chore(release): 7.0.0#1957
Merged
Merged
Conversation
jason-ford-codecov
approved these changes
Jun 7, 2026
Bump the wrapper submodule (src/scripts) to the latest main (bad8df5), which fetches the Codecov Uploader PGP key from the codecovsecops Keybase account, and cut a new major version. Co-authored-by: Cursor <cursoragent@cursor.com>
thomasrockhu-codecov
force-pushed
the
th/v7-wrapper-bump
branch
from
e6f5d35 to
6d497bb
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1957 +/- ##
=======================================
Coverage 97.14% 97.14%
=======================================
Files 2 2
Lines 35 35
=======================================
Hits 34 34
Misses 1 1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. |
mergify Bot
added a commit
to ArcadeData/arcadedb
that referenced
this pull request
Jun 7, 2026
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0. Release notes *Sourced from [codecov/codecov-action's releases](https://github.com/codecov/codecov-action/releases).* > v7.0.0 > ------ > >⚠️ Due to migration issues with keybase, we are unable to update our keys under the `codecovsecurity` account. We have deleted the account and are using `codecovsecops` with the original gpg key > > What's Changed > -------------- > > * ci: remove Enforce License Compliance workflow by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1950](https://redirect.github.com/codecov/codecov-action/pull/1950) > * chore(release): 7.0.0 by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1957](https://redirect.github.com/codecov/codecov-action/pull/1957) > > **Full Changelog**: <codecov/codecov-action@v6.0.1...v7.0.0> > > v6.0.2 > ------ > > This is a copy of the `v7.0.0` release to make updates easier > > What's Changed > -------------- > > * ci: remove Enforce License Compliance workflow by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1950](https://redirect.github.com/codecov/codecov-action/pull/1950) > * chore(release): 7.0.0 by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1957](https://redirect.github.com/codecov/codecov-action/pull/1957) > > **Full Changelog**: <codecov/codecov-action@v6.0.1...v6.0.2> Changelog *Sourced from [codecov/codecov-action's changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md).* > v5.5.2 > ------ > > ### What's Changed > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2> > > v5.5.1 > ------ > > ### What's Changed > > * fix: overwrite pr number on fork by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1871](https://redirect.github.com/codecov/codecov-action/pull/1871) > * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by `@app/dependabot` in [codecov/codecov-action#1868](https://redirect.github.com/codecov/codecov-action/pull/1868) > * build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by `@app/dependabot` in [codecov/codecov-action#1867](https://redirect.github.com/codecov/codecov-action/pull/1867) > * fix: update to use local app/ dir by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1872](https://redirect.github.com/codecov/codecov-action/pull/1872) > * docs: fix typo in README by [`@datalater`](https://github.com/datalater) in [codecov/codecov-action#1866](https://redirect.github.com/codecov/codecov-action/pull/1866) > * Document a `codecov-cli` version reference example by [`@webknjaz`](https://github.com/webknjaz) in [codecov/codecov-action#1774](https://redirect.github.com/codecov/codecov-action/pull/1774) > * build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by `@app/dependabot` in [codecov/codecov-action#1861](https://redirect.github.com/codecov/codecov-action/pull/1861) > * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by `@app/dependabot` in [codecov/codecov-action#1833](https://redirect.github.com/codecov/codecov-action/pull/1833) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1> > > v5.5.0 > ------ > > ### What's Changed > > * feat: upgrade wrapper to 0.2.4 by [`@jviall`](https://github.com/jviall) in [codecov/codecov-action#1864](https://redirect.github.com/codecov/codecov-action/pull/1864) > * Pin actions/github-script by Git SHA by [`@martincostello`](https://github.com/martincostello) in [codecov/codecov-action#1859](https://redirect.github.com/codecov/codecov-action/pull/1859) > * fix: check reqs exist by [`@joseph-sentry`](https://github.com/joseph-sentry) in [codecov/codecov-action#1835](https://redirect.github.com/codecov/codecov-action/pull/1835) > * fix: Typo in README by [`@spalmurray`](https://github.com/spalmurray) in [codecov/codecov-action#1838](https://redirect.github.com/codecov/codecov-action/pull/1838) > * docs: Refine OIDC docs by [`@spalmurray`](https://github.com/spalmurray) in [codecov/codecov-action#1837](https://redirect.github.com/codecov/codecov-action/pull/1837) > * build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by `@app/dependabot` in [codecov/codecov-action#1829](https://redirect.github.com/codecov/codecov-action/pull/1829) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0> > > v5.4.3 > ------ > > ### What's Changed > > * build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by `@app/dependabot` in [codecov/codecov-action#1822](https://redirect.github.com/codecov/codecov-action/pull/1822) > * fix: OIDC on forks by [`@joseph-sentry`](https://github.com/joseph-sentry) in [codecov/codecov-action#1823](https://redirect.github.com/codecov/codecov-action/pull/1823) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3> > > v5.4.2 > ------ ... (truncated) Commits * [`fb8b358`](codecov/codecov-action@fb8b358) chore(release): 7.0.0 ([#1957](https://redirect.github.com/codecov/codecov-action/issues/1957)) * [`ca0a928`](codecov/codecov-action@ca0a928) ci: remove Enforce License Compliance workflow ([#1950](https://redirect.github.com/codecov/codecov-action/issues/1950)) * See full diff in [compare view](codecov/codecov-action@e79a696...fb8b358) [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
jaredallard
pushed a commit
to rgst-io/stencil
that referenced
this pull request
Jun 8, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [codecov/codecov-action](https://github.com/codecov/codecov-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v7.0.0`](https://github.com/codecov/codecov-action/releases/tag/v7.0.0) [Compare Source](codecov/codecov-action@v7.0.0...v7.0.0)⚠️ Due to migration issues with keybase, we are unable to update our keys under the `codecovsecurity` account. We have deleted the account and are using `codecovsecops` with the original gpg key #### What's Changed - ci: remove Enforce License Compliance workflow by [@​thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [#​1950](codecov/codecov-action#1950) - chore(release): 7.0.0 by [@​thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [#​1957](codecov/codecov-action#1957) **Full Changelog**: <codecov/codecov-action@v6.0.1...v7.0.0> ### [`v7`](codecov/codecov-action@v6...v7) [Compare Source](codecov/codecov-action@v6.0.2...v7.0.0) ### [`v6.0.2`](https://github.com/codecov/codecov-action/releases/tag/v6.0.2) [Compare Source](codecov/codecov-action@v6.0.1...v6.0.2) This is a copy of the `v7.0.0` release to make updates easier #### What's Changed - ci: remove Enforce License Compliance workflow by [@​thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [#​1950](codecov/codecov-action#1950) - chore(release): 7.0.0 by [@​thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [#​1957](codecov/codecov-action#1957) **Full Changelog**: <codecov/codecov-action@v6.0.1...v6.0.2> ### [`v6.0.1`](https://github.com/codecov/codecov-action/releases/tag/v6.0.1) [Compare Source](codecov/codecov-action@v6...v6.0.1) #### What's Changed - fix: prevent template injection in run: steps (VULN-1652) by [@​thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [#​1947](codecov/codecov-action#1947) - chore(release): 6.0.1 by [@​thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [#​1949](codecov/codecov-action#1949) **Full Changelog**: <codecov/codecov-action@v6.0.0...v6.0.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjIwNS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://git.rgst.io/rgst-io/stencil/pulls/14
This was referenced Jun 8, 2026
Merged
feat(ci): add release safety gates for alpha-to-stable publish flow (part 2)
thomas3577/DenoHost#120
Merged
This was referenced Jun 15, 2026
Merged
3 tasks
tae898
pushed a commit
to humemai/arcadedb-embedded-python
that referenced
this pull request
Jun 28, 2026
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0. Release notes *Sourced from [codecov/codecov-action's releases](https://github.com/codecov/codecov-action/releases).* > v7.0.0 > ------ > >⚠️ Due to migration issues with keybase, we are unable to update our keys under the `codecovsecurity` account. We have deleted the account and are using `codecovsecops` with the original gpg key > > What's Changed > -------------- > > * ci: remove Enforce License Compliance workflow by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1950](https://redirect.github.com/codecov/codecov-action/pull/1950) > * chore(release): 7.0.0 by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1957](https://redirect.github.com/codecov/codecov-action/pull/1957) > > **Full Changelog**: <codecov/codecov-action@v6.0.1...v7.0.0> > > v6.0.2 > ------ > > This is a copy of the `v7.0.0` release to make updates easier > > What's Changed > -------------- > > * ci: remove Enforce License Compliance workflow by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1950](https://redirect.github.com/codecov/codecov-action/pull/1950) > * chore(release): 7.0.0 by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1957](https://redirect.github.com/codecov/codecov-action/pull/1957) > > **Full Changelog**: <codecov/codecov-action@v6.0.1...v6.0.2> Changelog *Sourced from [codecov/codecov-action's changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md).* > v5.5.2 > ------ > > ### What's Changed > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2> > > v5.5.1 > ------ > > ### What's Changed > > * fix: overwrite pr number on fork by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1871](https://redirect.github.com/codecov/codecov-action/pull/1871) > * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by `@app/dependabot` in [codecov/codecov-action#1868](https://redirect.github.com/codecov/codecov-action/pull/1868) > * build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by `@app/dependabot` in [codecov/codecov-action#1867](https://redirect.github.com/codecov/codecov-action/pull/1867) > * fix: update to use local app/ dir by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1872](https://redirect.github.com/codecov/codecov-action/pull/1872) > * docs: fix typo in README by [`@datalater`](https://github.com/datalater) in [codecov/codecov-action#1866](https://redirect.github.com/codecov/codecov-action/pull/1866) > * Document a `codecov-cli` version reference example by [`@webknjaz`](https://github.com/webknjaz) in [codecov/codecov-action#1774](https://redirect.github.com/codecov/codecov-action/pull/1774) > * build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by `@app/dependabot` in [codecov/codecov-action#1861](https://redirect.github.com/codecov/codecov-action/pull/1861) > * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by `@app/dependabot` in [codecov/codecov-action#1833](https://redirect.github.com/codecov/codecov-action/pull/1833) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1> > > v5.5.0 > ------ > > ### What's Changed > > * feat: upgrade wrapper to 0.2.4 by [`@jviall`](https://github.com/jviall) in [codecov/codecov-action#1864](https://redirect.github.com/codecov/codecov-action/pull/1864) > * Pin actions/github-script by Git SHA by [`@martincostello`](https://github.com/martincostello) in [codecov/codecov-action#1859](https://redirect.github.com/codecov/codecov-action/pull/1859) > * fix: check reqs exist by [`@joseph-sentry`](https://github.com/joseph-sentry) in [codecov/codecov-action#1835](https://redirect.github.com/codecov/codecov-action/pull/1835) > * fix: Typo in README by [`@spalmurray`](https://github.com/spalmurray) in [codecov/codecov-action#1838](https://redirect.github.com/codecov/codecov-action/pull/1838) > * docs: Refine OIDC docs by [`@spalmurray`](https://github.com/spalmurray) in [codecov/codecov-action#1837](https://redirect.github.com/codecov/codecov-action/pull/1837) > * build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by `@app/dependabot` in [codecov/codecov-action#1829](https://redirect.github.com/codecov/codecov-action/pull/1829) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0> > > v5.4.3 > ------ > > ### What's Changed > > * build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by `@app/dependabot` in [codecov/codecov-action#1822](https://redirect.github.com/codecov/codecov-action/pull/1822) > * fix: OIDC on forks by [`@joseph-sentry`](https://github.com/joseph-sentry) in [codecov/codecov-action#1823](https://redirect.github.com/codecov/codecov-action/pull/1823) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3> > > v5.4.2 > ------ ... (truncated) Commits * [`fb8b358`](codecov/codecov-action@fb8b358) chore(release): 7.0.0 ([ArcadeData#1957](https://redirect.github.com/codecov/codecov-action/issues/1957)) * [`ca0a928`](codecov/codecov-action@ca0a928) ci: remove Enforce License Compliance workflow ([ArcadeData#1950](https://redirect.github.com/codecov/codecov-action/issues/1950)) * See full diff in [compare view](codecov/codecov-action@e79a696...fb8b358) [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
cxzhong
pushed a commit
to cxzhong/sage
that referenced
this pull request
Jul 5, 2026
sagemathgh-42452: build(deps): bump codecov/codecov-action from 5 to 7 Bumps [codecov/codecov-action](https://github.com/codecov/codecov- action) from 5 to 7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov- action/releases">codecov/codecov-action's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <p>⚠️ Due to migration issues with keybase, we are unable to update our keys under the <code>codecovsecurity</code> account. We have deleted the account and are using <code>codecovsecops</code> with the original gpg key</p> <h2>What's Changed</h2> <ul> <li>ci: remove Enforce License Compliance workflow by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu- codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1950">codecov/codecov-action#1950</a></li> <li>chore(release): 7.0.0 by <a href="https://github.com/thomasrockhu- codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1957">codecov/codecov-action#1957</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v6.0.1...v7.0.0">https://github.com/codecov/codecov- action/compare/v6.0.1...v7.0.0</a></p> <h2>v6.0.2</h2> <p>This is a copy of the <code>v7.0.0</code> release to make updates easier</p> <h2>What's Changed</h2> <ul> <li>ci: remove Enforce License Compliance workflow by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu- codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1950">codecov/codecov-action#1950</a></li> <li>chore(release): 7.0.0 by <a href="https://github.com/thomasrockhu- codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1957">codecov/codecov-action#1957</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v6.0.1...v6.0.2">https://github.com/codecov/codecov- action/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>fix: prevent template injection in run: steps (VULN-1652) by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu- codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1947">codecov/codecov-action#1947</a></li> <li>chore(release): 6.0.1 by <a href="https://github.com/thomasrockhu- codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1949">codecov/codecov-action#1949</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v6.0.0...v6.0.1">https://github.com/codecov/codecov- action/compare/v6.0.0...v6.0.1</a></p> <h2>v6.0.0</h2> <h2>⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24.⚠️ </h2> <h2>What's Changed</h2> <ul> <li>Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu- codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1929">codecov/codecov-action#1929</a></li> <li>Th/6.0.0 by <a href="https://github.com/thomasrockhu- codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1928">codecov/codecov-action#1928</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v5.5.4...v6.0.0">https://github.com/codecov/codecov- action/compare/v5.5.4...v6.0.0</a></p> <h2>v5.5.5</h2> <p>This release only contains the keybase.io change as described <a href="https://redirect.github.com/codecov/codecov- action/issues/1956">here</a>.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v5.5.4...v5.5.5">https://github.com/codecov/codecov- action/compare/v5.5.4...v5.5.5</a></p> <h2>v5.5.4</h2> <p>This is a mirror of <code>v5.5.2</code>. <code>v6</code> will be released which requires <code>node24</code></p> <h2>What's Changed</h2> <ul> <li>Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by <a href="https://github.com/thomasrockhu- codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1926">codecov/codecov-action#1926</a></li> <li>chore(release): 5.5.4 by <a href="https://github.com/thomasrockhu- codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1927">codecov/codecov-action#1927</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov- action/blob/main/CHANGELOG.md">codecov/codecov-action's changelog</a>.</em></p> <blockquote> <h2>v5.5.2</h2> <h3>What's Changed</h3> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v5.5.1..v5.5.2">https://github.com/codecov/codecov- action/compare/v5.5.1..v5.5.2</a></p> <h2>v5.5.1</h2> <h3>What's Changed</h3> <ul> <li>fix: overwrite pr number on fork by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu- codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1871">codecov/codecov-action#1871</a></li> <li>build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1868">codecov/codecov-action#1868</a></li> <li>build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1867">codecov/codecov-action#1867</a></li> <li>fix: update to use local app/ dir by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu- codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1872">codecov/codecov-action#1872</a></li> <li>docs: fix typo in README by <a href="https://github.com/datalater"><code>@datalater</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1866">codecov/codecov-action#1866</a></li> <li>Document a <code>codecov-cli</code> version reference example by <a