[dependabot]

Bumps the python group with 2 updates: conan and gcovr.

Updates conan from 2.33.0 to 2.34.0

Release notes

Sourced from conan's releases.

2.34.0 (28-Oct-2026)

• Feature: Define /MP in CMakeToolchain for clang-cl with Visual Studio generators (ClangCL toolset), like msvc. (conan-io/conan#20439)
• Feature: Reduce local cache sqlite3 DB calls (33% fewer for regular installs with cached packages). (conan-io/conan#20434)
• Feature: Simplify the build step terminal output, removing duplicated package references. (conan-io/conan#20426)
• Feature: Add CMAKE_PREFIX_PATH as fallback to CMakeConfigDeps for cases beyond the <pkg>_DIR variable. (conan-io/conan#20420). Docs: 📃
• Feature: Pass original URLs to backup source remotes in the X-Conan-Origin-Urls header. (conan-io/conan#20385). Docs: 📃
• Feature: Update conan new bazel_lib and conan new bazel_exe templates to Bazel 7. (conan-io/conan#20367). Docs: 📃
• Feature: Add a command_alias.conf file to define command aliases and shortcuts without writing a custom command. (conan-io/conan#20365)
• Feature: Support the new CPS dyld_requires (CMake>=4.4) for transitive shared libraries on Linux. (conan-io/conan#20362)
• Feature: Add cmake_file_names dict property to CMakeConfigDeps to generate several CMake CONFIG files per package. (conan-io/conan#20298). Docs: 📃
• Feature: Add an optional components argument to aggregated_components() to aggregate only the given components. (conan-io/conan#20298). Docs: 📃
• Feature: Always generate .ps1 environment launchers, alongside the .bat/.sh ones, for the consumer, editables and test_package. (conan-io/conan#19649). Docs: 📃
• Fix: Clarify in the PackagesList.items() docstring that it only returns revision-specific information. (conan-io/conan#20432)
• Fix: Add docstrings to the PkgReference class of the Python API. (conan-io/conan#20431). Docs: 📃
• Fix: Remove the legacy warning about ConanCenter being frozen for Conan 1 clients. (conan-io/conan#20425)
• Fix: Remove the python-dateutil dependency for Python>=3.11. (conan-io/conan#20419)
• Fix: Resolve LocalAPI.editable_add relative output_folder against the cwd argument. (conan-io/conan#20416)
• Fix: Make conan cache clean --backup-sources only clean the backup sources of the selected recipes. (conan-io/conan#20415)
• Fix: Allow several negated patterns, and mixing them with inclusions, in remote --allowed-packages. (conan-io/conan#20412)
• Fix: Avoid a VirtualRunEnv generation crash with win_bash=True when cross-building from Linux to Windows. (conan-io/conan#20407)
• Fix: Correct Python API docstrings for ListAPI, CacheAPI and other subapis that did not match their behavior. (conan-io/conan#20405)
• Fix: Correct the ListAPI.latest_recipe_revision docstring, as it always raises if the reference is not found. (conan-io/conan#20400)
• Fix: Report a proper error for non-integer --lru time values. (conan-io/conan#20399)
• Fix: Avoid duplicating tools.build:sharedlinkflags from conf in BazelToolchain. (conan-io/conan#20390)
• Fix: Join multiple SBOM license expressions with AND to comply with the CycloneDX standard. (conan-io/conan#20382)
• Fix: Allow running conan remote logout for disabled remotes. (conan-io/conan#20381)
• Fix: Replace stale CONAN_RUNTIME_LIB_DIRS entries in CMakeConfigDeps when installing a new package revision. (conan-io/conan#20378)
• Fix: Raise an error for --requires=pkg/version@_, an undocumented and unsupported Conan 1 legacy syntax. (conan-io/conan#20371)
• Fix: Remove Conan 1.X legacy alias (undocumented and unsupported) code. (conan-io/conan#20370)
• Fix: Make the workspace experimental warning skippable with core:skip_warnings. (conan-io/conan#20369)
• Fix: Add deprecation warnings for Bazel 6 support in the BazelDeps generator. (conan-io/conan#20367). Docs: 📃
• Fix: Filter CMakeConfigDeps target data based on require traits, aligned with CMakeDeps. (conan-io/conan#20277). Docs: 📃
• Fix: tools.env.virtualenv:powershell no longer replaces the .bat/.sh launchers. self.run() only uses .ps1 launchers when this conf is defined. (conan-io/conan#19649). Docs: 📃
• Bugfix: Avoid accumulating variables when calling GnuToolchain._environment several times. (conan-io/conan#20446)
• Bugfix: Avoid internal rmdir failures when removing Windows folders with read-only permissions. (conan-io/conan#20440)
• Bugfix: Do not install host profile [tool_requires] in conan install with only --tool-requires arguments. (conan-io/conan#20422). Docs: 📃
• Bugfix: Do not remove pre-existing recipe revisions in ReportAPI.diff. (conan-io/conan#20417)
• Bugfix: Make AuditAPI.auth_provider receive a provider name instead of a provider object, as documented. (conan-io/conan#20414)
• Bugfix: Do not write --dynamic_mode=off in BazelToolchain when the recipe has no shared option. (conan-io/conan#20390)
• Bugfix: Avoid random dictionary changed size during iteration errors in uploads with core.upload:parallel. (conan-io/conan#20389)
• Bugfix: Avoid HTTP header cross-pollution between consecutive calls to the backup sources server. (conan-io/conan#20386)
• Bugfix: Use tools.microsoft.msbuild:max_cpu_count for the -m argument in CMakeToolchain Visual Studio presets. (conan-io/conan#20360)

Commits

• ef323a6 revert #20443 (#20448)
• 3460340 [GnuToolchain] Avoid accumulating variables when calling _environment seve...
• edd2d46 Conan 2.34.0
• 4b18980 Allow unsetting AutoolsTolchain.asflags (#20443)
• bcedbf5 fix bazel toolchain shared and ld flags (#20390)
• b3184c3 fix rmdir windows folder permissions (#20440)
• a6686c7 Only graph build-order uses overrides and graph info (#20441)
• 1ca935a Always using .bat files in Conan subprocess, not .ps1 (#19649)
• 8a8fd1d Fix clang-cl parallel flags (#20439)
• 5562ab5 proposal for command aliases (#20365)
• Additional commits viewable in compare view

Updates gcovr from 8.7 to 8.8

Release notes

Sourced from gcovr's releases.

8.8

New features and notable changes:

• Change the breadcrumbs of in the source view of the GitHub theme. (#1328)

Bug fixes and small improvements:

• Fix removing coverage for internal functions in C sources. (#1320)
• Fix release pipeline to upload standalone applications for MacOs again. (#1321)

Internal changes:

• Add zizmor to scan pipeline for security issues. (#1318)
• Add dependabot configuration for version updates. (#1325)
• Change exclusion handling to use a data class instead of simple integers. (#1326)
• Add nox session to cleanup duplicate reference data and notify session after import. (#1327)

Changelog

Sourced from gcovr's changelog.

8.8 (27 October 2026)

New features and notable changes:

• Change the breadcrumbs of in the source view of the GitHub theme. (:issue:1328)

Bug fixes and small improvements:

• Fix removing coverage for internal functions in C sources. (:issue:1320)
• Fix release pipeline to upload standalone applications for MacOs again. (:issue:1321)

Internal changes:

• Add zizmor to scan pipeline for security issues. (:issue:1318)
• Add dependabot configuration for version updates. (:issue:1325)
• Change exclusion handling to use a data class instead of simple integers. (:issue:1326)
• Add nox session to cleanup duplicate reference data and notify session after import. (:issue:1327)

.. _release_8_7:

Commits

• 6e49f2f Bump version 8.8 (#1329)
• ff3935c Improve breadcrumbs (#1328)
• b26bf8a Clean directories after test and remove duplicate references (#1327)
• 3b4fcdf Use data class for code region (#1326)
• bde9559 Add dependabot configuration (#1325)
• a9ac1c2 Fix and improve removing of function from data (#1323)
• e063e8d Upload MacOs applications again to release (#1321)
• f67ea99 Fix removing of internal C function (#1320)
• 5ae99b1 Comment the versions of the commit hashes
• 90ac901 Add zizmor and fix pipeline security issues (#1318)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions