Update all patch versions (master) (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
SQLAlchemy (changelog)	2.0.35 -> 2.0.36
coverage	7.6.1 -> 7.6.4
objgraph (source)	3.6.1 -> 3.6.2
poetry (source, changelog)	==1.8.3 -> ==1.8.4
prospector (source)	1.12.0 -> 1.12.1
psycopg2 (source, changelog)	2.9.9 -> 2.9.10
types-requests (changelog)	2.32.0.20240914 -> 2.32.0.20241016
waitress (changelog)	3.0.0 -> 3.0.1

---

Release Notes

nedbat/coveragepy (coverage)

v7.6.4

Compare Source

• fix: multi-line with statements could cause contained branches to be
  incorrectly marked as missing (issue 1880_). This is now fixed.

.. _issue 1880:https://github.com/nedbat/coveragepy/issues/18800

.. _changes_7-6-3:

v7.6.3

Compare Source

• Fix: nested context managers could incorrectly be analyzed to flag a missing
  branch on the last context manager, as described in issue 1876_. This is
  now fixed.

• Fix: the missing branch message about not exiting a module had an extra
  "didn't," as described in issue 1873_. This is now fixed.

.. _issue 1873:https://github.com/nedbat/coveragepy/issues/18733
.. _issue 1876https://github.com/nedbat/coveragepy/issues/187676

.. _changes_7-6-2:

v7.6.2

Compare Source

• Dropped support for Python 3.8 and PyPy 3.8.

• Fix: a final wildcard match/case clause assigning to a name (case _ as value) was incorrectly marked as a missing branch. This is now fixed,
  closing issue 1860_.

• Fewer things are considered branches now. Lambdas, comprehensions, and
  generator expressions are no longer marked as missing branches if they don't
  complete execution. Closes issue 1852_.

• Fix: the HTML report didn't properly show multi-line f-strings that end with
  a backslash continuation. This is now fixed, closing issue 1836, thanks
  to LiuYinCarl and Marco Ricci <pull 1838_>.

• Fix: the LCOV report now has correct line numbers (fixing issue 1846) and
  better branch descriptions for BRDA records (fixing issue 1850). There
  are other changes to lcov also, including a new configuration option
  :ref:line_checksums <config_lcov_line_checksums> to control whether line
  checksums are included in the lcov report. The default is false. To keep
  checksums set it to true. All this work is thanks to Zack Weinberg
  (pull 1849_ and pull 1851_).

• Fixed the docs for multi-line regex exclusions, closing issue 1863_.

• Fixed a potential crash in the C tracer, closing issue 1835, thanks to
  Jan Kühle <pull 1843_>.

.. _issue 1835:https://github.com/nedbat/coveragepy/issues/18355
.. _issue 1836https://github.com/nedbat/coveragepy/issues/183636
.. _pull 183https://github.com/nedbat/coveragepy/pull/1838838
.. _pull 18https://github.com/nedbat/coveragepy/pull/18431843
.. _issue 1https://github.com/nedbat/coveragepy/issues/1846/1846
.. _pull https://github.com/nedbat/coveragepy/pull/1849l/1849
.. _issuehttps://github.com/nedbat/coveragepy/issues/1850es/1850
.. _pulhttps://github.com/nedbat/coveragepy/pull/1851ull/1851
.. _isshttps://github.com/nedbat/coveragepy/issues/1852sues/1852
.. _ishttps://github.com/nedbat/coveragepy/issues/1860ssues/1860
.. _ihttps://github.com/nedbat/coveragepy/issues/1863issues/1863

.. _changes_7-6-1:

mgedmin/objgraph (objgraph)

v3.6.2

Compare Source

• Add support for Python 3.13.

python-poetry/poetry (poetry)

v1.8.4

Compare Source

Added

• Add official support for Python 3.13 (#​9523).

Changed

• Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#​9757).

poetry-core (1.9.1)

• Add 3.13 to the list of available Python versions (#​747).

PyCQA/prospector (prospector)

v1.12.1

Compare Source

Fix for better support of Python version 3.12 (make it to work with Django)

See more details in related milestone.

Pylons/waitress (waitress)

v3.0.1

Compare Source

Security

- Fix a bug that would lead to Waitress busy looping on select() on a half-open
  socket due to a race condition that existed when creating a new HTTPChannel.
  See https://github.com/Pylons/waitress/pull/435,
  https://github.com/Pylons/waitress/issues/418 and
  https://github.com/Pylons/waitress/security/advisories/GHSA-3f84-rpwh-47g6

  With thanks to Dylan Jay and Dieter Maurer for their extensive debugging and
  helping track this down.

- No longer strip the header values before passing them to the WSGI environ.
  See https://github.com/Pylons/waitress/pull/434 and
  https://github.com/Pylons/waitress/issues/432

- Fix a race condition in Waitress when `channel_request_lookahead` is enabled
  that could lead to HTTP request smuggling.

  See https://github.com/Pylons/waitress/security/advisories/GHSA-9298-4cf8-g4wj

---

Configuration

📅 Schedule: Branch creation - "after 5pm on the first day of the month" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.