Skip to content

build(deps): Bump MishaKav/pytest-coverage-comment from 1.12.3 to 1.12.5 - #164

Merged
ZPascal merged 1 commit into
mainfrom
dependabot/github_actions/MishaKav/pytest-coverage-comment-1.12.5
Oct 28, 2026
Merged

ZPascal merged 1 commit into
mainfrom
dependabot/github_actions/MishaKav/pytest-coverage-comment-1.12.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Bumps MishaKav/pytest-coverage-comment from 1.12.3 to 1.12.5.

Release notes

Sourced from MishaKav/pytest-coverage-comment's releases.

v1.12.5

What's Changed

  • escape report values in the coverage table and keep them out of markdown parsing, so a crafted coverage report can't inject HTML, markdown, links or a fake badge into the comment
  • url-encode file paths in coverage table links, don't link paths with .., support windows \ paths, and strip the workspace prefix from missing-line links
  • fix a crash when a coverage report has a top-level folder named like an Object member (e.g. constructor)

Full Changelog: MishaKav/pytest-coverage-comment@v1.12.4...v1.12.5

v1.12.4

What's Changed

  • bump dev dependencies: vitest 5.0.5, @vitest/coverage-v8 5.0.5, @types/node 26.6.5, eslint 10.13.0, typescript-eslint 8.72.0, prettier 3.9.10, vite 8.3.5
  • bump undici from 6.29.0 to 6.29.1 (fixes two high severity vulnerabilities)

Full Changelog: MishaKav/pytest-coverage-comment@v1.12.3...v1.12.4

Changelog

Sourced from MishaKav/pytest-coverage-comment's changelog.

Pytest Coverage Comment 1.12.5

Release Date: 2026-10-24

Changes

  • escape report values in the coverage table and keep them out of markdown parsing, so a crafted coverage report can't inject HTML, markdown, links or a fake badge into the comment
  • url-encode file paths in coverage table links, don't link paths with .., support windows \ paths, and strip the workspace prefix from missing-line links
  • fix a crash when a coverage report has a top-level folder named like an Object member (e.g. constructor)

Pytest Coverage Comment 1.12.4

Release Date: 2026-10-24

Changes

  • bump dev dependencies: vitest 5.0.5, @vitest/coverage-v8 5.0.5, @types/node 26.6.5, eslint 10.13.0, typescript-eslint 8.72.0, prettier 3.9.10, vite 8.3.5
  • bump undici from 6.29.0 to 6.29.1 (fixes two high severity vulnerabilities)
Commits
  • 93af7d8 fix: harden coverage table links (v1.12.5) (#318)
  • 9984fd6 refactor: share the file link and parent segment helpers (#319)
  • dddcc48 fix: escape report values in the coverage table (#316)
  • 1c5817d refactor: move html escaping and path encoding helpers to utils (#315)
  • e636ecf chore(deps): bump dev dependencies and undici (v1.12.4) (#314)
  • c74c83c Bump vite from 8.3.2 to 8.3.5 (#311)
  • 947ed4e chore: add OSS Scanner Dockerfile and threat model, security contact email (#...
  • c772f8e docs: refresh stale facts in CLAUDE.md (#310)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [MishaKav/pytest-coverage-comment](https://github.com/mishakav/pytest-coverage-comment) from 1.12.3 to 1.12.5.
- [Release notes](https://github.com/mishakav/pytest-coverage-comment/releases)
- [Changelog](https://github.com/MishaKav/pytest-coverage-comment/blob/main/CHANGELOG.md)
- [Commits](MishaKav/pytest-coverage-comment@v1.12.3...v1.12.5)

---
updated-dependencies:
- dependency-name: MishaKav/pytest-coverage-comment
  dependency-version: 1.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 28, 2026
@dependabot
dependabot Bot requested a review from ZPascal as a code owner October 28, 2026 02:22
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Oct 28, 2026
@github-actions

Copy link
Copy Markdown
Contributor
Coverage Report
FileStmtsMissBranchBrPartCover
grafana_api
   __init__.py0000100%
   admin.py1600620100%
   alerting.py31001260100%
   alerting_notifications.py910360100%
   alerting_provisioning.py2280920100%
   annotations.py1180700100%
   api.py1220600100%
   authentication.py310100100%
   correlations.py620240100%
   dashboard.py25401200100%
   datasource.py32301400100%
   external_group.py340120100%
   folder.py1510740100%
   legacy_alerting.py630280100%
   legacy_playlist.py550220100%
   library.py840400100%
   licensing.py26060100%
   model.py375080100%
   organisation.py1510600100%
   other_http.py640180100%
   playlist.py820380100%
   preferences.py530240100%
   query_history.py700300100%
   rbac.py38801880100%
   reporting.py1740760100%
   search.py14040100%
   service_account.py1150460100%
   short_url.py16040100%
   snapshot.py540220100%
   sso_settings.py610220100%
   team.py1380620100%
   user.py1590660100%
tests/unittests
   test_admin.py346000100%
   test_alerting.py559000100%
   test_alerting_notifications.py175000100%
   test_alerting_provisioning.py367000100%
   test_annotations.py135000100%
   test_api.py176000100%
   test_authentication.py60000100%
   test_correlations.py124000100%
   test_dashboard.py518000100%
   test_datasource.py670000100%
   test_external_group.py65000100%
   test_folder.py335000100%
   test_legacy_alerting.py89000100%
   test_legacy_playlist.py109000100%
   test_library.py156000100%
   test_licensing.py52000100%
   test_model.py36000100%
   test_organisation.py228000100%
   test_other_http.py103000100%
   test_playlist.py173000100%
   test_preferences.py95000100%
   test_query_history.py129000100%
   test_rbac.py678000100%
   test_reporting.py315000100%
   test_search.py25000100%
   test_service_account.py173000100%
   test_short_url.py25000100%
   test_snapshot.py107000100%
   test_sso_settings.py103000100%
   test_team.py287000100%
   test_user.py348000100%
TOTAL10787015900100%
Tests Skipped Failures Errors Time
1041 0 💤 0 ❌ 0 🔥 5.629s ⏱️

@ZPascal
ZPascal merged commit df2edd1 into main Oct 28, 2026
6 checks passed
@ZPascal
ZPascal deleted the dependabot/github_actions/MishaKav/pytest-coverage-comment-1.12.5 branch October 28, 2026 02:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant