chore(deps-dev): bump the dev group across 1 directory with 3 updates

[dependabot]

Bumps the dev group with 3 updates in the / directory: httpx2, coverage and uv-build.

Updates httpx2 from 2.5.0 to 2.7.0

Release notes

Sourced from httpx2's releases.

v2.7.0

This release syncs the vendored WebSocket support with the latest httpx-ws, which was previously pinned to an outdated snapshot.

What's Changed

• Update vendored httpx-ws to upstream v0.9.0 by @​Kludex in pydantic/httpx2#1067

Full Changelog: pydantic/httpx2@v2.6.0...v2.7.0

v2.6.0

The main feature in this release is support for WebSockets! 🎉

from httpx2 import AsyncClient
async with httpx2.AsyncClient() as client:
async with client.websocket("ws://localhost:8000/ws") as ws:
await ws.send_text("Hello!")
message = await ws.receive_text()

What's Changed

• Read _expire_at only once in has_expired() by @​mbeijen in pydantic/httpx2#1045
• Add native WebSocket support by vendoring httpx-ws by @​Kludex in pydantic/httpx2#1042
• Add QUERY method support (RFC 10008) by @​Diegorro98 in pydantic/httpx2#1055
• fix: clean up garbage connections on cancellation in AsyncConnectionPool by @​mbeijen in pydantic/httpx2#983
• Bump click lower bound to >=8.4 and drop upper bound by @​drusc0 in pydantic/httpx2#1040

New Contributors

• @​achapkowski made their first contribution in pydantic/httpx2#1058
• @​hrnciar made their first contribution in pydantic/httpx2#1054
• @​Diegorro98 made their first contribution in pydantic/httpx2#1055
• @​drusc0 made their first contribution in pydantic/httpx2#1041

Full Changelog: pydantic/httpx2@v2.5.0...v2.6.0

Changelog

Sourced from httpx2's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

Commits

• c4e73cf Update vendored httpx-ws to upstream v0.9.0 (#1067)
• 2cb02fe Bump click lower bound to >=8.4 and drop upper bound (#1040)
• f4aa8ae Add QUERY method support (RFC 10008) (#1055)
• 5c7afb7 Add native WebSocket support by vendoring httpx-ws (#1042)
• See full diff in compare view

Updates coverage from 7.15.0 to 7.15.2

Release notes

Sourced from coverage's releases.

7.15.2

Version 7.15.2 — 2026-07-15

• Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.

➡️  PyPI page: coverage 7.15.2. :arrow_right:  To install: python3 -m pip install coverage==7.15.2

7.15.1

Version 7.15.1 — 2026-07-12

• Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare.
• A number of performance improvements thanks to Paul Kehrer, in pull requests 2213, 2214, 2215, 2216, 2218, 2220, and 2221.

➡️  PyPI page: coverage 7.15.1. :arrow_right:  To install: python3 -m pip install coverage==7.15.1

Changelog

Sourced from coverage's changelog.

Version 7.15.2 — 2026-07-15

• Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229_.

.. _issue 2229: coveragepy/coveragepy#2229

.. _changes_7-15-1:

Version 7.15.1 — 2026-07-12

• Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare <pull 2224_>_.

• A number of performance improvements thanks to Paul Kehrer, in pull requests 2213 <pull 2213_>, 2214 <pull 2214_>, 2215 <pull 2215_>, 2216 <pull 2216_>, 2218 <pull 2218_>, 2220 <pull 2220_>, and 2221 <pull 2221_>_.

