Bump the pip-dependencies group with 5 updates

[dependabot]

Bumps the pip-dependencies group with 5 updates:

Package	From	To
harmony-service-lib	2.3.0	2.4.0
coverage	7.6.8	7.6.10
ruff	0.8.1	0.8.4
pytest	8.3.3	8.3.4
mypy	1.13.0	1.14.1

Updates harmony-service-lib from 2.3.0 to 2.4.0

Release notes

Sourced from harmony-service-lib's releases.

v2.4.0

• HARMONY-1938: Update code to omit Authorization header when redirected to a presigned S3 URL (#55) @​chris-durbin
• HARMONY-1938: Remove fallback authentication functionality and related code (#54) @​chris-durbin
• HARMONY-1928: Add support of long url download via POST (#53) @​ygliuvt

Commits

• 17450f0 Update release version to v2.4.0
• 37467f1 HARMONY-1938: Change to send authorization header with EDL bearer token for a...
• 6240b6d HARMONY-1938: Fix linter issues.
• ed5e205 HARMONY-1938: Remove username/password fallback authentication capability and...
• 51379a4 HARMONY-1928: Add long url download test.
• 7c8d962 HARMONY-1928: Add support of long url download via POST.
• See full diff in compare view

Updates coverage from 7.6.8 to 7.6.10

Changelog

Sourced from coverage's changelog.

Version 7.6.10 — 2024-12-26

• Fix: some descriptions of missing branches in HTML and LCOV reports were incorrect when multi-line statements were involved (issue 1874_ and issue 1875_). These are now fixed.

• Fix: Python 3.14 defers evaluation of annotations <pep649_>_ by moving them into separate code objects. That code is rarely executed, so coverage.py would mark them as missing, as reported in issue 1908_. Now they are ignored by coverage automatically.

• Fixed an obscure and mysterious problem on PyPy 3.10 seemingly involving mocks, imports, and trace functions: issue 1902_. To be honest, I don't understand the problem or the solution, but git bisect helped find it, and now it's fixed.

• Docs: re-wrote the :ref:subprocess page to put multiprocessing first and to highlight the correct use of :class:multiprocessing.Pool <python:multiprocessing.pool.Pool>.

.. _issue 1874: nedbat/coveragepy#1874 .. _issue 1875: nedbat/coveragepy#1875 .. _issue 1902: nedbat/coveragepy#1902 .. _issue 1908: nedbat/coveragepy#1908 .. _pep649: https://docs.python.org/3.14/whatsnew/3.14.html#pep-649-deferred-evaluation-of-annotations

.. _changes_7-6-9:

Version 7.6.9 — 2024-12-06

• Fix: Tomas Uribe fixed <pull 1901_>_ a performance problem in the XML report. Large code bases should produce XML reports much faster now.

.. _pull 1901: nedbat/coveragepy#1901

.. _changes_7-6-8:

Commits

• f0dcf65 docs: sample HTML for 7.6.10
• 0f26f35 docs: prep for 7.6.10
• 81c5e43 docs: rewrite the subprocess page
• 878410c chore: make doc_upgrade
• f1d320d chore: make upgrade
• 67f1440 debug: this condition is never true. really?
• c85eaba fix: multi-line statements no longer confuse branch target descriptions. #187...
• 73e58fa refactor: clarify the code that fixes with-statement exits
• e16c9cc typo: backslask
• 865fd7f chore: bump the action-dependencies group with 4 updates (#1909)
• Additional commits viewable in compare view

Updates ruff from 0.8.1 to 0.8.4

Release notes

Sourced from ruff's releases.

