chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	minor	v4.2.0 -> v4.4.0
codecov/codecov-action	action	minor	v5 -> v5.4.3

---

Release Notes

actions/setup-node (actions/setup-node)

v4.4.0

Compare Source

What's Changed

Bug fixes:

• Make eslint-compact matcher compatible with Stylelint by @​FloEdelmann in https://github.com/actions/setup-node/pull/98
• Add support for indented eslint output by @​fregante in https://github.com/actions/setup-node/pull/1245

Enhancement:

• Support private mirrors by @​marco-ippolito in https://github.com/actions/setup-node/pull/1240

Dependency update:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in https://github.com/actions/setup-node/pull/1262

New Contributors

• @​FloEdelmann made their first contribution in https://github.com/actions/setup-node/pull/98
• @​fregante made their first contribution in https://github.com/actions/setup-node/pull/1245
• @​marco-ippolito made their first contribution in https://github.com/actions/setup-node/pull/1240

Full Changelog: actions/setup-node@v4...v4.4.0

v4.3.0

Compare Source

What's Changed

Dependency updates

• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/actions/setup-node/pull/1200
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​gowridurgad in https://github.com/actions/setup-node/pull/1251
• Upgrade @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in https://github.com/actions/setup-node/pull/1203
• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot in https://github.com/actions/setup-node/pull/1220

New Contributors

• @​gowridurgad made their first contribution in https://github.com/actions/setup-node/pull/1251

Full Changelog: actions/setup-node@v4...v4.3.0

codecov/codecov-action (codecov/codecov-action)

v5.4.3

Compare Source

What's Changed

• build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1822
• fix: OIDC on forks by @​joseph-sentry in https://github.com/codecov/codecov-action/pull/1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

Compare Source

What's Changed

• fix: use the github core methods by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1807
• build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1803
• build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1797
• build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1798
• chore(release): wrapper -0.2.1 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1788
• build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

v5.4.0

Compare Source

What's Changed

• update wrapper submodule to 0.2.0, add recurse_submodules arg by @​matt-codecov in https://github.com/codecov/codecov-action/pull/1780
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1775
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1776
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1777
• Clarify in README that use_pypi bypasses integrity checks too by @​webknjaz in https://github.com/codecov/codecov-action/pull/1773
• Fix use of safe.directory inside containers by @​Flamefire in https://github.com/codecov/codecov-action/pull/1768
• Fix description for report_type input by @​craigscott-crascit in https://github.com/codecov/codecov-action/pull/1770
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1765
• Fix a typo in the example by @​miranska in https://github.com/codecov/codecov-action/pull/1758
• build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1757
• build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

v5.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

v5.3.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

v5.2.0

Compare Source

What's Changed

• Fix typo in README by @​tserg in https://github.com/codecov/codecov-action/pull/1747
• Th/add commands by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1745
• use correct audience when requesting oidc token by @​juho9000 in https://github.com/codecov/codecov-action/pull/1744
• build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1742
• build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1743
• chore(deps): bump wrapper to 0.0.32 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1740
• feat: add disable-telem feature by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1739
• fix: remove erroneous linebreak in readme by @​Vampire in https://github.com/codecov/codecov-action/pull/1734

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0

v5.1.2

Compare Source

What's Changed

• fix: update statment by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1726
• fix: update action script by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1725
• fix: prevent oidc on tokenless due to permissioning by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1724
• chore(release): wrapper-0.0.31 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1723
• Put quotes around ${{ inputs.token }} in action.yml by @​jwodder in https://github.com/codecov/codecov-action/pull/1721
• build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1722
• Remove mistake from options table by @​Acconut in https://github.com/codecov/codecov-action/pull/1718
• build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1717

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.1..v5.1.2

v5.1.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.0..v5.1.1

v5.1.0

Compare Source

What's Changed

• fix: hide unnecessary error on shasum by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1692
• build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1701
• chore(release): wrapper-0.0.29 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1713

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.7..v5.1.0

v5.0.7

Compare Source

What's Changed

• fix: use HEAD_REPO by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1690

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.6..v5.0.7

v5.0.6

Compare Source

What's Changed

• fix: update CODECOV_TOKEN and fix tokenless by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1688

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.5..v5.0.6

v5.0.5

Compare Source

What's Changed

• chore(release): wrapper-0.0.27 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1685

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.4..v5.0.5

v5.0.4

Compare Source

What's Changed

• chore(deps): bump wrapper to 0.0.26 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1681
• fix: strip out a trailing /n from input tokens by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1679
• fix: add action version by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1678

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.3..v5.0.4

v5.0.3

Compare Source

What's Changed

• fix: update OIDC audience by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1675
• fix: use double-quotes for OIDC by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1669
• fix: prevent always setting tokenless to be true by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1673
• fix: update CHANGELOG and automate by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1674
• fix: bump to v5 and update README by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1655
• build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1665
• fix: typo in inputs.disable_safe_directory by @​mkroening in https://github.com/codecov/codecov-action/pull/1666

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.2..v5.0.3

v5.0.2

Compare Source

What's Changed

• fix: override commit and pr values for PR cases by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1657

Full Changelog: codecov/codecov-action@v5.0.1...v5.0.2

v5.0.1

Compare Source

What's Changed

• fix: use marketplace v5 badge by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1646
• fix: update tokenless branch logic by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1650
• chore(release): 5.0.1 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1656

Full Changelog: codecov/codecov-action@v5.0.0...v5.0.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Explain this complex logic.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai explain this code block.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and explain its main purpose.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

📢 Thoughts on this report? Let us know!