Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
coverage	>=7.6,<7.7 -> >=7.7,<7.8
semgrep	>=1.111,<1.112 -> >=1.113,<1.114

---

Release Notes

nedbat/coveragepy (coverage)

v7.7.0

Compare Source

• The Coverage object has a new method, :meth:.Coverage.branch_stats for
  getting simple branch information for a module. Closes issue 1888_.

• The :class:Coverage constructor<.Coverage> now has a plugins parameter
  for passing in plugin objects directly, thanks to Alex Gaynor <pull 1919_>_.

• Many constant tests in if statements are now recognized as being optimized
  away. For example, previously if 13: would have been considered a branch
  with one path not taken. Now it is understood as always true and no coverage
  is missing.

• The experimental sys.monitoring support now works for branch coverage if you
  are using Python 3.14.0 alpha 6 or newer. This should reduce the overhead
  coverage.py imposes on your test suite. Set the environment variable
  COVERAGE_CORE=sysmon to try it out.

• Confirmed support for PyPy 3.11. Thanks Michał Górny.

.. _issue 1888:https://github.com/nedbat/coveragepy/issues/18888
.. _pull 1919https://github.com/nedbat/coveragepy/pull/191919

.. _changes_7-6-12:

returntocorp/semgrep (semgrep)

v1.113.0

Compare Source

Fixed

• Semgrep will no longer fail a diff scan if there is a relative safe directory (saf-1851)

v1.112.0

Compare Source

Added

• TypeScript parser now allows ellipses in class bodies. For example, you can
  write the pattern like:
  class $C {
  ...
  $FUNC() { ... }
  ...
  }
  ``` (code-8242)
• Semgrep will now present more detailed info when a scan is complete, such as what percent of lines were scanned. It is also formatted in a new manner (saf-details)
• Verbose output will now print additional info about parsing and internal semgrep errors, such as what % of lines were skipped, and the lines they occured on (saf-verbose)

Fixed

• pro: Fixed bug in (experimental) "at-exit" sinks feature that would prevent
  the identification of a statement like return foo() as one such sink. (code-8199)
• FIX: --gitlab-secrets output has been updated to conform to GitLab JSON schema (scrt-849)
• The behavior of --semgrepignore-v2 changed to be closer to the legacy
  Semgrepignore v1. .gitignore files are no longer loaded automatically
  as part of the Semgrepignore v2 exclusion mechanism.
  Loading a .gitignore file must be done
  by placing :include .gitignore in the .semgrepignore file
  as was the case with Semgrepignore v1. (semgrepignore-v1-compat)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud