coverage 7.15.0__tar.gz → 7.15.2__tar.gz

{coverage-7.15.0 → coverage-7.15.2}/.github/workflows/codeql-analysis.yml

@@ -55,7 +55,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+        uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -66,7 +66,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+        uses: github/codeql-action/autobuild@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -80,4 +80,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+        uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3

{coverage-7.15.0 → coverage-7.15.2}/.github/workflows/coverage.yml

@@ -45,7 +45,7 @@ jobs:
           persist-credentials: false
 
       - name: "Examine changed files"
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         id: filter
         with:
           filters: |
@@ -126,7 +126,7 @@ jobs:
           persist-credentials: false
 
       - name: "Set up Python"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "${{ matrix.python-version }}"
           allow-prereleases: true
@@ -187,7 +187,7 @@ jobs:
           persist-credentials: false
 
       - name: "Set up Python"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.10" # Minimum of PYVERSIONS
           # At a certain point, installing dependencies failed on pypy 3.9 and
@@ -230,6 +230,14 @@ jobs:
           path: htmlcov
           include-hidden-files: true
 
+      - name: "Upload other reports"
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: json_xml
+          path: |
+            coverage.xml
+            coverage.json
+
       - name: "Show text report"
         run: |
           set -xe

{coverage-7.15.0 → coverage-7.15.2}/.github/workflows/kit.yml

@@ -178,7 +178,7 @@ jobs:
 
       - name: "Install Python"
         if: ${{ matrix.arch != 'ppc64le' }}
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "${{ matrix.cipy }}"
           cache: pip
@@ -202,7 +202,7 @@ jobs:
 
       - name: "Set up QEMU"
         if: ${{ matrix.arch == 'riscv64' }}
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
 
       - name: "Build binary wheels"
         env:
@@ -239,7 +239,7 @@ jobs:
           persist-credentials: false
 
       - name: "Install Python"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.11" # PYVERSIONS: the kit-building version
           cache: pip

{coverage-7.15.0 → coverage-7.15.2}/.github/workflows/publish.yml

@@ -86,7 +86,7 @@ jobs:
           files=$(find dist/* 2>/dev/null | wc -l) && [ "$files" -eq "$EXPECTED" ] || exit 1
 
       - name: "Generate attestations"
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-path: "dist/*"
 
@@ -127,7 +127,7 @@ jobs:
           files=$(find dist/* 2>/dev/null | wc -l) && [ "$files" -eq "$EXPECTED" ] || exit 1
 
       - name: "Generate attestations"
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-path: "dist/*"
 

{coverage-7.15.0 → coverage-7.15.2}/.github/workflows/quality.yml

@@ -43,7 +43,7 @@ jobs:
           persist-credentials: false
 
       - name: "Examine changed files"
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         id: filter
         with:
           filters: |
@@ -79,7 +79,7 @@ jobs:
           persist-credentials: false
 
       - name: "Install Python"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.10" # Minimum of PYVERSIONS
           cache: pip
@@ -109,7 +109,7 @@ jobs:
           persist-credentials: false
 
       - name: "Install Python"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.10" # Minimum of PYVERSIONS
           cache: pip
@@ -144,7 +144,7 @@ jobs:
           git fetch origin main --depth=1
 
       - name: "Install Python"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.12" # Doc version from PYVERSIONS
           cache: pip

{coverage-7.15.0 → coverage-7.15.2}/.github/workflows/testsuite.yml

@@ -43,7 +43,7 @@ jobs:
           persist-credentials: false
 
       - name: "Examine changed files"
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         id: filter
         with:
           filters: |
@@ -121,7 +121,7 @@ jobs:
           persist-credentials: false
 
       - name: "Set up Python"
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "${{ matrix.python-version }}"
           allow-prereleases: true

{coverage-7.15.0 → coverage-7.15.2}/.pre-commit-config.yaml

@@ -16,7 +16,7 @@ repos:
         exclude: "stress_phystoken|\\.py,cover$"
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.18
+    rev: v0.15.20
     hooks:
       - id: ruff-format
 

{coverage-7.15.0 → coverage-7.15.2}/CHANGES.rst

@@ -22,6 +22,43 @@ upgrading your version of coverage.py.
 
