Lock file maintenance Python dependencies

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
		lockFileMaintenance	All locks refreshed
pytest-cov (changelog)	integration	patch	>=6.3.0 -> >=7.0.0
pytest-cov (changelog)	unit	patch	>=6.3.0 -> >=7.0.0
ruff (source, changelog)	lint	patch	^0.13.1 -> ^0.13.3
ruff (source, changelog)	fmt	patch	^0.13.1 -> ^0.13.3
tox (changelog)	integration	patch	^4.30.2 -> ^4.30.3
tox (changelog)	unit	patch	^4.30.2 -> ^4.30.3

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

astral-sh/ruff (ruff)

v0.13.3

Compare Source

Released on 2025-10-02.

Preview features

• Display diffs for ruff format --check and add support for different output formats (#​20443)
• [pyflakes] Handle some common submodule import situations for unused-import (F401) (#​20200)
• [ruff] Do not flag %r + repr() combinations (RUF065) (#​20600)

Bug fixes

• [cli] Add conflict between --add-noqa and --diff options (#​20642)
• [pylint] Exempt required imports from PLR0402 (#​20381)
• [pylint] Fix missing max-nested-blocks in settings display (#​20574)
• [pyupgrade] Prevent infinite loop with I002 and UP026 (#​20634)

Rule changes

• [flake8-simplify] Improve help message clarity (SIM105) (#​20548)

Documentation

• Add the The Basics title back to CONTRIBUTING.md (#​20624)
• Fixed documentation for try_consider_else (#​20587)
• [isort] Clarify dependency between order-by-type and case-sensitive settings (#​20559)
• [pylint] Clarify fix safety to include left-hand hashability (PLR6201) (#​20518)

Other changes

• [playground] Fix quick fixes for empty ranges in playground (#​20599)

Contributors

• @​TaKO8Ki
• @​ntBre
• @​dylwil3
• @​MichaReiser
• @​danparizher
• @​LilMonk
• @​mgiovani
• @​IDrokin117

v0.13.2

Compare Source

Released on 2025-09-25.

Preview features

• [flake8-async] Implement blocking-path-method (ASYNC240) (#​20264)
• [flake8-bugbear] Implement map-without-explicit-strict (B912) (#​20429)
• [flake8-bultins] Detect class-scope builtin shadowing in decorators, default args, and attribute initializers (A003) (#​20178)
• [ruff] Implement logging-eager-conversion (RUF065) (#​19942)
• Include .pyw files by default when linting and formatting (#​20458)

Bug fixes

• Deduplicate input paths (#​20105)
• [flake8-comprehensions] Preserve trailing commas for single-element lists (C409) (#​19571)
• [flake8-pyi] Avoid syntax error from conflict with PIE790 (PYI021) (#​20010)
• [flake8-simplify] Correct fix for positive maxsplit without separator (SIM905) (#​20056)
• [pyupgrade] Fix UP008 not to apply when __class__ is a local variable (#​20497)
• [ruff] Fix B004 to skip invalid hasattr/getattr calls (#​20486)
• [ruff] Replace -nan with nan when using the value to construct a Decimal (FURB164 ) (#​20391)

Documentation

• Add 'Finding ways to help' to CONTRIBUTING.md (#​20567)
• Update import path to ruff-wasm-web (#​20539)
• [flake8-bandit] Clarify the supported hashing functions (S324) (#​20534)

Other changes

• [playground] Allow hover quick fixes to appear for overlapping diagnostics (#​20527)
• [playground] Fix non‑BMP code point handling in quick fixes and markers (#​20526)

Contributors

• @​BurntSushi
• @​mtshiba
• @​second-ed
• @​danparizher
• @​ShikChen
• @​PieterCK
• @​GDYendell
• @​RazerM
• @​TaKO8Ki
• @​amyreese
• @​ntbre
• @​MichaReiser

tox-dev/tox (tox)

v4.30.3

Compare Source

What's Changed

• Isolate the test suite from any existing DEFAULT_CONFIG_FILE file by @​kurtmckee in #​3612
• Fix none config file issue 3611 by @​kurtmckee in #​3613
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​3608
• Fix incorrect type annotations in PythonPathPackageWithDeps (fixes #​3607) by @​PreistlyPython in #​3616
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​3615

New Contributors

• @​PreistlyPython made their first contribution in #​3616

Full Changelog: tox-dev/tox@4.30.2...4.30.3

---

Configuration

📅 Schedule: Branch creation - Between 03:00 AM and 03:59 AM, only on Friday ( * 3 * * 5 ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.