Skip to content

chore(deps):(deps-dev): Bump diff-cover from 8.0.3 to 10.5.0 - #213

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/diff-cover-10.5.0
Closed

chore(deps):(deps-dev): Bump diff-cover from 8.0.3 to 10.5.0#213
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/diff-cover-10.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor

Bumps diff-cover from 8.0.3 to 10.5.0.

Release notes

Sourced from diff-cover's releases.

Version 10.5.0

What's Changed

New Contributors

Full Changelog: Bachmann1234/diff_cover@v10.4.2...v10.5.0

Version 10.4.2

What's Changed

New Contributors

Dependencies

Full Changelog: Bachmann1234/diff_cover@v10.4.1...v10.4.2

Version 10.4.1

What's Changed

Dependencies

Full Changelog: Bachmann1234/diff_cover@v10.4.0...v10.4.1

Version 10.4.0

What's Changed

Dependency bumps

New Contributors

... (truncated)

Changelog

Sourced from diff-cover's changelog.

8/08/2026 v10.5.0

8/06/2026 v10.4.2

7/23/2026 v10.4.1

7/21/2026 v10.4.0

  • Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @​mofr

05/30/2026 v10.3.0

  • Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @​duxiaocheng

  • Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

01/08/2026 v10.2.0

12/30/2025 v10.1.0

  • Add support for floating-point total percentage in reports PR 565 thanks @​tilaven

12/09/2025 v10.0.0

  • Remove python 3.9 support
  • Add python 3.14 support
  • Normalize exlude/include in pyproject.toml to support string or list

11/10/2025 v9.7.2

09/25/2025 v9.7.1

... (truncated)

Commits
  • e34eec3 Version 10.5.0
  • 5fc9e82 Support PHPUnit clover reports (silently reported as zero coverage) (#617)
  • f6a43b7 Version 10.4.2
  • 3fdbf40 fix(plugins): accept reports/options in diff_cover_report_quality hookspec (#...
  • 4c44508 fix(config): honor format option from config file (#612)
  • b490adc Bump actions/setup-python from 6 to 7 (#614)
  • 19da277 Bump ruff from 0.15.20 to 0.16.0 (#615)
  • 8f80569 Bump github/codeql-action from 4 to 4.37.3 (#616)
  • 8111a37 Version 10.4.1
  • 291ee94 Handle low confidence chardet detection for undeclared encodings (#611)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 13, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 13, 2026
@codecov

codecov Bot commented Aug 13, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (f6a8e77) to head (5c90e6c).
⚠️ Report is 204 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff             @@
##             main      #213      +/-   ##
===========================================
+ Coverage   98.27%   100.00%   +1.72%     
===========================================
  Files          28        79      +51     
  Lines         638      3854    +3216     
  Branches       87       467     +380     
===========================================
+ Hits          627      3854    +3227     
+ Misses          4         0       -4     
+ Partials        7         0       -7     
Flag Coverage Δ
unittests 100.00% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot
dependabot Bot force-pushed the dependabot/pip/diff-cover-10.5.0 branch from 5c90e6c to a560fa9 Compare August 13, 2026 06:41
@sebastienrousseau

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@dependabot
dependabot Bot force-pushed the dependabot/pip/diff-cover-10.5.0 branch 2 times, most recently from c324c97 to ee50b34 Compare August 13, 2026 17:54
Bumps [diff-cover](https://github.com/Bachmann1234/diff-cover) from 8.0.3 to 10.5.0.
- [Release notes](https://github.com/Bachmann1234/diff-cover/releases)
- [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG)
- [Commits](Bachmann1234/diff_cover@v8.0.3...v10.5.0)

---
updated-dependencies:
- dependency-name: diff-cover
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/diff-cover-10.5.0 branch from ee50b34 to 8b2ab47 Compare August 13, 2026 18:04
sebastienrousseau added a commit that referenced this pull request Aug 13, 2026
Consolidates four Dependabot pull requests that could not be merged
individually. Each rewrites poetry.lock, so merging any one of them made
the other three conflict — the queue never converged. They are applied
here as one manifest change and one lock regeneration.

    xmlschema   >=3.4.0,<4.0.0  ->  >=4.3.2,<5.0.0
    bandit      ^1.7.0          ->  ^1.9.4
    diff-cover  ^8.0.0          ->  ^10.5.0
    ruff        ^0.15.0         ->  ^0.16.2   (resolves 0.16.3)

xmlschema is a major bump and this project validates ISO 20022 messages
against XSDs, so it was checked beyond the suite passing: 6 of the 34
bundled schemas were loaded directly under 4.3.2, and the xml- and
validation-tagged tests were run as their own groups.

ruff 0.15 -> 0.16 can introduce new rules; `ruff check` and
`ruff format --check` were run at the exact resolved version rather
than assumed.

    pytest                  1468 passed, 9 skipped
    ruff check .            exit 0
    ruff format --check .   223 files already formatted
    poetry check --lock     exit 0

Authorship note: these could not be cherry-picked — every one conflicts
on the lock — so the manifest edits were reapplied by hand. Credit for
the bumps belongs to Dependabot (#210, #212, #213, #215).

Signed-off-by: Sebastien Rousseau <sebastian.rousseau@gmail.com>

Assisted-by: Claude:claude-opus-4-7
@sebastienrousseau

Copy link
Copy Markdown
Owner

Superseded by #220, which lands this together with the other three dependency bumps.

These could not be merged one at a time: each rewrites poetry.lock, so merging any one made the rest conflict and the queue never converged. #220 applies all four as a single manifest change plus one lock regeneration.

Because every one of them conflicts on the lock, the commits could not be cherry-picked and the manifest edits were reapplied by hand — the bump is yours, the mechanics are not.

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@sebastienrousseau
sebastienrousseau deleted the dependabot/pip/diff-cover-10.5.0 branch August 13, 2026 19:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant