Bump coverage from 7.14.1 to 7.14.2

[dependabot]

Bumps coverage from 7.14.1 to 7.14.2.

Changelog

Sourced from coverage's changelog.

Version 7.14.2 — 2026-06-20

• Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197_.

• Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd <pull 2193_>.

• Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don't really make sense, so now we search for a usable one instead. Fixes issue 2187_.

• Following the advice of cibuildwheel <no-13t_>_, we no longer distribute wheels for Python 3.13 free-threaded.

.. _issue 2187: coveragepy/coveragepy#2187 .. _issue 2192: coveragepy/coveragepy#2192 .. _pull 2193: coveragepy/coveragepy#2193 .. _issue 2197: coveragepy/coveragepy#2197 .. _no-13t: https://py-free-threading.github.io/ci/#building-free-threaded-wheels-with-cibuildwheel

.. _changes_7-14-1:

Commits

• 153f932 docs: sample HTML for 7.14.2
• 311bc67 docs: prep for 7.14.2
• 7f314be docs: thanks, Matthew Lloyd #2193
• f960696 Fix: close SQLite connections from terminated threads (#2192) (#2193)
• 2429615 docs: fix a changelog entry
• ced7f8a build: cibuildwheel 4.0.0 no longer has this enable option
• 30a567c chore: make upgrade
• 27c11f1 fix: write messages to stderr. #2197
• bdbe01f chore: bump the action-dependencies group with 3 updates (#2191)
• dc2fd3b chore: bump the action-dependencies group with 2 updates (#2188)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Code Review

This is an automated Dependabot dependency bump (coverage 7.14.1 → 7.14.2 for python_version > '3.11'), touching only pyproject.toml in two matching locations (development and test extras).

Code Quality

• ✅ Style/formatting: Change is a single-line version bump in TOML, consistent with existing formatting.
• ✅ No commented-out code.
• ✅ Meaningful names: N/A (dependency spec only).
• ✅ DRY: Both development (pyproject.toml:39) and test (pyproject.toml:88) extras were updated consistently — no drift introduced between the two dependency lists.
• ✅ Defects: No logic changes. This is a patch-level bump (7.14.1 → 7.14.2) of the coverage package, low risk.
• ✅ CLAUDE.md review: No changes to .claude/CLAUDE.md in this diff; existing file is already environment-agnostic (documents Senzing paths as facts about the platform, not local machine specifics).

Testing

• N/A — dependency version bump only, no new functions/endpoints. CI (make test, make lint) should be relied upon to confirm compatibility with the new coverage version.

Documentation

• ⚠️ CHANGELOG.md not updated: CHANGELOG.md exists in the repo but this diff doesn't touch it. For routine automated dependency bumps this is typically acceptable (matches pattern of prior bump commits like cdc032e, 004f85f in git log, which also didn't touch CHANGELOG.md), so not flagging as blocking.
• ✅ No markdown files changed in this diff.

Security

• ✅ No hardcoded credentials.
• ✅ No input validation concerns (not applicable to a version pin).
• ✅ No error handling changes.
• ✅ No sensitive data.
• ✅ No .lic files in this diff — checked explicitly; only pyproject.toml is modified. (Note: an unrelated prior commit 421b9d4 in the log did touch g2.lic, but that's not part of this PR's diff.)

Verdict

✅ Approve. This is a low-risk, mechanical patch-version bump applied consistently to both dependency extras. No issues found.

Automated code review analyzing defects and coding standards