 .. start-releases
 
+.. _changes_7-15-2:
+
+Version 7.15.2 — 2026-07-15
+---------------------------
+
+- Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically
+  increased memory use during reporting for large projects. Now we use a
+  different approach that is both faster and slimmer than 7.15.0. Fixes `issue
+  2229`_.
+
+.. _issue 2229:  https://github.com/coveragepy/coveragepy/issues/2229
+
+
+.. _changes_7-15-1:
+
+Version 7.15.1 — 2026-07-12
+---------------------------
+
+- Fix: in the HTML report with ``show_contexts`` enabled, a context label
+  containing ``</script>`` (for example a parametrized pytest node id) could
+  close the inline ``<script>`` element in a file page early, injecting markup.
+  Context labels are now fully escaped. Thanks, `Rajath Mohare <pull 2224_>`_.
+
+- A number of performance improvements thanks to Paul Kehrer, in pull requests
+  `2213 <pull 2213_>`_, `2214 <pull 2214_>`_, `2215 <pull 2215_>`_, `2216
+  <pull 2216_>`_, `2218 <pull 2218_>`_, `2220 <pull 2220_>`_, and `2221 <pull
+  2221_>`_.
+
+.. _pull 2213: https://github.com/coveragepy/coveragepy/pull/2213
+.. _pull 2214: https://github.com/coveragepy/coveragepy/pull/2214
+.. _pull 2215: https://github.com/coveragepy/coveragepy/pull/2215
+.. _pull 2216: https://github.com/coveragepy/coveragepy/pull/2216
+.. _pull 2218: https://github.com/coveragepy/coveragepy/pull/2218
+.. _pull 2220: https://github.com/coveragepy/coveragepy/pull/2220
+.. _pull 2221: https://github.com/coveragepy/coveragepy/pull/2221
+.. _pull 2224: https://github.com/coveragepy/coveragepy/pull/2224
+
 .. _changes_7-15-0:
 
 Version 7.15.0 — 2026-07-02

{coverage-7.15.0 → coverage-7.15.2}/CONTRIBUTORS.txt

@@ -206,12 +206,14 @@ Pablo Carballo
 Pankaj Pandey
 Pankhudi Jain
 Patrick Mezard
+Paul Kehrer
 Paul Timmins
 Pavel Tsialnou
 Peter Baughman
 Peter Ebden
 Peter Portante
 Phebe Polk
+Rajath Mohare
 Reya B
 Ricardo Newbery
 Robert Harris

{coverage-7.15.0 → coverage-7.15.2}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.4
 Name: coverage
-Version: 7.15.0
+Version: 7.15.2
 Summary: Code coverage measurement for Python
 Home-page: https://github.com/coveragepy/coveragepy
-Author: Ned Batchelder and 259 others
+Author: Ned Batchelder and 261 others
 Author-email: ned@nedbatchelder.com
 License: Apache-2.0
-Project-URL: Documentation, https://coverage.readthedocs.io/en/7.15.0
+Project-URL: Documentation, https://coverage.readthedocs.io/en/7.15.2
 Project-URL: Funding, https://tidelift.com/subscription/pkg/pypi-coverage?utm_source=pypi-coverage&utm_medium=referral&utm_campaign=pypi
 Project-URL: Issues, https://github.com/coveragepy/coveragepy/issues
 Project-URL: Mastodon, https://hachyderm.io/@coveragepy
@@ -83,7 +83,7 @@ Coverage.py runs on these versions of Python:
 Documentation is on `Read the Docs`_.  Code repository and issue tracker are on
 `GitHub`_.
 
-.. _Read the Docs: https://coverage.readthedocs.io/en/7.15.0/
+.. _Read the Docs: https://coverage.readthedocs.io/en/7.15.2/
 .. _GitHub: https://github.com/coveragepy/coveragepy
 
 
@@ -112,7 +112,7 @@ Getting Started
 Looking to run ``coverage`` on your test suite? See the `Quick Start section`_
 of the docs.
 
-.. _Quick Start section: https://coverage.readthedocs.io/en/7.15.0/#quick-start
+.. _Quick Start section: https://coverage.readthedocs.io/en/7.15.2/#quick-start
 
 
 Change history
@@ -120,7 +120,7 @@ Change history
 
 The complete history of changes is on the `change history page`_.
 
-.. _change history page: https://coverage.readthedocs.io/en/7.15.0/changes.html
+.. _change history page: https://coverage.readthedocs.io/en/7.15.2/changes.html
 
 
 Code of Conduct
@@ -139,7 +139,7 @@ Contributing
 Found a bug? Want to help improve the code or documentation? See the
 `Contributing section`_ of the docs.
 
-.. _Contributing section: https://coverage.readthedocs.io/en/7.15.0/contributing.html
+.. _Contributing section: https://coverage.readthedocs.io/en/7.15.2/contributing.html
 
 
 Security
@@ -167,7 +167,7 @@ Licensed under the `Apache 2.0 License`_.  For details, see `NOTICE.txt`_.
     :target: https://github.com/coveragepy/coveragepy/actions/workflows/quality.yml
     :alt: Quality check status
 .. |docs| image:: https://readthedocs.org/projects/coverage/badge/?version=latest&style=flat
-    :target: https://coverage.readthedocs.io/en/7.15.0/
+    :target: https://coverage.readthedocs.io/en/7.15.2/
     :alt: Documentation
 .. |kit| image:: https://img.shields.io/pypi/v/coverage
     :target: https://pypi.org/project/coverage/

coverage-7.15.2/coverage/bytecode.py

@@ -0,0 +1,208 @@
+# Licensed under the Apache License: http://www.apache.org/licenses/LICENSE-2.0
+# For details: https://github.com/coveragepy/coveragepy/blob/main/NOTICE.txt
+
+"""Bytecode analysis for coverage.py"""
+
+from __future__ import annotations
+
+import dis
+from collections.abc import Iterable, Mapping
+from types import CodeType
+
+from coverage.types import TArc, TLineNo, TOffset
+
+
+class ByteParser:
+    """Parse bytecode to understand the structure of code."""
+
+    def __init__(
+        self,
+        *,
+        code: CodeType | None = None,
+        text: str | None = None,
+        filename: str | None = None,
+    ) -> None:
+        if code is None:
+            assert text is not None
+            code = compile(text, filename or "<string>", "exec", dont_inherit=True)
+        self.code = code
+
+    def _child_parsers(self) -> Iterable[ByteParser]:
+        """Iterate over all the code objects nested within this one.
+
+        The iteration includes `self` as its first value.
+
+        We skip code objects named `__annotate__` since they are deferred
+        annotations that usually are never run.  If there are errors in the
+        annotations, they will be caught by type checkers or other tools that
+        use annotations.
+
+        """
+        return (ByteParser(code=c) for c in self.code_objects() if c.co_name != "__annotate__")
+
+    def code_objects(self) -> Iterable[CodeType]:
+        """Iterate over all the code objects in `code`."""
+        stack = [self.code]
+        while stack:
+            # We're going to return the code object on the stack, but first
+            # push its children for later returning.
+            code = stack.pop()
+            for c in code.co_consts:
+                if isinstance(c, CodeType):
+                    stack.append(c)
+            yield code
+
+    def _line_numbers(self) -> Iterable[TLineNo]:
+        """Yield the line numbers possible in this code object.
+
+        Uses co_lines() to produce a sequence: l0, l1, ...
+        """
+        for _, _, line in self.code.co_lines():
+            if line:
+                yield line
+
+    def find_statements(self) -> Iterable[TLineNo]:
+        """Find the statements in `self.code`.
+
+        Produce a sequence of line numbers that start statements.  Recurses
+        into all code objects reachable from `self.code`.
+
+        """
+        for bp in self._child_parsers():
+            # Get all of the lineno information from this code.
+            yield from bp._line_numbers()
+
+
+def bytes_to_lines(code: CodeType) -> dict[TOffset, TLineNo]:
+    """Make a dict mapping byte code offsets to line numbers."""
+    b2l = {}
+    for bstart, bend, lineno in code.co_lines():
+        if lineno is not None:
+            for boffset in range(bstart, bend, 2):
+                b2l[boffset] = lineno
+    return b2l
+
+
+def op_set(*op_names: str) -> set[int]:
+    """Make a set of opcodes from instruction names.
+
+    The names might not exist in this version of Python, skip those if not.
+    """
+    ops = {op for name in op_names if (op := dis.opmap.get(name))}
+    assert ops, f"At least one opcode must exist: {op_names}"
+    return ops
+
+
+# Opcodes that are unconditional jumps elsewhere.
+ALWAYS_JUMPS = op_set(
+    "JUMP_BACKWARD",
+    "JUMP_BACKWARD_NO_INTERRUPT",
+    "JUMP_FORWARD",
+)
+
+# Opcodes that exit from a function.
+RETURNS = op_set(
+    "RETURN_VALUE",
+    "RETURN_GENERATOR",
+)
+
+
+# CACHE doesn't exist in Python 3.10, but the branch resolver is only used
+# on 3.14+, so a placeholder value is fine.
+_CACHE = dis.opmap.get("CACHE", -1)
+_EXTENDED_ARG = dis.opmap["EXTENDED_ARG"]
+
+# All opcodes with a jump target.
+JUMPS = set(dis.hasjrel) | set(dis.hasjabs)
+
+# Opcodes that jump backwards.
+BACKWARD_JUMPS = {op for op in JUMPS if "JUMP_BACKWARD" in dis.opname[op]}
+
+
+class BranchArcResolver:
+    """Resolve branch events to line arcs, one (source, dest) pair at a time.
+
+    Branch events are one-shot (they are DISABLEd after firing), so each
+    (source offset, destination offset) pair is resolved at most a couple of
+    times per code object.  Resolving pairs on demand is much cheaper than
+    precomputing trails for every branch in the code object, most of which
+    never fire.  We walk the raw bytecode bytes so that we never need to
+    disassemble whole code objects with `dis`.
+
+    To resolve one pair:
+    starting from the destination, follow the trail of instructions (through
+    unconditional jumps) until we reach an instruction on a new source line
+    (giving us the arc), a return (an arc to leaving the code object), or
+    another branch possibility (no arc: that branch will produce its own
+    events).
+
+    """
+
+    def __init__(
+        self,
+        code: CodeType,
+        byte_to_line: Mapping[TOffset, TLineNo],
+        multiline_map: Mapping[TLineNo, TLineNo],
+    ) -> None:
+        self.code = code
+        # co_code re-copies the bytes on each access, so fetch it once.
+        self.co_code = code.co_code
+        self.byte_to_line = byte_to_line
+        self.multiline_map = multiline_map
+
+    def line_at(self, offset: TOffset) -> TLineNo | None:
+        """The source line of the instruction at `offset`, de-multilined."""
+        line = self.byte_to_line.get(offset)
+        if line is not None:
+            line = self.multiline_map.get(line, line)
+        return line
+
+    def resolve(self, source: TOffset, dest: TOffset) -> TArc | None:
+        """Turn a branch event's (source, dest) offsets into an arc, or None."""
+        from_line = self.line_at(source)
+        if from_line is None:
+            return None
+        co_code = self.co_code
+        max_offset = len(co_code)
+        byte_to_line = self.byte_to_line
+        multiline_map = self.multiline_map
+        offset = dest
+        ext_arg = 0
+        seen: set[TOffset] = set()
+        while 0 <= offset < max_offset and offset not in seen:
+            seen.add(offset)
+            op = co_code[offset]
+            if op == _CACHE:
+                offset += 2
+                continue
+            if op == _EXTENDED_ARG:
+                ext_arg = (ext_arg | co_code[offset + 1]) << 8
+                offset += 2
+                continue
+            line = byte_to_line.get(offset)
+            if line is not None:
+                line = multiline_map.get(line, line)
+                if line and line != from_line:
+                    return (from_line, line)
+            if op in JUMPS:
+                if op in ALWAYS_JUMPS:
+                    arg = ext_arg | co_code[offset + 1]
+                    # Jump distances are measured from the end of the
+                    # instruction's inline CACHE entries, which appear in
+                    # co_code as CACHE opcodes immediately following it.
+                    next_offset = offset + 2
+                    while next_offset < max_offset and co_code[next_offset] == _CACHE:
+                        next_offset += 2
+                    if op in BACKWARD_JUMPS:
+                        offset = next_offset - 2 * arg
+                    else:
+                        offset = next_offset + 2 * arg
+                    ext_arg = 0
+                    continue
+                # Another branch possibility: it will get its own events.
+                return None
+            if op in RETURNS:
+                return (from_line, -self.code.co_firstlineno)
+            ext_arg = 0
+            offset += 2
+        return None