href="https://github.com/webknjaz"><code>@webknjaz</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1774">codecov/codecov-action#1774</a></li> <li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1861">codecov/codecov-action#1861</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1833">codecov/codecov-action#1833</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v5.5.0..v5.5.1">https://github.com/codecov/codecov- action/compare/v5.5.0..v5.5.1</a></p> <h2>v5.5.0</h2> <h3>What's Changed</h3> <ul> <li>feat: upgrade wrapper to 0.2.4 by <a href="https://github.com/jviall"><code>@jviall</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1864">codecov/codecov-action#1864</a></li> <li>Pin actions/github-script by Git SHA by <a href="https://github.com/ martincostello"><code>@martincostello</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1859">codecov/codecov-action#1859</a></li> <li>fix: check reqs exist by <a href="https://github.com/joseph- sentry"><code>@joseph-sentry</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1835">codecov/codecov-action#1835</a></li> <li>fix: Typo in README by <a href="https://github.com/spalmurray"><code>@spalmurray</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1838">codecov/codecov-action#1838</a></li> <li>docs: Refine OIDC docs by <a href="https://github.com/spalmurray"><code>@spalmurray</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1837">codecov/codecov-action#1837</a></li> <li>build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1829">codecov/codecov-action#1829</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v5.4.3..v5.5.0">https://github.com/codecov/codecov- action/compare/v5.4.3..v5.5.0</a></p> <h2>v5.4.3</h2> <h3>What's Changed</h3> <ul> <li>build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1822">codecov/codecov-action#1822</a></li> <li>fix: OIDC on forks by <a href="https://github.com/joseph- sentry"><code>@joseph-sentry</code></a> in <a href="https://redirect.github.com/codecov/codecov- action/pull/1823">codecov/codecov-action#1823</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov- action/compare/v5.4.2..v5.4.3">https://github.com/codecov/codecov- action/compare/v5.4.2..v5.4.3</a></p> <h2>v5.4.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="codecov/codecov-action@fb8b3582c8 e4def4969c97caa2f19720cb33a72f"><code>fb8b358</code></a> chore(release): 7.0.0 (<a href="https://redirect.github.com/codecov/codecov- action/issues/1957">sagemath#1957</a>)</li> <li><a href="codecov/codecov-action@ca0a928a4c b3911011e868128a5cd90437c12db1"><code>ca0a928</code></a> ci: remove Enforce License Compliance workflow (<a href="https://redirect.github.com/codecov/codecov- action/issues/1950">sagemath#1950</a>)</li> <li><a href="codecov/codecov-action@e79a6962e0 d4c0c17b229090214935d2e33f8354"><code>e79a696</code></a> chore(release): 6.0.1 (<a href="https://redirect.github.com/codecov/codecov- action/issues/1949">sagemath#1949</a>)</li> <li><a href="codecov/codecov-action@51e64229ac 331acb0d7f7b17c67423995f991c79"><code>51e6422</code></a> fix: prevent template injection in run: steps (VULN-1652) (<a href="https://redirect.github.com/codecov/codecov- action/issues/1947">sagemath#1947</a>)</li> <li><a href="codecov/codecov-action@57e3a136b7 79b570ffcdbf80b3bdc90e7fab3de2"><code>57e3a13</code></a> Th/6.0.0 (<a href="https://redirect.github.com/codecov/codecov- action/issues/1928">sagemath#1928</a>)</li> <li><a href="codecov/codecov-action@f67d33dda8 a42b51c42a8318a1f66468119e898b"><code>f67d33d</code></a> Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0""...</li> <li>See full diff in <a href="https://github.com/codecov/codecov- action/compare/v5...v7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing- security-vulnerabilities/about-dependabot-security-updates#about- compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> URL: sagemath#42452 Reported by: dependabot[bot] Reviewer(s): Chenxin Zhong
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
src/scripts473e292→bad8df5(latestcodecov/wrappermain). This pulls in the switch to fetching the Codecov Uploader PGP key from thecodecovsecopsKeybase account (the pin was 12 commits behind).6.0.1→7.0.0insrc/version.Makefiledeploy tagsv6→v7and add a## v7 Releasenote toREADME.md.Why a submodule bump was needed
git submodule update --init --recursiveonly checks out the commit pinned in this repo's tree, not the tip of the wrapper'smain. The pin had drifted 12 commits behind, so this records the new pointer (bad8df5) that everyone/CI will now check out.Test plan
git submodule update --init --recursivechecks outbad8df5undersrc/scripts.codecovsecopsand verifies the CLISHA256SUMsignature.make deployretagsv7/v7.0.0after merge.Made with Cursor