0.8.4

Release Notes

Preview features

• [airflow] Extend AIR302 with additional functions and classes (#15015)
• [airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)
• [flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)
• [perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)
• [perflint] Simplify finding the loop target in PERF401 (#15025)
• [pylint] Preserve original value format (PLR6104) (#14978)
• [ruff] Avoid false positives for RUF027 for typing context bindings (#15037)
• [ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

• [flake8-bandit] Check S105 for annotated assignment (#15059)
• [flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)
• [pydocstyle] Skip leading whitespace for D403 (#14963)
• [ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

• [perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

• Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

Contributors

• @​AlexWaygood
• @​Daverball
• @​DimitriPapadopoulos
• @​InSyncWithFoo
• @​Lee-W
• @​MichaReiser
• @​TheBits
• @​cake-monotone
• @​carljm
• @​dcreager
• @​dhruvmanila
• @​dylwil3
• @​github-actions
• @​kiran-4444
• @​krishnan-chandra
• @​rchen152
• @​renovate
• @​sharkdp
• @​tarasmatsyk
• @​w0nder1ng

... (truncated)

Changelog

Sourced from ruff's changelog.

0.8.4

Preview features

• [airflow] Extend AIR302 with additional functions and classes (#15015)
• [airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)
• [flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)
• [perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)
• [perflint] Simplify finding the loop target in PERF401 (#15025)
• [pylint] Preserve original value format (PLR6104) (#14978)
• [ruff] Avoid false positives for RUF027 for typing context bindings (#15037)
• [ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

• [flake8-bandit] Check S105 for annotated assignment (#15059)
• [flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)
• [pydocstyle] Skip leading whitespace for D403 (#14963)
• [ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

• [perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

• Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

0.8.3

Preview features

• Fix fstring formatting removing overlong implicit concatenated string in expression part (#14811)
• [airflow] Add fix to remove deprecated keyword arguments (AIR302) (#14887)
• [airflow]: Extend rule to include deprecated names for Airflow 3.0 (AIR302) (#14765 and #14804)
• [flake8-bugbear] Improve error messages for except* (B025, B029, B030, B904) (#14815)
• [flake8-bugbear] itertools.batched() without explicit strict (B911) (#14408)
• [flake8-use-pathlib] Dotless suffix passed to Path.with_suffix() (PTH210) (#14779)
• [pylint] Include parentheses and multiple comparators in check for boolean-chained-comparison (PLR1716) (#14781)
• [ruff] Do not simplify round() calls (RUF046) (#14832)
• [ruff] Don't emit used-dummy-variable on function parameters (RUF052) (#14818)
• [ruff] Implement if-key-in-dict-del (RUF051) (#14553)
• [ruff] Mark autofix for RUF052 as always unsafe (#14824)
• [ruff] Teach autofix for used-dummy-variable about TypeVars etc. (RUF052) (#14819)

Rule changes

• [flake8-bugbear] Offer unsafe autofix for no-explicit-stacklevel (B028) (#14829)
• [flake8-pyi] Skip all type definitions in string-or-bytes-too-long (PYI053) (#14797)
• [pyupgrade] Do not report when a UTF-8 comment is followed by a non-UTF-8 one (UP009) (#14728)

... (truncated)

Commits

• 3bb0dac Bump version to 0.8.4 (#15064)
• 40cba5d [red-knot] Cleanup various todo_type!() messages (#15063)
• 596d80c [perflint] Parenthesize walrus expressions in autofix for `manual-list-comp...
• d8b9a36 Disable actionlint hook by default when running pre-commit locally (#15061)
• 85e71ba [flake8-bandit] Check S105 for annotated assignment (#15059)
• 2802cbd Don't special-case class instances in unary expression inference (#15045)
• ed2bce6 [red-knot] Report invalid exceptions (#15042)
• f0012df Fix typos in RUF043.py (#15044)
• 0fc4e8f Introduce InferContext (#14956)
• ac81c72 [ruff] Ambiguous pattern passed to pytest.raises() (RUF043) (#14966)
• Additional commits viewable in compare view

Updates pytest from 8.3.3 to 8.3.4

Release notes

Sourced from pytest's releases.

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

• #12592: Fixed KeyError{.interpreted-text role="class"} crash when using --import-mode=importlib in a directory layout where a directory contains a child directory with the same name.

• #12818: Assertion rewriting now preserves the source ranges of the original instructions, making it play well with tools that deal with the AST, like executing.

