Skip to content

chore(deps): bump codecov/codecov-action from 4.6.0 to 5.5.2#437

Merged
vitali87 merged 1 commit intomainfrom
dependabot/github_actions/codecov/codecov-action-5.5.2
Mar 21, 2026
Merged

chore(deps): bump codecov/codecov-action from 4.6.0 to 5.5.2#437
vitali87 merged 1 commit intomainfrom
dependabot/github_actions/codecov/codecov-action-5.5.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps codecov/codecov-action from 4.6.0 to 5.5.2.

Release notes

Sourced from codecov/codecov-action's releases.

v5.5.2

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.1...v5.5.2

v5.5.1

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.0...v5.5.1

v5.5.0

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.4.3...v5.5.0

v5.4.3

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4.6.0 to 5.5.2.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@b9fd7d1...671740a)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 9, 2026
@dependabot dependabot bot requested a review from vitali87 as a code owner March 9, 2026 01:38
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 9, 2026
@greptile-apps
Copy link
Contributor

greptile-apps bot commented Mar 9, 2026

Greptile Summary

This PR is a routine Dependabot dependency bump of codecov/codecov-action from v4.6.0 (SHA b9fd7d16) to v5.5.2 (SHA 671740ac38dd9b0130fbe1cec585b89eea48d3de) in the CI workflow. The update is applied to both the unit test and integration test coverage upload steps.

  • The SHA pin is updated correctly to match the v5.5.2 release tag, maintaining the security best-practice of pinning actions to a full commit SHA.
  • All existing input parameters used (files, flags, fail_ci_if_error, token) are fully compatible with v5, requiring no configuration changes.
  • The comment annotation is updated from # v4 to # v5.5.2 for clarity.
  • No application code is touched; the change is entirely contained within the CI configuration.

Confidence Score: 5/5

  • This PR is safe to merge — it is a minimal, well-scoped Dependabot version bump with no application code changes.
  • The change is a single-action version bump across two lines in a CI workflow file. The SHA is correctly pinned to the v5.5.2 release commit, all existing inputs are v5-compatible, and Dependabot's compatibility score for this update is published. There are no logic, security, or compatibility concerns.
  • No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/ci.yml Bumps codecov/codecov-action from v4 (SHA b9fd7d16) to v5.5.2 (SHA 671740ac) in both the unit test and integration test jobs; all existing input parameters (files, flags, fail_ci_if_error, token) remain compatible with v5.

Sequence Diagram

sequenceDiagram
    participant GH as GitHub Actions
    participant UT as test-unit job
    participant IT as test-integration job
    participant CC as codecov/codecov-action@v5.5.2
    participant CV as Codecov Service

    GH->>UT: Trigger (push/PR)
    UT->>UT: Run pytest (macos-latest only, with coverage)
    UT->>CC: Upload coverage.xml (flags: unit-macos-latest)
    CC->>CV: POST coverage report + token

    GH->>IT: Trigger (push/PR)
    IT->>IT: Run pytest integration tests (with coverage)
    IT->>CC: Upload coverage.xml (flags: integration-ubuntu-latest)
    CC->>CV: POST coverage report + token
Loading

Last reviewed commit: e1f8008

@codecov-commenter
Copy link

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 9, 2026

@vitali87 vitali87 merged commit 7500c68 into main Mar 21, 2026
23 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/codecov/codecov-action-5.5.2 branch March 21, 2026 22:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants