-combined in the man page
• 6f9fa1e fix: preserve isolated sys.path on Python 3.10 (#2211)
• 787af5f chore: bump actions/checkout in the action-dependencies group (#2210)
• 1ed3998 fix: start attaching the loader on __spec__ #2208 (#2209)
• 1ab1122 docs: remove stray comma
• f24a91f feat: --keep-combined for reporting commands. #2198
• 5e70751 test: canonicalize mock calls in test_cmdline to reduce diff noise
• 65979cc fix: skip excluded functions in LCOV function totals (#2206)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This is a trivial dependency bump — coverage is updated from 7.14.3 to 7.15.0 for Python > 3.11, in both the development and test optional-dependency groups of pyproject.toml.

Code Quality

• ✅ Style conventions: Change is a simple version pin update, consistent with existing formatting in the file.
• ✅ No commented-out code: N/A, none present.
• ✅ Meaningful variable names: N/A, no code/variables changed.
• ✅ DRY principle: The version is bumped consistently in both locations (development group at line 39, test group at line 88) — no duplication issue introduced, though this is the existing pattern of repeating the same pin in two dependency groups rather than a single source of truth. Not a new issue introduced by this PR.
• ✅ Defects: No logic changes; pure version bump. No bugs, race conditions, or security issues introduced. Worth a quick sanity check that coverage==7.15.0 is a real, published release compatible with the pytest-cov==7.1.0 and pytest==9.1.1 pins also present in the file — I can't verify against PyPI here (no network access), so flag this as something CI should confirm.
• ✅ CLAUDE.md considerations: No .claude/CLAUDE.md changes in this diff; existing config is already environment-agnostic.

Testing

• ✅ N/A — dependency version bump only, no new functions/endpoints to test. CI running make test / make coverage with the new version will validate compatibility.

Documentation

• ✅ N/A — no README/API doc changes needed for a patch-level dependency bump.
• ❌ CHANGELOG.md: Not updated. Minor — many projects don't log routine dependency bumps, but confirm this repo's convention (check if other recent dependabot bumps, e.g. commit 891f95f/1eb7f3c, updated CHANGELOG.md; if not, this is consistent with established practice and not a blocker).

Security

• ✅ No hardcoded credentials.
• ✅ No input validation concerns (config file only).
• ✅ No error handling concerns.
• ✅ No sensitive data in logs.
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Overall

No blocking issues. This looks like a standard automated dependency bump (Dependabot-style). Safe to merge pending CI passing with the new coverage version.

Automated code review analyzing defects and coding standards