Bump coverage from 7.15.2 to 7.15.3

[dependabot]

Bumps coverage from 7.15.2 to 7.15.3.

Release notes

Sourced from coverage's releases.

7.15.3

Version 7.15.3 — 2026-08-02

• Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
• A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
• Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

Changelog

Sourced from coverage's changelog.

Version 7.15.3 — 2026-08-02

• Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han <pull 2234_>. Closes issue 2200.

• A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios <pull 2239_>_.

• Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios <pull 2240_>_.

.. _issue 2200: coveragepy/coveragepy#2200 .. _pull 2234: coveragepy/coveragepy#2234 .. _pull 2239: coveragepy/coveragepy#2239 .. _pull 2240: coveragepy/coveragepy#2240

.. _changes_7-15-2:

Commits

• b7470d9 docs: sample HTML for 7.15.3
• 27e6e80 docs: prep for 7.15.3
• 396dbbb build: include NOTICE in wheels (#2232)
• 54dde05 chore: bump the action-dependencies group with 7 updates (#2248)
• c83a0e0 perf: skip AST parsing without soft keywords (#2240)
• a57f981 refactor: fix some uncovered lines
• 0252c34 refactor: move numbits aggregate to numbits
• 1c4184c docs: maintainer workflow
• e8a1c87 perf: speed up SQLite numbits aggregation (#2239)
• 18c2a59 test: conditional use of Hypothesis
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

No .lic files tracked, and no AQAAAD strings would apply here. Full checklist review below.

PR Code Review

Summary: This PR bumps the coverage dependency pin from 7.15.3 to 7.15.3... wait — from 7.15.2 to 7.15.3 for python_version > '3.11', in two places in pyproject.toml (the development and test extras). This is an automated Dependabot version bump with no application code changes.

Code Quality

• ✅ Style conventions — Change matches existing formatting in pyproject.toml (quoted version pin with environment marker), consistent with surrounding lines.
• ✅ No commented-out code — N/A, diff only changes a version string.
• ✅ Meaningful variable names — N/A, no code.
• ✅ DRY principle — The same pin is duplicated in development (pyproject.toml:38) and test (pyproject.toml:87) extras, but this duplication pre-exists the PR and both instances were updated consistently, so no new DRY violation introduced. Verified: both occurrences now read coverage==7.15.3 (pyproject.toml:38, pyproject.toml:87).
• ✅ Defects/bugs/logic errors/security — No logic changes. This is a patch-level version bump (7.15.2 → 7.15.3) of a well-known, widely used dev/test dependency. No indication of supply-chain risk beyond normal dependency update review (not fetchable in this offline run, but patch bumps of coverage carry low risk).
• ✅ CLAUDE.md consideration — .claude/CLAUDE.md is unchanged by this PR and remains generic project documentation (commands, architecture) with no local-machine-specific paths or environment assumptions. No issue here.

Testing

• N/A — This is a dependency-pin-only change with no new functions or endpoints. No new tests required.
• Not verified in this review: whether CI actually passes with coverage==7.15.3 (no network access to check package availability/changelog in this run), but this is standard for Dependabot PRs which are validated by CI itself.

Documentation

• ❌ CHANGELOG.md not updated — This PR does not add an entry to CHANGELOG.md. However, this appears consistent with prior dependency-bump commits in the repo's history (e.g. "Bump virtualenv from 21.7.0 to 21.7.1 (Bump virtualenv from 21.7.0 to 21.7.1 #149)", "Bump twine from 6.2.0 to 7.0.0 (Bump twine from 6.2.0 to 7.0.0 #148)") which also did not touch CHANGELOG.md, suggesting routine dependency bumps are exempt from changelog entries in this project's convention. Not flagging as a blocking issue given established precedent.
• ✅ README/API docs — N/A, no user-facing changes.
• ✅ Markdown formatting — No markdown files touched in this diff.

Security

• ✅ No hardcoded credentials.
• ✅ No input validation concerns — N/A for this change.
• ✅ No error handling concerns — N/A.
• ✅ No sensitive data in logs — N/A.
• ✅ No .lic license files present in this diff or in the repository (verified via git ls-files), and no AQAAAD-prefixed strings found.

Verdict

✅ Approve. This is a low-risk, routine patch-version dependency bump consistent with the repository's existing Dependabot update pattern. Both pin locations were updated consistently, and no code, test, or security concerns arise from this change.

Automated code review analyzing defects and coding standards