Bump coverage from 7.14.1 to 7.14.2

[dependabot]

Bumps coverage from 7.14.1 to 7.14.2.

Changelog

Sourced from coverage's changelog.

Version 7.14.2 — 2026-06-20

• Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197_.

• Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd <pull 2193_>.

• Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don't really make sense, so now we search for a usable one instead. Fixes issue 2187_.

• Following the advice of cibuildwheel <no-13t_>_, we no longer distribute wheels for Python 3.13 free-threaded.

.. _issue 2187: coveragepy/coveragepy#2187 .. _issue 2192: coveragepy/coveragepy#2192 .. _pull 2193: coveragepy/coveragepy#2193 .. _issue 2197: coveragepy/coveragepy#2197 .. _no-13t: https://py-free-threading.github.io/ci/#building-free-threaded-wheels-with-cibuildwheel

.. _changes_7-14-1:

Commits

• 153f932 docs: sample HTML for 7.14.2
• 311bc67 docs: prep for 7.14.2
• 7f314be docs: thanks, Matthew Lloyd #2193
• f960696 Fix: close SQLite connections from terminated threads (#2192) (#2193)
• 2429615 docs: fix a changelog entry
• ced7f8a build: cibuildwheel 4.0.0 no longer has this enable option
• 30a567c chore: make upgrade
• 27c11f1 fix: write messages to stderr. #2197
• bdbe01f chore: bump the action-dependencies group with 3 updates (#2191)
• dc2fd3b chore: bump the action-dependencies group with 2 updates (#2188)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

Confirmed: this is a Dependabot-style dependency bump PR, consistent with prior similar commits (e.g., the pytest 9.1.0→9.1.1 bump) which also didn't touch CHANGELOG.md. No .claude/CLAUDE.md file exists in this repo (only settings.json and commands/), so that checklist item is not applicable. No .lic files are present in this diff.

PR Code Review

Summary: This is a trivial, automated dependency version bump (coverage 7.14.1 → 7.14.2 in development-requirements.txt), consistent with the repo's established Dependabot pattern.

Code Quality

• ✅ Style conventions — Single-line version bump, alphabetically ordered list preserved, consistent with surrounding entries (development-requirements.txt:4).
• ✅ No commented-out code
• ✅ Meaningful variable names — N/A, no code.
• ✅ DRY principle — N/A.
• ✅ Defects — No logic changes; coverage 7.14.2 is a patch release. No bugs, crashes, race conditions, or vulnerabilities introduced.
• ✅ .claude/CLAUDE.md review — No .claude/CLAUDE.md exists in this repo (only .claude/settings.json and .claude/commands/), so this item is not applicable.

Testing

• ✅ N/A — Dev-tooling dependency bump only; no new functions, endpoints, or logic requiring new tests.
• ⚠️ Not verified in this review: whether the CI pipeline actually passes with coverage==7.14.2 (dev dependency, low risk, but standard practice for dependency-bump PRs is to confirm CI is green before merge).

Documentation

• ✅ CHANGELOG.md — Not updated, but this matches established precedent: the recent pytest 9.1.0→9.1.1 bump (commit 9022913) and other dependency-bump commits in this repo's history also didn't touch CHANGELOG.md. No action needed.
• ✅ README/API docs — N/A, no user-facing changes.
• ✅ No markdown files changed in this diff.

Security

• ✅ No hardcoded credentials
• ✅ Input validation — N/A, no code logic.
• ✅ Error handling — N/A.
• ✅ No sensitive data in logs — N/A.
• ✅ No .lic files in this diff, and no strings matching AQAAAD present.

Verdict

Approve. This is a low-risk, routine dev-dependency patch bump with no functional impact. No issues found.

Automated code review analyzing defects and coding standards

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[dependabot]

Superseded by #162.