build(deps): update pytest-cov requirement from <7,>=4 to >=4,<8 (#725)

Updates the requirements on
[pytest-cov](https://github.com/pytest-dev/pytest-cov) to permit the
latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst">pytest-cov's
changelog</a>.</em></p>
<blockquote>
<h2>7.0.0 (2025-09-09)</h2>
<ul>
<li>
<p>Dropped support for subprocesses measurement.</p>
<p>It was a feature added long time ago when coverage lacked a nice way
to measure subprocesses created in tests.
It relied on a <code>.pth</code> file, there was no way to opt-out and
it created bad interations
with <code>coverage's new patch system
&lt;https://coverage.readthedocs.io/en/latest/config.html#run-patch&gt;</code>_
added
in <code>7.10
&lt;https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24&gt;</code>_.</p>
<p>To migrate to this release you might need to enable the suprocess
patch, example for <code>.coveragerc</code>:</p>
<p>.. code-block:: ini</p>
<p>[run]
patch = subprocess</p>
<p>This release also requires at least coverage 7.10.6.</p>
</li>
<li>
<p>Switched packaging to have metadata completely in
<code>pyproject.toml</code> and use <code>hatchling
&lt;https://pypi.org/project/hatchling/&gt;</code>_ for
building.
Contributed by Ofek Lev in
<code>[#551](pytest-dev/pytest-cov#551)
&lt;https://github.com/pytest-dev/pytest-cov/pull/551&gt;</code>_
with some extras in
<code>[#716](pytest-dev/pytest-cov#716)
&lt;https://github.com/pytest-dev/pytest-cov/pull/716&gt;</code>_.</p>
</li>
<li>
<p>Removed some not really necessary testing deps like
<code>six</code>.</p>
</li>
</ul>
<h2>6.3.0 (2025-09-06)</h2>
<ul>
<li>Added support for markdown reports.
Contributed by Marcos Boger in
<code>[#712](pytest-dev/pytest-cov#712)
&lt;https://github.com/pytest-dev/pytest-cov/pull/712&gt;</code>_
and <code>[#714](pytest-dev/pytest-cov#714)
&lt;https://github.com/pytest-dev/pytest-cov/pull/714&gt;</code>_.</li>
<li>Fixed some formatting issues in docs.
Anonymous contribution in
<code>[#706](pytest-dev/pytest-cov#706)
&lt;https://github.com/pytest-dev/pytest-cov/pull/706&gt;</code>_.</li>
</ul>
<h2>6.2.1 (2025-06-12)</h2>
<ul>
<li>
<p>Added a version requirement for pytest's pluggy dependency (1.2.0,
released 2023-06-21) that has the required new-style hookwrapper
API.</p>
</li>
<li>
<p>Removed deprecated license classifier (packaging).</p>
</li>
<li>
<p>Disabled coverage warnings in two more situations where they have no
value:</p>
<ul>
<li>&quot;module-not-measured&quot; in workers</li>
<li>&quot;already-imported&quot; in subprocesses</li>
</ul>
</li>
</ul>
<h2>6.2.0 (2025-06-11)</h2>
<ul>
<li>
<p>The plugin now adds 3 rules in the filter warnings configuration to
prevent common coverage warnings being raised as obscure errors::</p>
<p>default:unclosed database in &lt;sqlite3.Connection object
at:ResourceWarning
once::PytestCovWarning</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/224d8964caad90074a8cf6dc8720b8f70f31629b"><code>224d896</code></a>
Bump version: 6.3.0 → 7.0.0</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/73424e3999f865eac72e27f09d5fe11b9703cfd6"><code>73424e3</code></a>
Cleanup the docs a bit.</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/36f1cc2967831dbd4c8aa70086fc86dc495f8b9a"><code>36f1cc2</code></a>
Bump pins in template.</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/f299c590a63a48e51e3ae949993dc7bb1f1d480d"><code>f299c59</code></a>
Bump the github-actions group with 2 updates</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/25f0b2e0cdbc345c0d3e49170f7a328c3e0d805f"><code>25f0b2e</code></a>
Update docs/config.rst</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/bb23eacc5531fb8f499213d8420407e0d72f88e3"><code>bb23eac</code></a>
Improve configuration docs</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/a19531e91e1ab753ccf648a2d9bab08a6fddebb9"><code>a19531e</code></a>
Switch from build/pre-commit to uv/prek - this should make this
faster.</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/82f999391073f2fb8ae422af452602f310086a2a"><code>82f9993</code></a>
Update changelog.</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/211b5cd41c29916bc643b4a11b00578ba4fd6fe8"><code>211b5cd</code></a>
Fix links.</li>
<li><a
href="https://github.com/pytest-dev/pytest-cov/commit/97aadd74bcbc00a2078d240e8fe871dd62b83d80"><code>97aadd7</code></a>
Update some ci config, reformat and apply some lint fixes.</li>
<li>Additional commits viewable in <a
href="https://github.com/pytest-dev/pytest-cov/compare/v4.0.0...v7.0.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Author: Guts

.github/workflows/build_release.yml

@@ -187,7 +187,7 @@ jobs:
         run: echo "exe_path=$(ls dist/*.exe | head -n 1)" >> $GITHUB_ENV
 
       - name: Decode Code Signing Certificate
-        if: github.event.repository.fork != true
+        if: env.WINDOWS_CERTIFICATE_PFX_B64 != '' && github.event.repository.fork != true
         env:
           WINDOWS_CERTIFICATE_PFX_B64: ${{ secrets.WINDOWS_CERTIFICATE_PFX }}
         shell: bash
@@ -196,9 +196,10 @@ jobs:
           certutil -decode builder/code_signing_certificate.pfx.b64 builder/code_signing_certificate.pfx
 
       - name: Show certificate details from PFX exporting as PEM (without keys)
-        shell: bash
+        if: env.WINDOWS_CERTIFICATE_PFX_PASSWORD != '' && github.event.repository.fork != true
         env:
           WINDOWS_CERTIFICATE_PFX_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PFX_PASSWORD }}
+        shell: bash
         run: |
           openssl pkcs12 -in builder/code_signing_certificate.pfx -clcerts -nokeys -passin pass:"$WINDOWS_CERTIFICATE_PFX_PASSWORD" -out cert.pem
           echo "Certificate Subject:"
@@ -207,11 +208,11 @@ jobs:
           openssl x509 -in cert.pem -noout -text | grep -A 10 "X509v3 Extended Key Usage"
 
       - name: Sign Executable
-        if: github.event.repository.fork != true
-        shell: pwsh
+        if: env.WINDOWS_CERTIFICATE_PFX_PASSWORD != '' && github.event.repository.fork != true
         env:
           exe_path: ${{ env.exe_path }}
           WINDOWS_CERTIFICATE_PFX_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PFX_PASSWORD }}
+        shell: pwsh
         run: |
           & "C:\Program Files (x86)\Microsoft SDKs\ClickOnce\SignTool\signtool.exe" sign /f builder/code_signing_certificate.pfx /p $env:WINDOWS_CERTIFICATE_PFX_PASSWORD /n "oslandia.com" /tr http://timestamp.digicert.com /td SHA256 /fd SHA256 $env:exe_path
 

pyproject.toml

@@ -75,7 +75,7 @@ security = ["bandit>=1.8.3,<2", "safety>=3.3.1,<4"]
 test = [
     "GitPython>=3.1,<3.2",
     "Pillow>=10.4.0,<11.4",
-    "pytest-cov>=4,<7",
+    "pytest-cov>=4,<8",
     "validators>=0.29.0,<0.36",
 ]