Skip to content

chore(deps): bump codecov/codecov-action from 4.6.0 to 5.5.2#437

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/codecov/codecov-action-5.5.2
Open

chore(deps): bump codecov/codecov-action from 4.6.0 to 5.5.2#437
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/codecov/codecov-action-5.5.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps codecov/codecov-action from 4.6.0 to 5.5.2.

Release notes

Sourced from codecov/codecov-action's releases.

v5.5.2

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.1...v5.5.2

v5.5.1

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.0...v5.5.1

v5.5.0

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.4.3...v5.5.0

v5.4.3

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4.6.0 to 5.5.2.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@b9fd7d1...671740a)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 9, 2026
@dependabot dependabot bot requested a review from vitali87 as a code owner March 9, 2026 01:38
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 9, 2026
@greptile-apps
Copy link
Contributor

greptile-apps bot commented Mar 9, 2026

Greptile Summary

This PR is a routine Dependabot dependency bump of codecov/codecov-action from v4.6.0 (SHA b9fd7d16) to v5.5.2 (SHA 671740ac38dd9b0130fbe1cec585b89eea48d3de) in the CI workflow. The update is applied to both the unit test and integration test coverage upload steps.

  • The SHA pin is updated correctly to match the v5.5.2 release tag, maintaining the security best-practice of pinning actions to a full commit SHA.
  • All existing input parameters used (files, flags, fail_ci_if_error, token) are fully compatible with v5, requiring no configuration changes.
  • The comment annotation is updated from # v4 to # v5.5.2 for clarity.
  • No application code is touched; the change is entirely contained within the CI configuration.

Confidence Score: 5/5

  • This PR is safe to merge — it is a minimal, well-scoped Dependabot version bump with no application code changes.
  • The change is a single-action version bump across two lines in a CI workflow file. The SHA is correctly pinned to the v5.5.2 release commit, all existing inputs are v5-compatible, and Dependabot's compatibility score for this update is published. There are no logic, security, or compatibility concerns.
  • No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/ci.yml Bumps codecov/codecov-action from v4 (SHA b9fd7d16) to v5.5.2 (SHA 671740ac) in both the unit test and integration test jobs; all existing input parameters (files, flags, fail_ci_if_error, token) remain compatible with v5.

Sequence Diagram

sequenceDiagram
    participant GH as GitHub Actions
    participant UT as test-unit job
    participant IT as test-integration job
    participant CC as codecov/codecov-action@v5.5.2
    participant CV as Codecov Service

    GH->>UT: Trigger (push/PR)
    UT->>UT: Run pytest (macos-latest only, with coverage)
    UT->>CC: Upload coverage.xml (flags: unit-macos-latest)
    CC->>CV: POST coverage report + token

    GH->>IT: Trigger (push/PR)
    IT->>IT: Run pytest integration tests (with coverage)
    IT->>CC: Upload coverage.xml (flags: integration-ubuntu-latest)
    CC->>CV: POST coverage report + token
Loading

Last reviewed commit: e1f8008

@codecov-commenter
Copy link

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 9, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

1 participant