Bump the back-dev-deps group with 2 updates

[dependabot]

Bumps the back-dev-deps group with 2 updates: coverage and prek.

Updates coverage from 7.14.1 to 7.14.3

Changelog

Sourced from coverage's changelog.

Version 7.14.3 — 2026-06-22

• Fix: the default ... exclusion rule now also matches function bodies whose closing return-type bracket is on its own line (for example, after a long -> dict[ ... ] annotation that a formatter has split over multiple lines). Closes issue 2185, thanks Mengjia Shang <pull 2196_>.

• Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors. We can't import the C tracer because in 7.14.2 we stopped shipping compiled wheels for 3.13t. Thanks, Hugo van Kemenade <pull 2203_>_.

.. _issue 2185: coveragepy/coveragepy#2185 .. _pull 2196: coveragepy/coveragepy#2196 .. _pull 2203: coveragepy/coveragepy#2203

.. _changes_7-14-2:

Version 7.14.2 — 2026-06-20

• Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197_.

• Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd <pull 2193_>.

• Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don't really make sense, so now we search for a usable one instead. Fixes issue 2187_.

• Following the advice of cibuildwheel <no-13t_>_, we no longer distribute wheels for Python 3.13 free-threaded.

.. _issue 2187: coveragepy/coveragepy#2187 .. _issue 2192: coveragepy/coveragepy#2192 .. _pull 2193: coveragepy/coveragepy#2193 .. _issue 2197: coveragepy/coveragepy#2197 .. _no-13t: https://py-free-threading.github.io/ci/#building-free-threaded-wheels-with-cibuildwheel

.. _changes_7-14-1:

Commits

• 22f13ea docs: sample HTML for 7.14.3
• 2ca4e5f docs: prep for 7.14.3
• 01d714e docs: add changelog entry for #2203
• f36248d fix: don't emit 'Couldn't import C tracer' warning for 3.13t (#2203)
• 86d73d1 docs: thanks, Mengjia Shang
• 3d4ae3c docs: add the #2196 pr link to CHANGES
• f4b2b4d fix: exclude ... bodies after multi-line return-type annotations (#2185) (#...
• 1980ed0 chore: bump sigstore/gh-action-sigstore-python (#2201)
• bca3217 build: since we don't ship 3.13t, don't test it
• 77550d8 docs: oops, mismatched pull requests
• Additional commits viewable in compare view

Updates prek from 0.4.3 to 0.4.6

Release notes

Sourced from prek's releases.

0.4.6

Release Notes

Released on 2026-07-01.

Enhancements

• Verify managed toolchain downloads before installation (#2229)
• Add PREK_DOCKER_NO_INIT to opt-out Docker --init (#2242)
• Improve subprocess error messages (#2257)
• Split run concurrency knobs: PREK_CONCURRENT_HOOKS and PREK_CONCURRENT_BATCHES (#2276)

Performance

• Avoid allocating markdown extensions per file (#2245)
• Avoid unchanged config tracking writes (#2247)
• Delay trailing whitespace output buffer (#2244)
• Prefilter VCS permalink lines (#2253)
• Skip unnecessary submodule updates during hook repo clone (#2255)

Documentation

• Document language_version inferring for Python and Go (#2241)

Other changes

• Refactor env var handling (#2277)
• Use serde-saphyr for YAML string quoting (#2228)

Contributors

• @​shaanmajid
• @​j178

Install prek 0.4.6

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.6/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.6/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.6

Released on 2026-07-01.

Enhancements

• Verify managed toolchain downloads before installation (#2229)
• Add PREK_DOCKER_NO_INIT to opt-out Docker --init (#2242)
• Improve subprocess error messages (#2257)
• Split run concurrency knobs: PREK_CONCURRENT_HOOKS and PREK_CONCURRENT_BATCHES (#2276)

Performance

• Avoid allocating markdown extensions per file (#2245)
• Avoid unchanged config tracking writes (#2247)
• Delay trailing whitespace output buffer (#2244)
• Prefilter VCS permalink lines (#2253)
• Skip unnecessary submodule updates during hook repo clone (#2255)

Documentation

• Document language_version inferring for Python and Go (#2241)

Other changes

• Refactor env var handling (#2277)
• Use serde-saphyr for YAML string quoting (#2228)

Contributors

• @​shaanmajid
• @​j178

0.4.5

Released on 2026-06-15.

✨Highlights

0.4.5 completes prek's pre-commit language coverage. With R, Conda, Perl, and coursier now supported, prek supports every language available in pre-commit, plus prek-only modern languages such as Bun and Deno.

This is full feature parity with pre-commit. The last major compatibility gap is closed, and prek is now on the path to 1.0.

💚 Sponsorship

If prek saves time for you or your team, please consider sponsoring the project on GitHub Sponsors. It helps keep

... (truncated)

Commits

• 643fba4 Bump version to 0.4.6 (#2280)
• b0f9261 Refactor env var handling (#2277)
• 8494d16 Split run concurrency knobs (#2276)
• f20bbaa Update sample config for .pre-commit-config.yaml (#2275)
• 5485289 Pin pre-commit repos to commit hash (#2274)
• d418ab3 Improve nix shebang parsing (#2271)
• cc261c1 Update actions/checkout action to v7 (#2267)
• 8d2dbba Update Rust crate itertools to 0.15.0 (#2265)
• 51db86c Update Rust crate phf to 0.14.0 (#2266)
• 1aa7d38 Update dependency uv to v0.11.23 (#2262)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coveralls]

Coverage is 100.0% — dependabot/pip/back-dev-deps-f690b895c5 into master. No base build found for master.