Bump coverage[toml] from 5.3 to 6.0

[dependabot]

Bumps coverage[toml] from 5.3 to 6.0.

Release notes

Sourced from coverage[toml]'s releases.

6.0

• The coverage html command now prints a message indicating where the HTML report was written. Fixes issue 1195.
• The coverage combine command now prints messages indicating each data file being combined. Fixes issue 1105.
• The HTML report now includes a sentence about skipped files due to skip_covered or skip_empty settings. Fixes issue 1163.
• Unrecognized options in the configuration file are no longer errors. They are now warnings, to ease the use of coverage across versions. Fixes issue 1035.
• Fix handling of exceptions through context managers in Python 3.10. A missing exception is no longer considered a missing branch from the with statement. Fixes issue 1205.
• Fix another rarer instance of “Error binding parameter 0 - probably unsupported type.” (issue 1010).
• Creating a directory for the coverage data file now is safer against conflicts when two coverage runs happen simultaneously (pull 1220). Thanks, Clément Pit-Claudel.

6.0b1

• Dropped support for Python 2.7, PyPy 2, and Python 3.5.
• Added support for the Python 3.10 match/case syntax.
• Data collection is now thread-safe. There may have been rare instances of exceptions raised in multi-threaded programs.
• Plugins (like the Django coverage plugin) were generating “Already imported a file that will be measured” warnings about Django itself. These have been fixed, closing issue 1150.
• Warnings generated by coverage.py are now real Python warnings.
• Using --fail-under=100 with coverage near 100% could result in the self-contradictory message total of 100 is less than fail-under=100. This bug (issue 1168) is now fixed.
• The COVERAGE_DEBUG_FILE environment variable now accepts stdout and stderr to write to those destinations.
• TOML parsing now uses the tomli library.
• Some minor changes to usually invisible details of the HTML report:
  • Use a modern hash algorithm when fingerprinting, for high-security environments (issue 1189). When generating the HTML report, we save the hash of the data, to avoid regenerating an unchanged HTML page. We used to use MD5 to generate the hash, and now use SHA-3-256. This was never a security concern, but security scanners would notice the MD5 algorithm and raise a false alarm.
  • Change how report file names are generated, to avoid leading underscores (issue 1167), to avoid rare file name collisions (issue 584), and to avoid file names becoming too long (issue 580).

coverage-5.6b1

• Third-party packages are now ignored in coverage reporting. This solves a few problems:
  • Coverage will no longer report about other people’s code (issue 876). This is true even when using --source=. with a venv in the current directory.
  • Coverage will no longer generate “Already imported a file that will be measured” warnings about coverage itself (issue 905).
• The HTML report uses j/k to move up and down among the highlighted chunks of code. They used to highlight the current chunk, but 5.0 broke that behavior. Now the highlighting is working again.
• The JSON report now includes percent_covered_display, a string with the total percentage, rounded to the same number of decimal places as the other reports’ totals.

coverage-5.5

• coverage combine has a new option, --keep to keep the original data files after combining them. The default is still to delete the files after they have been combined. This was requested in issue 1108 and implemented in pull request 1110. Thanks, Éric Larivière.
• When reporting missing branches in coverage report, branches aren’t reported that jump to missing lines. This adds to the long-standing behavior of not reporting branches from missing lines. Now branches are only reported if both the source and destination lines are executed. Closes both issue 1065 and issue 955.
• Minor improvements to the HTML report:
  • The state of the line visibility selector buttons is saved in local storage so you don’t have to fiddle with them so often, fixing issue 1123.
  • It has a little more room for line numbers so that 4-digit numbers work well, fixing issue 1124.
• Improved the error message when combining line and branch data, so that users will be more likely to understand what’s happening, closing issue 803.

coverage-5.4

• The text report produced by coverage report now always outputs a TOTAL line, even if only one Python file is reported. This makes regex parsing of the output easier. Thanks, Judson Neer. This had been requested a number of times (issue 1086, issue 922, issue 732).
• The skip_covered and skip_empty settings in the configuration file can now be specified in the [html] section, so that text reports and HTML reports can use separate settings. The HTML report will still use the [report] settings if there isn’t a value in the [html] section. Closes issue 1090.
• Combining files on Windows across drives now works properly, fixing issue 577. Thanks, Valentin Lab.
• Fix an obscure warning from deep in the _decimal module, as reported in issue 1084.
• Update to support Python 3.10 alphas in progress, including PEP 626: Precise line numbers for debugging and other tools.

coverage-5.3.1

• When using --source on a large source tree, v5.x was slower than previous versions. This performance regression is now fixed, closing issue 1037.
• Mysterious SQLite errors can happen on PyPy, as reported in issue 1010. An immediate retry seems to fix the problem, although it is an unsatisfying solution.
• The HTML report now saves the sort order in a more widely supported way, fixing issue 986. Thanks, Sebastián Ramírez (pull request 1066).
• The HTML report pages now have a Sleepy Snake favicon.
• Wheels are now provided for manylinux2010, and for PyPy3 (pp36 and pp37).

... (truncated)

Changelog

Sourced from coverage[toml]'s changelog.

Version 6.0 --- 2021-10-03

• The coverage html command now prints a message indicating where the HTML report was written. Fixes issue 1195_.

• The coverage combine command now prints messages indicating each data file being combined. Fixes issue 1105_.

• The HTML report now includes a sentence about skipped files due to skip_covered or skip_empty settings. Fixes issue 1163_.

• Unrecognized options in the configuration file are no longer errors. They are now warnings, to ease the use of coverage across versions. Fixes issue 1035_.

• Fix handling of exceptions through context managers in Python 3.10. A missing exception is no longer considered a missing branch from the with statement. Fixes issue 1205_.

• Fix another rarer instance of "Error binding parameter 0 - probably unsupported type." (issue 1010_).

• Creating a directory for the coverage data file now is safer against conflicts when two coverage runs happen simultaneously (pull 1220_). Thanks, Clément Pit-Claudel.

.. _issue 1035: nedbat/coveragepy#1035 .. _issue 1105: nedbat/coveragepy#1105 .. _issue 1163: nedbat/coveragepy#1163 .. _issue 1195: nedbat/coveragepy#1195 .. _issue 1205: nedbat/coveragepy#1205 .. _pull 1220: nedbat/coveragepy#1220

.. _changes_60b1:

Version 6.0b1 --- 2021-07-18

• Dropped support for Python 2.7, PyPy 2, and Python 3.5.

• Added support for the Python 3.10 match/case syntax.

• Data collection is now thread-safe. There may have been rare instances of exceptions raised in multi-threaded programs.

• Plugins (like the Django coverage plugin) were generating "Already imported a file that will be measured" warnings about Django itself. These have been fixed, closing issue 1150.

... (truncated)

Commits

• 9515c4d docs: 6.0 sample HTML report
• e179cf6 build: prep for 6.0 release
• 5a99516 docs: update the link to shining panda
• 4d61fff test: fix flaky multiprocessing tests
• 0ded3df chore: update requirements
• 5bcfc26 test: update pylint
• 1677bbb Python 3.10.0rc2
• 626875f docs: thanks, Clément Pit-Claudel
• f531212 fix: Avoid a race condition in misc.ensure_dir (#1220)
• c0a9811 test: another test suggested by Mark Shannon
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #116.