chore(deps)(deps): bump the python-minor-patch group across 1 directory with 6 updates

[dependabot]

Bumps the python-minor-patch group with 6 updates in the / directory:

Package	From	To
pytest	9.1.0	9.1.1
faker	40.23.0	40.28.1
responses	0.26.1	0.26.2
coverage	7.14.1	7.15.0
locust	2.44.3	2.44.4
sphinx-autodoc-typehints	3.11.0	3.12.1

Updates pytest from 9.1.0 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
• 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
• 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
• Additional commits viewable in compare view

Updates faker from 40.23.0 to 40.28.1

Release notes

Sourced from faker's releases.

Release v40.28.1

See CHANGELOG.md.

Release v40.28.0

See CHANGELOG.md.

Release v40.27.0

See CHANGELOG.md.

Release v40.26.0

See CHANGELOG.md.

Release v40.25.0

See CHANGELOG.md.

Release v40.24.1

See CHANGELOG.md.

Release v40.24.0

See CHANGELOG.md.

Release v40.23.1

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.28.1 - 2026-07-01

• Fix: compute valid ISO 7064 Mod 11,10 check digit for de_DE vat_id (#2403). Thanks @​CedricConday.

v40.28.0 - 2026-07-01

• Add es_MX automotive license plate provider (#2393). Thanks @​r1cksync.

v40.27.0 - 2026-06-30

• Add sr_BA SSN provider (#2391). Thanks @​AleksaMCode.

v40.26.0 - 2026-06-30

• Update providers job, phone_number, bank and ssn for pt_BR (#2386). Thanks @​dclobato.
• Update phone number test regex for pt_BR. Thanks @​fcurella.

v40.25.0 - 2026-06-30

• Update outdated Korean locale names (#2385). Thanks @​ydj515.

v40.24.1 - 2026-06-30

• Fix: prevent infinite recursion in _safe_random_int when both bounds collapse to the same integer (#2396). Thanks @​gaoflow.

v40.24.0 - 2026-06-30

• Add mk_MK (Macedonian) locale (#2339). Thanks @​acikabubo.
• CI: run PR checks against PR code instead of base branch. Thanks @​fcurella.

v40.23.1 - 2026-06-30

• Fix: raise NotImplementedError in bank() for locales without banks data (#2378). Thanks @​koushik717.
• Fix outdated links in README credits section (#2394). Thanks @​TejasAmle.
• Bump actions/cache from 5 to 6 (#2400). Thanks @​dependabot[bot].
• Bump actions/checkout from 6 to 7 (#2392). Thanks @​dependabot[bot].

Commits

• bb62df7 Bump version: 40.28.0 → 40.28.1
• 1f87cf2 📝 Update CHANGELOG.md
• 41624e3 fix(de_DE): compute valid ISO 7064 Mod 11,10 check digit for vat_id (#2403)
• a774234 Bump version: 40.27.0 → 40.28.0
• 96c3090 📝 Update CHANGELOG.md
• 20e203a feat(automotive): add es_MX (Mexico) license plate provider (#2393)
• 98da116 Bump version: 40.26.0 → 40.27.0
• f2c05d9 📝 Update CHANGELOG.md
• 88a17fc 💄 format code
• 4f7f545 feat(locale): add sr_BA ssn provider (#2391)
• Additional commits viewable in compare view

Updates responses from 0.26.1 to 0.26.2

Release notes

Sourced from responses's releases.

0.26.2

• Default headers (such as Content-Type, Date and Server) are now stripped from recorded files regardless of header name case. Previously, responses recorded from servers that send lowercase header names (for example over HTTP/2) kept these redundant headers in the generated file.
• Fixed query_param_matcher mutating the caller's params dict when numeric values are provided. See #801

Changelog

Sourced from responses's changelog.

0.26.2

• Default headers (such as Content-Type, Date and Server) are now stripped from recorded files regardless of header name case. Previously, responses recorded from servers that send lowercase header names (for example over HTTP/2) kept these redundant headers in the generated file.
• Fixed query_param_matcher mutating the caller's params dict when numeric values are provided. See #801

Commits

• 31d28eb release: 0.26.2
• 6fb610d Fix CHANGES (#802)
• aae1d47 Set license format to SPDX identifier in setup.py (#803)
• a19add7 fix: query_param_matcher no longer mutates the caller's params dict (#801)
• 88e15db Strip default headers from recorded files case-insensitively (#798)
• 1d48f2f docs: fix typos (#800)
• 853e7d2 docs: update tox Python version examples (#797)
• 705067b Merge branch 'release/0.26.1'
• See full diff in compare view

Updates coverage from 7.14.1 to 7.15.0

Changelog

Sourced from coverage's changelog.

Version 7.15.0 — 2026-07-02

• Since 7.14.0, reporting commands implicitly combine parallel data files. Now those commands have a new option --keep-combined to retain the data files after combining them instead of the default, which is to delete them. Finishes issue 2198_.

• Fix: the LCOV report would incorrectly count excluded functions as uncovered, as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen <pull 2206_>.

• When running your program, coverage now correctly sets yourmodule.__spec__.loader as strongly recommended <--loader--_>, avoiding the deprecation warning described in issue 2208. Thanks, A5rocks <pull 2209_>_.

• Fix: with Python 3.10, running with the -I (isolated mode) option didn't correctly omit the current directory from the module search path, as described in issue 2103. That is now fixed thanks to Ilia Sorokin <pull 2211_>.

.. --loader--: https://docs.python.org/3/reference/datamodel.html#module.__loader_ .. _issue 2103: coveragepy/coveragepy#2103 .. _issue 2198: coveragepy/coveragepy#2198 .. _issue 2205: coveragepy/coveragepy#2205 .. _pull 2206: coveragepy/coveragepy#2206 .. _issue 2208: coveragepy/coveragepy#2208 .. _pull 2209: coveragepy/coveragepy#2209 .. _pull 2211: coveragepy/coveragepy#2211

.. _changes_7-14-3:

Version 7.14.3 — 2026-06-22

• Fix: the default ... exclusion rule now also matches function bodies whose closing return-type bracket is on its own line (for example, after a long -> dict[ ... ] annotation that a formatter has split over multiple lines). Closes issue 2185, thanks Mengjia Shang <pull 2196_>.

• Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors. We can't import the C tracer because in 7.14.2 we stopped shipping compiled wheels for 3.13t. Thanks, Hugo van Kemenade <pull 2203_>_.

.. _issue 2185: coveragepy/coveragepy#2185 .. _pull 2196: coveragepy/coveragepy#2196 .. _pull 2203: coveragepy/coveragepy#2203

... (truncated)

Commits

• c8c8020 docs: sample HTML for 7.15.0
• ae19db1 docs: prep for 7.15.0
• 17b45a1 docs: --keep-combined in the man page
• 6f9fa1e fix: preserve isolated sys.path on Python 3.10 (#2211)
• 787af5f chore: bump actions/checkout in the action-dependencies group (#2210)
• 1ed3998 fix: start attaching the loader on __spec__ #2208 (#2209)
• 1ab1122 docs: remove stray comma
• f24a91f feat: --keep-combined for reporting commands. #2198
• 5e70751 test: canonicalize mock calls in test_cmdline to reduce diff noise
• 65979cc fix: skip excluded functions in LCOV function totals (#2206)
• Additional commits viewable in compare view

Updates locust from 2.44.3 to 2.44.4

Release notes

Sourced from locust's releases.

2.44.4

What's Changed

• docs: fix typos by @​juliosuas in locustio/locust#3426
• fix: reject partially-matched timespan strings in parse_timespan by @​JSap0914 in locustio/locust#3425
• Other minor doc fixes

New Contributors

• @​JSap0914 made their first contribution in locustio/locust#3425

Full Changelog: locustio/locust@2.44.3...2.44.4

Commits

• 7596188 Merge pull request #3425 from JSap0914/fix/parse-timespan-partial-match-valid...
• 527044d Merge pull request #3426 from juliosuas/codex/fix-doc-comment-typos-20260617
• 6c9ec7e docs: fix typos
• 689fad7 style: ruff
• 38ceb64 fix: reject partially-matched timespan strings in parse_timespan
• 204a3c6 Link quickstart guide
• c4d5685 Add microsoft logo to readme
• daba10c dont require all arguments for otel request event handler
• See full diff in compare view

Updates sphinx-autodoc-typehints from 3.11.0 to 3.12.1

Commits

• f5734ac 🐛 fix(annotations): resolve cross-module recursive alias (#724)
• 684cba5 [pre-commit.ci] pre-commit autoupdate (#722)
• 5a1ae66 🐛 fix(annotations): render recursive type aliases (#721)
• ae073b6 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#719)
• cee55dd [pre-commit.ci] pre-commit autoupdate (#718)
• 882b9e7 [pre-commit.ci] pre-commit autoupdate (#717)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[longieirl]

LGTM - Dependabot chore, CI green.