⬆️ actions(deps): bump codecov/codecov-action from 4 to 5#3
⬆️ actions(deps): bump codecov/codecov-action from 4 to 5#3dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v4...v5) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
AssigneesThe following users could not be added as assignees: Please fix the above issues or remove invalid values from |
dependabot
bot
added
dependencies
democratize-technology-code-reviewer
left a comment
democratize-technology-code-reviewer
left a comment
There was a problem hiding this comment.
Review: codecov/codecov-action v4 → v5
Summary
Dependabot update for codecov/codecov-action from v4 to v5. Only affects the test workflow's coverage upload step.
Key Changes in v5:
- Uses new Codecov Wrapper for faster updates
- Breaking:
fileparameter deprecated → usefiles - Breaking:
pluginparameter deprecated → useplugins - New opt-out feature for tokens in public repos
- New parameters:
binary,gcov_args,gcov_executable,gcov_ignore,gcov_include,report_type,skip_validation,swift_project
Current Usage Analysis:
uses: codecov/codecov-action@v5
with:
file: ./coverage.xml # ⚠️ Should be 'files'
fail_ci_if_error: true🚨 Issue Found: The PR still uses the deprecated file parameter instead of files.
Risk Assessment: MEDIUM ⚠️
While this is a routine update, the current configuration uses a deprecated parameter that needs fixing.
Verdict: REQUEST CHANGES ❌
Required Fix:
Change line 112 in .github/workflows/test.yml:
# From:
file: ./coverage.xml
# To:
files: ./coverage.xmlThe migration to v5 is good, but we need to update the parameter name to avoid potential issues. Please update the workflow to use the new files parameter.
| uses: codecov/codecov-action@v4 | ||
| uses: codecov/codecov-action@v5 | ||
| with: | ||
| file: ./coverage.xml |
There was a problem hiding this comment.
file parameter is deprecated in v5. Please change this to:
files: ./coverage.xmlThis is a breaking change in codecov-action v5 that must be addressed for the action to work correctly.
1 participant
Bumps codecov/codecov-action from 4 to 5.
Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
5a10915chore(release): 5.5.1 (#1873)3e0ce21fix: overwrite pr number on fork (#1871)c4741c8build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1868)17370e8build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 (#1867)18fdacffix: update to use local app/ dir (#1872)206148cdocs: fix typo in README (#1866)3cb13a1Document acodecov-cliversion reference example (#1774)a4803c1build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 (#1861)3139621build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#1833)fdcc847chore(release): 5.5.0 (#1865)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)