Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
bandit (source, changelog)	==1.8.3 -> ==1.8.5
mypy (changelog)	==1.16.0 -> ==1.16.1
pytest (changelog)	==8.4.0 -> ==8.4.1
pytest-cov (changelog)	==6.1.1 -> ==6.2.1
tox (changelog)	==4.26.0 -> ==4.27.0

---

Release Notes

PyCQA/bandit (bandit)

v1.8.5

Compare Source

What's Changed

• Fix the rendering of the CI/CD doc by @​ericwb in https://github.com/PyCQA/bandit/pull/1274
• Fix for publish to PyPI failure by @​ericwb in https://github.com/PyCQA/bandit/pull/1273

Full Changelog: PyCQA/bandit@1.8.4...1.8.5

python/mypy (mypy)

v1.16.1

Compare Source

pytest-dev/pytest (pytest)

v8.4.1

Compare Source

pytest 8.4.1 (2025-06-17)

Bug fixes

• #​13461: Corrected _pytest.terminal.TerminalReporter.isatty to support
  being called as a method. Before it was just a boolean which could
  break correct code when using -o log_cli=true).

• #​13477: Reintroduced pytest.PytestReturnNotNoneWarning{.interpreted-text role="class"} which was removed by accident in pytest [8.4]{.title-ref}.

  This warning is raised when a test functions returns a value other than None, which is often a mistake made by beginners.

  See return-not-none{.interpreted-text role="ref"} for more information.

• #​13497: Fixed compatibility with Twisted 25+.

Improved documentation

• #​13492: Fixed outdated warning about faulthandler not working on Windows.

pytest-dev/pytest-cov (pytest-cov)

v6.2.1

Compare Source

• Added a version requirement for pytest's pluggy dependency (1.2.0, released 2023-06-21) that has the required new-style hookwrapper API.

• Removed deprecated license classifier (packaging).

• Disabled coverage warnings in two more situations where they have no value:

  • "module-not-measured" in workers
  • "already-imported" in subprocesses

v6.2.0

Compare Source

• The plugin now adds 3 rules in the filter warnings configuration to prevent common coverage warnings being raised as obscure errors::

  default:unclosed database in <sqlite3.Connection object at:ResourceWarning
  once::PytestCovWarning
  once::CoverageWarning

  This fixes most of the bad interactions that are occurring on pytest 8.4 with filterwarnings=error.

  The plugin will check if there already matching rules for the 3 categories
  (ResourceWarning, PytestCovWarning, CoverageWarning) and message (unclosed database in <sqlite3.Connection object at) before adding the filters.

  This means you can have this in your pytest configuration for complete oblivion (not recommended, if that is not clear)::

  filterwarnings = [
  "error",
  "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning",
  "ignore::PytestCovWarning",
  "ignore::CoverageWarning",
  ]

tox-dev/tox (tox)

v4.27.0

Compare Source

What's Changed

• Feat: include free_threaded flag in result-json by @​robsdedude in https://github.com/tox-dev/tox/pull/3534
• Add security policy by @​jugmac00 in https://github.com/tox-dev/tox/pull/3535
• Fix dependency-group name normalization by @​robsdedude in https://github.com/tox-dev/tox/pull/3540
• Log environment variables sorted by key while redacting values of unsafe ones by @​ssbarnea in https://github.com/tox-dev/tox/pull/3543

Full Changelog: tox-dev/tox@4.26.0...4.27.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.