Bump codecov/codecov-action from 3 to 4 #681
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v3...v4) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
Like python/bedevere#623 (comment): This has a breaking change which affects us, requiring setting a token due to rate limiting: |
Codecov ReportAll modified and coverable lines are covered by tests ✅
@@ Coverage Diff @@
## main #681 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 6 6
Lines 357 357
Branches 29 29
=========================================
Hits 357 357
Flags with carried forward coverage won't be shown. Click here to find out more. |
|
I already merged a couple of Dependabot PRs with the token set via codecov/feedback#112 (comment) says only Well, let's use |
It might not matter here, but IIRC using |
|
These are secrets rather than plain variables. The value is masked at https://github.com/python/miss-islington/actions/runs/8633628202/job/23667136003?pr=681#step:6:13 : In org settings (https://github.com/organizations/hugovk-test-org/settings/secrets/actions) there are separate boxes for secret and variables, and it says:
For Dependabot (https://github.com/organizations/hugovk-test-org/settings/secrets/dependabot) there are only secrets:
|
Bumps codecov/codecov-action from 3 to 4.
Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
f30e495fix: update action.yml (#1240)a7b945cfix: allow for other archs (#1239)98ab2c5Update package.json (#1238)43235ccUpdate README.md (#1237)0cf8684chore(ci): bump to node20 (#1236)8e1e730build(deps-dev): bump@typescript-eslint/eslint-pluginfrom 6.19.1 to 6.20.0 ...61293afbuild(deps-dev): bump@typescript-eslint/parserfrom 6.19.1 to 6.20.0 (#1235)7a070cbbuild(deps): bump github/codeql-action from 3.23.1 to 3.23.2 (#1231)9097165build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 (#1232)ac042eabuild(deps-dev): bump@typescript-eslint/eslint-pluginfrom 6.19.0 to 6.19.1 ...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)