• #12849: ANSI escape codes for colored output now handled correctly in pytest.fail{.interpreted-text role="func"} with [pytrace=False]{.title-ref}.

• #9353: pytest.approx{.interpreted-text role="func"} now uses strict equality when given booleans.

Improved documentation

• #10558: Fix ambiguous docstring of pytest.Config.getoption{.interpreted-text role="func"}.

• #10829: Improve documentation on the current handling of the --basetemp option and its lack of retention functionality (temporary directory location and retention{.interpreted-text role="ref"}).

• #12866: Improved cross-references concerning the recwarn{.interpreted-text role="fixture"} fixture.

• #12966: Clarify filterwarnings{.interpreted-text role="ref"} docs on filter precedence/order when using multiple @pytest.mark.filterwarnings <pytest.mark.filterwarnings ref>{.interpreted-text role="ref"} marks.

Contributor-facing changes

• #12497: Fixed two failing pdb-related tests on Python 3.13.

Commits

• 53f8b4e Update pypa/gh-action-pypi-publish to v1.12.2
• 98dff36 Prepare release version 8.3.4
• 1b474e2 approx: use exact comparison for bool (#13013)
• b541721 docs: Fix wrong statement about sys.modules with importlib import mode (#1298...
• 16cb87b pytest.fail: fix ANSI escape codes for colored output (#12959) (#12990)
• be6bc81 Issue #12966 Clarify filterwarnings docs on precedence when using multiple ma...
• 7aeb72b Improve docs on basetemp and retention (#12912) (#12928)
• c875841 Merge pull request #12917 from pytest-dev/patchback/backports/8.3.x/ded1f44e5...
• 6502816 Merge pull request #12913 from jakkdl/dontfailonbadpath
• 52135b0 Merge pull request #12885 from The-Compiler/pdb-py311 (#12887)
• Additional commits viewable in compare view

Updates mypy from 1.13.0 to 1.14.1

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Drop Support for Python 3.8

Mypy no longer supports running with Python 3.8, which has reached end-of-life. When running mypy with Python 3.9+, it is still possible to type check code that needs to support Python 3.8 with the --python-version 3.8 argument. Support for this will be dropped in the first half of 2025!

Contributed by Marc Mueller (PR 17492).

Mypyc accelerated mypy wheels for aarch64

Mypy can compile itself to C extension modules using mypyc. This makes mypy 3-5x faster than if mypy is interpreted with pure Python. We now build and upload mypyc accelerated mypy wheels for manylinux_aarch64 to PyPI, making it easy for users on such platforms to realise this speedup.

Contributed by Christian Bundy (PR mypy_mypyc-wheels#76)

--strict-bytes

By default, mypy treats an annotation of bytes as permitting bytearray and memoryview. PEP 688 specified the removal of this special case. Use this flag to disable this behavior. --strict-bytes will be enabled by default in mypy 2.0.

Contributed by Ali Hamdan (PR 18137) and Shantanu Jain (PR 13952).

Improvements to partial type handling in loops

This change results in mypy better modelling control flow within loops and hence detecting several issues it previously did not detect. In some cases, this change may require use of an additional explicit annotation of a variable.

Contributed by Christoph Tyralla (PR 18180).

(Speaking of partial types, another reminder that mypy plans on enabling --local-partial-types by default in mypy 2.0).

Mypy 1.14

We’ve just uploaded mypy 1.14 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

... (truncated)

Commits

• 251d12f Remove +dev from version for release 1.14.1
• 667e5f7 Revert "Remove redundant inheritances from Iterator in builtins" (#18324)
• 67f673a Fix enum truthiness for StrEnum (#18379)
• 3755abb Fix getargs argument passing (#18350)
• b9fa8ee Update version to 1.14.1+dev for point release
• 6f37859 Remove +dev from version for release 1.14
• 5a6a754 Minor updates to 1.14 changelog (#18310)
• 9772d48 Update changelog for release 1.14 (#18301)
• 92473c8 Warn about --follow-untyped-imports (#18249)
• e6ce8be PEP 702 (@​deprecated): descriptors (#18090)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions