Build(deps): bump codecov/codecov-action from 5 to 7
Bumps codecov/codecov-action from 5 to 7.
Release notes
Sourced from codecov/codecov-action's releases.
v7.0.0
⚠️ Due to migration issues with keybase, we are unable to update our keys under the
codecovsecurityaccount. We have deleted the account and are usingcodecovsecopswith the original gpg keyWhat's Changed
- ci: remove Enforce License Compliance workflow by
@thomasrockhu-codecovin codecov/codecov-action#1950- chore(release): 7.0.0 by
@thomasrockhu-codecovin codecov/codecov-action#1957Full Changelog: https://github.com/codecov/codecov-action/compare/v6.0.1...v7.0.0
v6.0.2
This is a copy of the
v7.0.0release to make updates easierWhat's Changed
- ci: remove Enforce License Compliance workflow by
@thomasrockhu-codecovin codecov/codecov-action#1950- chore(release): 7.0.0 by
@thomasrockhu-codecovin codecov/codecov-action#1957Full Changelog: https://github.com/codecov/codecov-action/compare/v6.0.1...v6.0.2
v6.0.1
What's Changed
- fix: prevent template injection in run: steps (VULN-1652) by
@thomasrockhu-codecovin codecov/codecov-action#1947- chore(release): 6.0.1 by
@thomasrockhu-codecovin codecov/codecov-action#1949Full Changelog: https://github.com/codecov/codecov-action/compare/v6.0.0...v6.0.1
v6.0.0
⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️
What's Changed
- Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by
@thomasrockhu-codecovin codecov/codecov-action#1929- Th/6.0.0 by
@thomasrockhu-codecovin codecov/codecov-action#1928Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.4...v6.0.0
v5.5.5
This release only contains the keybase.io change as described here.
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.4...v5.5.5
v5.5.4
This is a mirror of
v5.5.2.v6will be released which requiresnode24What's Changed
- Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by
@thomasrockhu-codecovin codecov/codecov-action#1926- chore(release): 5.5.4 by
@thomasrockhu-codecovin codecov/codecov-action#1927
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
v5.5.2
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2
v5.5.1
What's Changed
- fix: overwrite pr number on fork by
@thomasrockhu-codecovin codecov/codecov-action#1871- build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by
@app/dependabotin codecov/codecov-action#1868- build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by
@app/dependabotin codecov/codecov-action#1867- fix: update to use local app/ dir by
@thomasrockhu-codecovin codecov/codecov-action#1872- docs: fix typo in README by
@datalaterin codecov/codecov-action#1866- Document a
codecov-cliversion reference example by@webknjazin codecov/codecov-action#1774- build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by
@app/dependabotin codecov/codecov-action#1861- build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by
@app/dependabotin codecov/codecov-action#1833Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1
v5.5.0
What's Changed
- feat: upgrade wrapper to 0.2.4 by
@jviallin codecov/codecov-action#1864- Pin actions/github-script by Git SHA by
@martincostelloin codecov/codecov-action#1859- fix: check reqs exist by
@joseph-sentryin codecov/codecov-action#1835- fix: Typo in README by
@spalmurrayin codecov/codecov-action#1838- docs: Refine OIDC docs by
@spalmurrayin codecov/codecov-action#1837- build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by
@app/dependabotin codecov/codecov-action#1829Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0
v5.4.3
What's Changed
- build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by
@app/dependabotin codecov/codecov-action#1822- fix: OIDC on forks by
@joseph-sentryin codecov/codecov-action#1823Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3
v5.4.2
... (truncated)
Commits
fb8b358chore(release): 7.0.0 (#1957)ca0a928ci: remove Enforce License Compliance workflow (#1950)e79a696chore(release): 6.0.1 (#1949)51e6422fix: prevent template injection in run: steps (VULN-1652) (#1947)57e3a13Th/6.0.0 (#1928)f67d33dRevert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0""...- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Summary by cubic
Bumps codecov/codecov-action from v5 to v7 in the CI workflow, updating the Codecov upload step.
- v6 requires Node 24, so ensure the runner supports it.
- v6.0.1 fixes a template injection vulnerability.
- v7 rotates the signing key account.