Bump the minor-patch group with 4 updates

[dependabot]

Bumps the minor-patch group with 4 updates: coverage, bandit, pytest-factoryboy and ruff.

Updates coverage from 7.9.1 to 7.9.2

Changelog

Sourced from coverage's changelog.

Version 7.9.2 — 2025-07-03

• Fix: complex conditionals within a line might cause a KeyError when using sys.monitoring, as reported in issue 1991_. This is now fixed.

• Fix: we can now measure coverage for code in Python archive (.par) files. Thanks, Itamer Oren <pull 1984_>_.

.. _pull 1984: nedbat/coveragepy#1984 .. _issue 1991: nedbat/coveragepy#1991

.. _changes_7-9-1:

Commits

• 6e77492 docs: oops, beta 3
• b24cf7e docs: sample HTML for 7.9.2
• 35305c3 docs: prep for 7.9.2
• 9a8d9b6 docs: add pull request link
• 88dcaa2 fix: assume a missing line number is intra-line. #1991
• 678ec80 build: use pyenv for nightly builds. Thanks, Paul Timmins
• a3d00d5 build: workflow jobs should have names
• 279310a chore: bump the action-dependencies group with 2 updates (#1988)
• 614dfbf fix: enable measuring test coverage for Python archive (.par) files (#1984)
• 42bf82c chore: bump the action-dependencies group with 2 updates (#1985)
• Additional commits viewable in compare view

Updates bandit from 1.8.5 to 1.8.6

Release notes

Sourced from bandit's releases.

1.8.6

What's Changed

• Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @​dependabot in PyCQA/bandit#1279
• Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @​dependabot in PyCQA/bandit#1278
• added hint to FreeBSD package in doc/source/integrations.rst by @​daniel-mohr in PyCQA/bandit#1282
• Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @​dependabot in PyCQA/bandit#1284
• Huggingface revision pinning by @​lukehinds in PyCQA/bandit#1281

New Contributors

• @​daniel-mohr made their first contribution in PyCQA/bandit#1282

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

Commits

• 2d0b675 Huggingface revision pinning (#1281)
• 4cd1337 Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#1284)
• ffed1bb added hint to FreeBSD package in doc/source/integrations.rst (#1282)
• 090ba0f Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#1278)
• 33c6789 Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#1279)
• See full diff in compare view

Updates pytest-factoryboy from 2.8.0 to 2.8.1

Changelog

Sourced from pytest-factoryboy's changelog.

2.8.1

Added +++++

• Test against all supported factory-boy versions

Changed +++++++

Deprecated ++++++++++

Removed +++++++

Fixed +++++

• Fix incompatibility when using the combination of python < 3.12 and factory-boy < 3.3.

  • The error was: TypeError: type 'Factory' is not subscriptable

Security ++++++++

Commits

• 6635365 Merge pull request #249 from pytest-dev/fix-2.8
• d38c410 Bump version to 2.8.1
• 643e777 Fix incompatibility with python < 3.12 and factory-boy < 3.3
• d8bdab5 Test against all supported factoryboy versions
• 3bb755d Merge pull request #247 from pytest-dev/remove-typing-any
• 3627e88 Remove usages of typing.Any
• 892bb79 Bump poetry
• 9295690 Merge pull request #246 from pytest-dev/move-to-src-layout
• a9e8c70 Move package to src/ layout and update paths accordingly
• 272ca62 Remove weird gitignore entries
• See full diff in compare view

Updates ruff from 0.12.1 to 0.12.2

Release notes

Sourced from ruff's releases.

0.12.2

Release Notes

Preview features

• [flake8-pyi] Expand Optional[A] to A | None (PYI016) (#18572)
• [pyupgrade] Mark UP008 fix safe if no comments are in range (#18683)

Bug fixes

• [flake8-comprehensions] Fix C420 to prepend whitespace when needed (#18616)
• [perflint] Fix PERF403 panic on attribute or subscription loop variable (#19042)
• [pydocstyle] Fix D413 infinite loop for parenthesized docstring (#18930)
• [pylint] Fix PLW0108 autofix introducing a syntax error when the lambda's body contains an assignment expression (#18678)
• [refurb] Fix false positive on empty tuples (FURB168) (#19058)
• [ruff] Allow more field calls from attrs (RUF009) (#19021)
• [ruff] Fix syntax error introduced for an empty string followed by a u-prefixed string (UP025) (#18899)

Rule changes

• [flake8-executable] Allow uvx in shebang line (EXE003) (#18967)
• [pandas] Avoid flagging PD002 if pandas is not imported (#18963)
• [pyupgrade] Avoid PEP-604 unions with typing.NamedTuple (UP007, UP045) (#18682)

Documentation

• Document link between import-outside-top-level (PLC0415) and lint.flake8-tidy-imports.banned-module-level-imports (#18733)
• Fix description of the format.skip-magic-trailing-comma example (#19095)
• [airflow] Make AIR302 example error out-of-the-box (#18988)
• [airflow] Make AIR312 example error out-of-the-box (#18989)
• [flake8-annotations] Make ANN401 example error out-of-the-box (#18974)
• [flake8-async] Make ASYNC100 example error out-of-the-box (#18993)
• [flake8-async] Make ASYNC105 example error out-of-the-box (#19002)
• [flake8-async] Make ASYNC110 example error out-of-the-box (#18975)
• [flake8-async] Make ASYNC210 example error out-of-the-box (#18977)
• [flake8-async] Make ASYNC220, ASYNC221, and ASYNC222 examples error out-of-the-box (#18978)
• [flake8-async] Make ASYNC251 example error out-of-the-box (#18990)
• [flake8-bandit] Make S201 example error out-of-the-box (#19017)
• [flake8-bandit] Make S604 and S609 examples error out-of-the-box (#19049)
• [flake8-bugbear] Make B028 example error out-of-the-box (#19054)
• [flake8-bugbear] Make B911 example error out-of-the-box (#19051)
• [flake8-datetimez] Make DTZ011 example error out-of-the-box (#19055)
• [flake8-datetimez] Make DTZ901 example error out-of-the-box (#19056)
• [flake8-pyi] Make PYI032 example error out-of-the-box (#19061)
• [flake8-pyi] Make example error out-of-the-box (PYI014, PYI015) (#19097)
• [flake8-pyi] Make example error out-of-the-box (PYI042) (#19101)
• [flake8-pyi] Make example error out-of-the-box (PYI059) (#19080)
• [flake8-pyi] Make example error out-of-the-box (PYI062) (#19079)
• [flake8-pytest-style] Make example error out-of-the-box (PT023) (#19104)
• [flake8-pytest-style] Make example error out-of-the-box (PT030) (#19105)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.2

Preview features

• [flake8-pyi] Expand Optional[A] to A | None (PYI016) (#18572)
• [pyupgrade] Mark UP008 fix safe if no comments are in range (#18683)

Bug fixes

• [flake8-comprehensions] Fix C420 to prepend whitespace when needed (#18616)
• [perflint] Fix PERF403 panic on attribute or subscription loop variable (#19042)
• [pydocstyle] Fix D413 infinite loop for parenthesized docstring (#18930)
• [pylint] Fix PLW0108 autofix introducing a syntax error when the lambda's body contains an assignment expression (#18678)
• [refurb] Fix false positive on empty tuples (FURB168) (#19058)
• [ruff] Allow more field calls from attrs (RUF009) (#19021)
• [ruff] Fix syntax error introduced for an empty string followed by a u-prefixed string (UP025) (#18899)

Rule changes

• [flake8-executable] Allow uvx in shebang line (EXE003) (#18967)
• [pandas] Avoid flagging PD002 if pandas is not imported (#18963)
• [pyupgrade] Avoid PEP-604 unions with typing.NamedTuple (UP007, UP045) (#18682)

Documentation

• Document link between import-outside-top-level (PLC0415) and lint.flake8-tidy-imports.banned-module-level-imports (#18733)
• Fix description of the format.skip-magic-trailing-comma example (#19095)
• [airflow] Make AIR302 example error out-of-the-box (#18988)
• [airflow] Make AIR312 example error out-of-the-box (#18989)
• [flake8-annotations] Make ANN401 example error out-of-the-box (#18974)
• [flake8-async] Make ASYNC100 example error out-of-the-box (#18993)
• [flake8-async] Make ASYNC105 example error out-of-the-box (#19002)
• [flake8-async] Make ASYNC110 example error out-of-the-box (#18975)
• [flake8-async] Make ASYNC210 example error out-of-the-box (#18977)
• [flake8-async] Make ASYNC220, ASYNC221, and ASYNC222 examples error out-of-the-box (#18978)
• [flake8-async] Make ASYNC251 example error out-of-the-box (#18990)
• [flake8-bandit] Make S201 example error out-of-the-box (#19017)
• [flake8-bandit] Make S604 and S609 examples error out-of-the-box (#19049)
• [flake8-bugbear] Make B028 example error out-of-the-box (#19054)
• [flake8-bugbear] Make B911 example error out-of-the-box (#19051)
• [flake8-datetimez] Make DTZ011 example error out-of-the-box (#19055)
• [flake8-datetimez] Make DTZ901 example error out-of-the-box (#19056)
• [flake8-pyi] Make PYI032 example error out-of-the-box (#19061)
• [flake8-pyi] Make example error out-of-the-box (PYI014, PYI015) (#19097)
• [flake8-pyi] Make example error out-of-the-box (PYI042) (#19101)
• [flake8-pyi] Make example error out-of-the-box (PYI059) (#19080)
• [flake8-pyi] Make example error out-of-the-box (PYI062) (#19079)
• [flake8-pytest-style] Make example error out-of-the-box (PT023) (#19104)
• [flake8-pytest-style] Make example error out-of-the-box (PT030) (#19105)
• [flake8-quotes] Make example error out-of-the-box (Q003) (#19106)

... (truncated)

Commits

• 9bee837 Bump 0.12.2 (#19126)
• 1c6717b Filter private symbols from stubs if they are internal types (#19121)
• 1b813cd Fix description of the format.skip-magic-trailing-comma example (#19095)
• b00f68a [ruff] Allow more field calls from attrs (RUF009) (#19021)
• 710c60f [flake8-pytest-style] Make example error out-of-the-box (PT023) (#19104)
• 811e25d [flake8-pytest-style] Make example error out-of-the-box (PT030) (#19105)
• b78af2d [flake8-quotes] Make example error out-of-the-box (Q003) (#19106)
• 4f36f06 Document link between import-outside-top-level (PLC0415) and `lint.flake8-t...
• 2589a29 [flake8-simplify] Make example error out-of-the-box (SIM113) (#19109)
• 26bb8f7 [flake8-simplify] Make example error out-of-the-box (SIM401) (#19110)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

The patch update of this development dependency was automatically approved.