Bump codecov/codecov-action from 4 to 7#423
Conversation
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 7. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v4...v7) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Nah, that's just a mis-configured use of the org-level codecov key in their workflow. Tests already pass here, which means everything works, so this should be fine. A 4 -> 7 jump is pretty big, and should be pulled in here, I'd say |
|
mmm... I checked, and it fails for any codecov-action version > 4 https://github.com/ropensci/osmapiR/actions/workflows/test-coverage.yaml It's not an error in PR, but it is on main due to but still failing in this PR (https://github.com/ropensci/osmdata/actions/runs/27565108036/job/81486921813?pr=423#step:6:353) |
|
I've got it updated to v6 in several of my repos, and that all seems to work fine. I actually don't yet have any v7 running. Maybe manually update to v6 to see what happens, and just merge that if it works? But your osmapiR failures do seem concerning - I note that the org-level token hasn't been updated in 2 years. I'll ask around internally and get back to you, but unlikely to get answers before Friday at the earliest. |
|
The problem was deprecated parameters. Fixed now |
dependabot
Bot
deleted the
dependabot/github_actions/codecov/codecov-action-7
branch
2 participants
Bumps codecov/codecov-action from 4 to 7.
Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
fb8b358chore(release): 7.0.0 (#1957)ca0a928ci: remove Enforce License Compliance workflow (#1950)e79a696chore(release): 6.0.1 (#1949)51e6422fix: prevent template injection in run: steps (VULN-1652) (#1947)57e3a13Th/6.0.0 (#1928)f67d33dRevert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0""...75cd116chore(release): 5.5.4 (#1927)87d39f4Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" (#1926)1af5884chore(release): bump to 5.5.3 (#1922)c143300build(deps): bump actions/github-script from 7.0.1 to 8.0.0 (#1874)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)