Update Poetry dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
coverage	7.15.4 → 7.16.1
debugpy (source)	1.8.21 → 1.8.22
responses (changelog)	0.26.2 → 0.26.3
types-requests (changelog)	2.33.0.20260712 → 2.33.0.20260906

---

Release Notes

coveragepy/coveragepy (coverage)

v7.16.1

Compare Source

• Fix: when the body of an irrefutable case (like case _:) is entirely
  excluded, the case line is now excluded too, just as an excluded
  else: body removes the else: line. Previously the case line was
  left behind and reported as missing. Closes issue 1563_ with pull 2269_.

• Fix: using :meth:.CoverageData.update twice on an in-memory database would
  fail, as described in issue 2279_. This is now fixed.

.. _issue 1563: #​1563
.. _pull 2269: #​2269
.. _issue 2279: #​2279

.. _changes_7-16-0:

v7.16.0

Compare Source

• When combining files, now path separator slashes will automatically be
  converted to the local file system style. This makes it less necessary to
  define [paths] configuration to combine data across operating systems.
  Fixes issue 2266_.

• The :meth:.Coverage.switch_context method now returns the previous context.

• Fix: previously, a [paths] pattern would be replaced everywhere in a file
  path when it was only meant to be replaced once, in the leading portion of
  the path. This is now fixed, in pull 2268_.

• Fixes to validation of options and configuration settings:

  • Negative precision settings now always cause useful error messages (pull 2261_).

  • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing "Couldn't use data file ...:
    user-defined function raised exception" error. Now it raises a proper
    configuration error naming the bad regex, like other regex settings do
    (pull 2262_).

  • Non-string values in TOML configuration settings now produce a helpful
    error message instead of a traceback. This affects list settings whose
    elements aren't strings (like omit, exclude_lines, or a [paths]
    entry), file settings like data_file, and any wrong-typed value in the
    [paths] section (pull 2263_).

  • coverage run refuses run-affecting command-line options like
    --branch alongside --concurrency=multiprocessing, since they can't
    reach the subprocesses. The check only recognized multiprocessing as
    the entire option value, so --concurrency=multiprocessing,thread
    slipped through and failed later with "Can't combine statement coverage
    data with branch data". Each named concurrency library is now properly
    considered (pull 2270_).

• Fix: coverage annotate -d DIR raised an AssertionError if any
  measured file had an extension other than .py, such as a .pyw file on
  Windows. The original extension is now restored on the annotated copy (pull 2265_).

.. _pull 2261: #​2261
.. _pull 2262: #​2262
.. _pull 2263: #​2263
.. _pull 2265: #​2265
.. _issue 2266: #​2266
.. _pull 2268: #​2268
.. _pull 2270: #​2270

.. _changes_7-15-4:

microsoft/debugpy (debugpy)

v1.8.22: debugpy v1.8.22

Compare Source

Fixes

• Fix invalid type annotation in test_pydev_monkey comprehension by @​pdepetro in #​2033
• Fix PEP 768 code injection SyntaxError when temp path contains backslashes by @​rchiodo with @​Copilot in #​2038
• Fix race between adapter connection publication and session attachment by @​aperez in #​2049
• Fix debugger hang when expanding objects with blocking property getters (#​2053) by @​rchiodo in #​2055
• Fix duplicate stopped event when two threads hit a breakpoint at once by @​aperez in #​2056
• Avoid exceptions in environment diagnostics by @​rchiodo in #​2059
• Fix thread identity when the first traced call is another thread's is_alive() by @​aperez in #​2061
• Respect isolated mode when patching sys.path by @​karandhaodiyal28-hash in #​2050

Enhancements

• Add trigger_exception_handler() for post-mortem debugging of caught exceptions by @​nshepperd in #​1996
• Add lldb attach-to-PID option for debugpy on Linux by @​pdepetro in #​2052
• Populate hitBreakpointIds in the DAP stopped event by @​aperez in #​2060
• Return the endpoint from listen() with the in-process adapter by @​karandhaodiyal28-hash in #​2051

Infrastructure work

• Add Dependabot configuration for pip and GitHub Actions by @​rchiodo in #​2041
• Update vendored pydevd 3.4.1 -> 3.5.0 (maintenance refresh) by @​rchiodo in #​2044
• Pin secure test dependency floors and drop EOL Python 3.9/3.8 by @​rchiodo in #​2045
• Add more typing to debugpy and switch to 'standard' type checking mode by @​rchiodo in #​1637
• Add debugpy release agent by @​rchiodo in #​2062
• Pin GitHub Actions to full-length commit SHAs by @​danfiedler-msft in #​2063
• Add python 3.15 to tests by @​finnagin in #​2069

Thanks to @​pdepetro, @​rchiodo, @​nshepperd, @​aperez, @​karandhaodiyal28-hash, @​danfiedler-msft, and @​finnagin for the commits.

Full Changelog: microsoft/debugpy@v1.8.21...v1.8.22

getsentry/responses (responses)

v0.26.3

Compare Source

• Added a keep_headers argument to _recorder.record and
  Recorder.dump_to_file to preserve named headers (for example Date)
  that are otherwise stripped as verbose defaults, so a signed response can be
  recorded and later verified. Matching is case-insensitive. See #​763
• Fixed the element type exposed by CallList so static type checkers infer
  Call values when iterating, indexing, or filtering recorded calls. See #​722
• Fixed query_string_matcher (and the query matching auto-applied to a
  registered URL's own query string) discarding blank-valued query params
  (b=), which caused requests with an extra or missing blank param to
  match incorrectly. See #​804
• Fixed fragment_identifier_matcher treating opaque fragments (those without
  =, e.g. /users/5) as always equal, so a required fragment matched a
  different one or none at all. See #​806

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqube-next]

Quality Gate passed for 'Python Scanner'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[sonarqube-next]

Quality Gate passed for 'Python Scanner'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube