Bump coverage from 7.15.3 to 7.15.4

[dependabot]

Bumps coverage from 7.15.3 to 7.15.4.

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
• Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

• Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Commits

• 4c0e7ff docs: sample HTML for 7.15.4
• db4cc32 docs: prep for 7.15.4
• c33085c style: start gradual move to ruff 0.16
• 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
• b64d53d build: make 3.15 wheels
• 53792ab build: show the python version for kits
• f6b03c7 chore: make upgrade_one package=cibuildwheel
• d9b660a chore: make upgrade
• b128a31 docs: oops, move this entry to the correct place
• a7a2c15 fix: escape filename urls in html report href attributes (#2227)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This PR bumps the coverage package pin from 7.15.3 to 7.15.4 in two places in pyproject.toml (the development and test extras), for python_version > '3.11'. This is a dependency-bot style version bump with no functional code changes.

Code Quality

• ✅ Style conventions — Change is consistent with existing formatting (quoted version pins, matching syntax for the python_version marker).
• ✅ No commented-out code — N/A, no code touched.
• ✅ Meaningful variable names — N/A.
• ✅ DRY principle — The same version bump is duplicated in two places (development extra, line 37; test extra, line 67), but this mirrors the pre-existing duplication pattern for the python_version <= '3.11' pin as well, so it's consistent with the existing convention rather than a new violation.
• ✅ Defects — Both occurrences of coverage==7.15.3 were updated consistently to 7.15.4; no mismatched/partial bump. coverage 7.15.4 is a patch release, low risk.
• ✅ CLAUDE.md consideration — Not modified by this PR; no issue introduced.

Testing

• ✅ N/A — Dependency version bump only, no new functions/endpoints.

Documentation

• ✅ N/A — No README/API doc/CHANGELOG changes expected for a patch-level dev-dependency bump. No markdown files touched.

Security

• ✅ No hardcoded credentials
• ✅ Input validation — N/A
• ✅ Error handling — N/A
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Verdict

✅ Approve. This is a clean, minimal, low-risk dependency bump consistent with the repository's existing versioning conventions. No issues found.

Automated code review analyzing defects and coding standards

[senzingdevops]

Automated: approving this pull request because it includes a patch update