Bump codecov/codecov-action from 5.1.1 to 5.1.2 #4
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.1.1 to 5.1.2. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v5.1.1...v5.1.2) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
|
The following labels could not be found: |
|
By default, I don't review pull requests opened by bots. If you would like me to review this pull request anyway, you can request a review via the |
Reviewer's Guide by SourceryThis pull request bumps the version of codecov/codecov-action from 5.1.1 to 5.1.2. This change updates the Codecov action to the latest version, incorporating several fixes and improvements, including preventing OIDC on tokenless uploads due to permissioning issues, updating the action script, and putting quotes around No diagrams generated as the changes look simple and do not need a visual representation. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
github-actions
bot
added
the
size/XS
|
Here's the code health analysis summary for commits Analysis Summary
Code Coverage Report
|
|
Infisical secrets check: ✅ No secrets leaked! 💻 Scan logs3:23AM INF scanning for exposed secrets...
3:23AM INF 5 commits scanned.
3:23AM INF scan completed in 85.1ms
3:23AM INF no leaks found
|
Coverage summary from CodacySee diff coverage on Codacy
Coverage variation details
Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: Diff coverage details
Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: See your quality gate settings Change summary preferencesCodacy stopped sending the deprecated coverage status on June 5th, 2024. Learn more |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @@ -45,7 +45,7 @@ | |||
| sed -i 's@'"$GITHUB_WORKSPACE"'@/github/workspace/@g' coverage.xml | |||
|
|
|||
| - name: Upload coverage reports to Codecov | |||
| uses: codecov/[email protected].1 | |||
| uses: codecov/[email protected].2 | |||
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
|
gstraccini
bot
added
the
☑️ auto-merge
![gstraccini[bot]](https://avatars.githubusercontent.com/in/480132?s=60&v=4){kind=small}
|
@dependabot squash and merge |
guibranco
deleted the
dependabot/github_actions/codecov/codecov-action-5.1.2
branch
Bumps codecov/codecov-action from 5.1.1 to 5.1.2.
Release notes
Sourced from codecov/codecov-action's releases.
Changelog
Sourced from codecov/codecov-action's changelog.
Commits
1e68e06chore(release): 5.1.2 (#1727)277db52fix: update statment (#1726)c77245afix: update action script (#1725)9b01a34fix: prevent oidc on tokenless due to permissioning (#1724)47e0552chore(release): wrapper-0.0.31 (#1723)34ef570Put quotes around${{ inputs.token }}inaction.yml(#1721)d93fc22build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 (#1722)5c93f7aRemove mistake from options table (#1718)2c97106build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 (#1717)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot will merge this PR once CI passes on it, as requested by @guibranco.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by Sourcery
CI: