[sweco]

Fixes #98.

Summary

• Upgrade all dependencies to their latest compatible versions. This removes the vulnerable zipp (3.15.0 → 4.1.1) and pygments (2.17.2 → 2.21.0) from the lock file.
• Breaking: drop Python 3.7 – 3.9. The minimum supported Python is now 3.10. With python = "^3.7", Poetry kept a separate resolution for Python <3.10 that held old, vulnerable versions, so a full upgrade was not possible without this. Python 3.7 – 3.9 are all EOL.
• Breaking: drop dbt 1.0, as it does not run on Python 3.10+.
• Add support for dbt 1.12. dbt-postgres 1.12 is not on PyPI yet, so it is tested with dbt-postgres 1.11. dbt 1.12 writes manifest schema v12, which is already supported.
• Docs: the README support matrix now lists dbt versions per dbt-coverage version.

Notes

• dbt 1.11 is now tested with dbt-postgres 1.11, which has been released.
• The test-group dbt-core/dbt-postgres are restricted to Python <3.15, because metricflow (a new dbt-core 1.12 dependency) does not support 3.15+. This affects only the test setup, not what users install.
• black 26.10.0 reformats one textwrap.dedent call in dbt_coverage/__init__.py. Behaviour is unchanged.
• Other bumps: isort 9.0.2, pre-commit 4, pre-commit-hooks v6.0.0, pytest 9, pytest-docker 3, and actions/checkout/actions/setup-python v7.
• The packages still behind latest are held back by dbt's own version pins or by Python 3.10 support.
• dbt 2.0 is not added: it is still a release candidate and a Rust rewrite with a different install model. It still writes manifest.json, so it can be evaluated once stable.

Testing

Run locally:

• pre-commit run --all-files: passes.
• tox -e unit: passes.
• Integration tests on dbt 1.1 – 1.12 (one env at a time): all pass. On dbt 1.1 – 1.7, 2 tests are skipped, because those tests only run on dbt 1.8+.

🤖 Generated with Claude Code