{coverage-7.15.0 → coverage-7.15.2}/coverage/control.py

@@ -9,7 +9,6 @@ import atexit
 import collections
 import contextlib
 import datetime
-import functools
 import os
 import os.path
 import signal
@@ -999,16 +998,17 @@ class Coverage(TConfigurable):
             analysis.missing_formatted(),
         )
 
-    @functools.lru_cache(maxsize=1)
-    def _analyze(self, morf: TMorf) -> Analysis:
+    def _analyze(self, morf: TMorf, file_reporter: FileReporter | None = None) -> Analysis:
         """Analyze a module or file.  Private for now."""
         self._init()
         self._post_init()
 
         data = self.get_data()
-        file_reporter = self._get_file_reporter(morf)
+        if file_reporter is None:
+            file_reporter = self._get_file_reporter(morf)
         filename = self._file_mapper(file_reporter.filename)
-        return analysis_from_file_reporter(data, self.config.precision, file_reporter, filename)
+        analysis = analysis_from_file_reporter(data, self.config.precision, file_reporter, filename)
+        return analysis
 
     def branch_stats(self, morf: TMorf) -> dict[TLineNo, tuple[int, int]]:
         """Get branch statistics about a module.
@@ -1024,7 +1024,6 @@ class Coverage(TConfigurable):
         analysis = self._analyze(morf)
         return analysis.branch_stats()
 
-    @functools.lru_cache(maxsize=1)
     def _get_file_reporter(self, morf: TMorf) -> FileReporter:
         """Get a FileReporter for a module or file name."""
         assert self._data is not None
@@ -1075,7 +1074,6 @@ class Coverage(TConfigurable):
         if not isinstance(morfs, (list, tuple, set)):
             morfs = [morfs]  # type: ignore[list-item]
 
-        morfs = sorted(morfs, key=lambda m: m if isinstance(m, str) else m.__name__)
         return [(self._get_file_reporter(morf), morf) for morf in morfs]
 
     def _prepare_data_for_reporting(self) -> None:

{coverage-7.15.0 → coverage-7.15.2}/coverage/html.py

@@ -483,9 +483,18 @@ class HtmlReporter:
         contexts = collections.Counter(c for cline in file_data.lines for c in cline.contexts)
         context_codes = {y: i for (i, y) in enumerate(x[0] for x in contexts.most_common())}
         if context_codes:
-            contexts_json = json.dumps(
-                {encode_int(v): k for (k, v) in context_codes.items()},
-                indent=2,
+            # This JSON is dropped straight into an inline <script> element, so
+            # the HTML-significant characters have to be escaped as \uXXXX to keep
+            # a context label like "</script>" from closing the element early.
+            # The escapes are still valid JSON, so the parsed values are unchanged.
+            contexts_json = (
+                json.dumps(
+                    {encode_int(v): k for (k, v) in context_codes.items()},
+                    indent=2,
+                )
+                .replace("<", r"\u003c")
+                .replace(">", r"\u003e")
+                .replace("&", r"\u0026")
             )
         else:
             contexts_json = None