.. _pull 2213: coveragepy/coveragepy#2213 .. _pull 2214: coveragepy/coveragepy#2214 .. _pull 2215: coveragepy/coveragepy#2215 .. _pull 2216: coveragepy/coveragepy#2216 .. _pull 2218: coveragepy/coveragepy#2218 .. _pull 2220: coveragepy/coveragepy#2220 .. _pull 2221: coveragepy/coveragepy#2221 .. _pull 2224: coveragepy/coveragepy#2224

.. _changes_7-15-0:

Commits

• 50d8659 docs: sample HTML for 7.15.2
• b5eed20 docs: prep for 7.15.2
• 78cab6e fix: reduce memory use during reporting. #2229 (#2231)
• b4c1fda build: bump version to 7.15.2
• da63bed docs: sample HTML for 7.15.1
• bc35e64 docs: prep for 7.15.1
• 182b010 perf: resolve sysmon branch events lazily, one pair at a time (#2221)
• ee271ee perf: compute multiline maps cheaply in the sysmon core (#2220)
• 1441b96 chore: bump the action-dependencies group with 6 updates (#2225)
• dd80635 fix: escape context labels in html report inline script block (#2224)
• Additional commits viewable in compare view

Updates uv-build from 0.11.28 to 0.11.31

Release notes

Sourced from uv-build's releases.

0.11.31

Release Notes

Released on 2026-07-21.

Enhancements

• Allow workspace sources to reference members in another workspace by path (#18401)
• Support .venv files containing paths to centralized project environments (#20022)
• Update bundled Windows timezone data to IANA 2026c (#20554)

Preview features

• Add an index-specific hash-algorithm setting for lockfile generation (#20605)

Configuration

• Add audit.malware-check and audit.malware-check-url settings (#20587)

Performance

• Avoid quadratic work when deduplicating transitive conflicts (#20578)

Bug fixes

• Suggest --emit-build-options for unsupported uv pip compile --emit-options (#20582)
• Reject source distributions and wheels with mismatched package names (#20432)
• Avoid retrying TLS certificate verification failures (#16245)
• Avoid warnings about uv_build settings for in-tree build backends (#20153)

Install uv 0.11.31

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex"

Download uv 0.11.31

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.11.31

Released on 2026-07-21.

Enhancements

• Allow workspace sources to reference members in another workspace by path (#18401)
• Support .venv files containing paths to centralized project environments (#20022)
• Update bundled Windows timezone data to IANA 2026c (#20554)

Preview features

• Add an index-specific hash-algorithm setting for lockfile generation (#20605)

Configuration

• Add audit.malware-check and audit.malware-check-url settings (#20587)

Performance

• Avoid quadratic work when deduplicating transitive conflicts (#20578)

Bug fixes

• Suggest --emit-build-options for unsupported uv pip compile --emit-options (#20582)
• Reject source distributions and wheels with mismatched package names (#20432)
• Avoid retrying TLS certificate verification failures (#16245)
• Avoid warnings about uv_build settings for in-tree build backends (#20153)

0.11.30

Released on 2026-07-20.

Python

• Add CPython 3.15.0b4 (#20519)

Preview features

• Allow uv workspace metadata --sync to target the active virtual environment with --active (#20500)
• Reuse centralized project environments when workspaces are accessed through symlinks (#20436)

Performance

• Skip resolver candidates whose files are all excluded by exclude-newer (#20460)
• Limit parallel cache reads to reduce resolver scheduling and allocation overhead (#20427)
• Accelerate lockfile serialization with toml_writer (#20450)
• Compact cached Simple API distribution metadata and hashes (#20463, #20483)
• Decode stale cache entries in a single blocking task (#20486)
• Decode cached payloads outside resolver workers (#20464)

... (truncated)

Commits

• b7fdec6 Bump version to 0.11.31 (#20608)
• 5b70d39 Allow requiring a hash algorithm for an index (#20605)
• f30c2ff Update Astral OIDC broker policy to schema v2 (#20606)
• a677fa2 Move macOS dev-binary builds to Namespace (#20604)
• fd00f8d Route all workflow failure issues to uv-dev (#20600)
• 88a0e28 Host the Astral credential broker policy in-repo (#20603)
• 219b232 Use stable Rust for development builds (#20601)
• 8da71e4 Allow automation to add notes to repeated workflow failures (#20599)
• 1e1d01f Fix various comments (#20597)
• e500216 Use Packse for the Android lock test (#20602)
• Additional commits viewable in compare view