Bump coverage from 7.15.3 to 7.15.4

[dependabot]

Bumps coverage from 7.15.3 to 7.15.4.

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
• Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

• Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Commits

• 4c0e7ff docs: sample HTML for 7.15.4
• db4cc32 docs: prep for 7.15.4
• c33085c style: start gradual move to ruff 0.16
• 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
• b64d53d build: make 3.15 wheels
• 53792ab build: show the python version for kits
• f6b03c7 chore: make upgrade_one package=cibuildwheel
• d9b660a chore: make upgrade
• b128a31 docs: oops, move this entry to the correct place
• a7a2c15 fix: escape filename urls in html report href attributes (#2227)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Code Review

This PR bumps the coverage package pin from 7.15.3 to 7.15.4 in two places in pyproject.toml (dependency groups development and test). This is a routine dependency version bump (likely automated, e.g. Dependabot).

Code Quality

• ✅ Follows existing style conventions (pinned version format matches surrounding lines)
• ✅ No commented-out code
• ✅ N/A — no variables introduced
• ✅ DRY — same pin appears in two dependency groups (development, test), consistent with existing pattern elsewhere in the file (e.g. pytest, pytest-cov pairs)
• ✅ No defects identified — this is a patch-level version bump (7.15.3 → 7.15.4) of a well-known, stable tool (coverage.py); low risk
• ✅ No .claude/CLAUDE.md changes in this diff

Testing

• ✅ N/A — dependency version bump, no new functions/endpoints
• N/A — Test coverage percentage not affected by this change itself, though ironically this changes the coverage tool version; no CI results available in the diff to confirm the bump doesn't break existing test/coverage tooling

Documentation

• ✅ N/A — no README/API/CHANGELOG changes expected for a patch dependency bump (though some teams do log dependency bumps in CHANGELOG.md — check repo convention; not required here)
• ✅ N/A — no markdown files touched in this diff

Security

• ✅ No hardcoded credentials
• ✅ N/A — no input validation logic touched
• ✅ N/A — no error handling touched
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff

Summary

No issues found. This is a minimal, low-risk patch version bump of the coverage dependency, consistently applied to both places it's pinned in pyproject.toml (pyproject.toml:38, pyproject.toml:87). Safe to merge assuming CI passes.

Automated code review analyzing defects and coding standards