[deps]: Update gh minor

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/create-github-app-token	action	minor	v2.0.6 → v2.2.1
actions/setup-node	action	minor	v6.0.0 → v6.1.0
codecov/codecov-action	action	minor	v5.2.0 → v5.5.2
codecov/test-results-action	action	minor	v1.0.2 → v1.2.1
dorny/test-reporter	action	minor	v2.1.1 → v2.3.0	v2.5.0 (+1)
ncipollo/release-action	action	minor	v1.15.0 → v1.20.0

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v2.2.1

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 2 updates (#​311) (b212e6a)

v2.2.0

Compare Source

Bug Fixes

• deps: bump glob from 10.4.5 to 10.5.0 (#​305) (5480f43)
• deps: bump p-retry from 6.2.1 to 7.1.0 (#​294) (dce3be8)
• deps: bump the production-dependencies group with 2 updates (#​292) (55e2a4b)

Features

• update permission inputs (#​296) (d90aa53)

v2.1.4

Compare Source

Bug Fixes

• deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#​257) (bef1eaf)

v2.1.3

Compare Source

Bug Fixes

• deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#​254) (f3d5ec2)

v2.1.2

Compare Source

Bug Fixes

• deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#​256) (5d7307b)

v2.1.1

Compare Source

Bug Fixes

• revert "use node24 as runner" (#​278) (5204204), closes actions/create-github-app-token#267

v2.1.0

Compare Source

Features

• use node24 as runner (#​267) (a1cbe0f)

actions/setup-node (actions/setup-node)

v6.1.0

Compare Source

What's Changed

Enhancement:

• Remove always-auth configuration handling by @​priyagupta108 in #​1436

Dependency updates:

• Upgrade @​actions/cache from 4.0.3 to 4.1.0 by @​dependabot[bot] in #​1384
• Upgrade actions/checkout from 5 to 6 by @​dependabot[bot] in #​1439
• Upgrade js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in #​1435

Documentation update:

• Add example for restore-only cache in documentation by @​aparnajyothi-y in #​1419

Full Changelog: actions/setup-node@v6...v6.1.0

codecov/codecov-action (codecov/codecov-action)

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

Compare Source

What's Changed

• fix: overwrite pr number on fork by @​thomasrockhu-codecov in #​1871
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​app/dependabot in #​1868
• build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @​app/dependabot in #​1867
• fix: update to use local app/ dir by @​thomasrockhu-codecov in #​1872
• docs: fix typo in README by @​datalater in #​1866
• Document a codecov-cli version reference example by @​webknjaz in #​1774
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @​app/dependabot in #​1861
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​app/dependabot in #​1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

• feat: upgrade wrapper to 0.2.4 by @​jviall in #​1864
• Pin actions/github-script by Git SHA by @​martincostello in #​1859
• fix: check reqs exist by @​joseph-sentry in #​1835
• fix: Typo in README by @​spalmurray in #​1838
• docs: Refine OIDC docs by @​spalmurray in #​1837
• build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @​app/dependabot in #​1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

Compare Source

What's Changed

• build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @​app/dependabot in #​1822
• fix: OIDC on forks by @​joseph-sentry in #​1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

Compare Source

What's Changed

• fix: use the github core methods by @​thomasrockhu-codecov in #​1807
• build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @​app/dependabot in #​1803
• build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @​app/dependabot in #​1797
• build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​app/dependabot in #​1798
• chore(release): wrapper -0.2.1 by @​app/codecov-releaser-app in #​1788
• build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @​app/dependabot in #​1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

v5.4.0

Compare Source

What's Changed

• update wrapper submodule to 0.2.0, add recurse_submodules arg by @​matt-codecov in #​1780
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​app/dependabot in #​1775
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​app/dependabot in #​1776
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @​app/dependabot in #​1777
• Clarify in README that use_pypi bypasses integrity checks too by @​webknjaz in #​1773
• Fix use of safe.directory inside containers by @​Flamefire in #​1768
• Fix description for report_type input by @​craigscott-crascit in #​1770
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​app/dependabot in #​1765
• Fix a typo in the example by @​miranska in #​1758
• build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @​app/dependabot in #​1757
• build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @​app/dependabot in #​1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

v5.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

v5.3.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

codecov/test-results-action (codecov/test-results-action)

v1.2.1

Compare Source

What's Changed

• fix: deprecate this action by @​thomasrockhu-codecov in #​129
• chore(release): 1.2.1 by @​thomasrockhu-codecov in #​130

Full Changelog: codecov/test-results-action@v1.1.1...v1.2.1

v1.1.1

Compare Source

What's Changed

• fix: automatically detect arm64 by @​joseph-sentry in #​125
• fix: version info reporting by @​joseph-sentry in #​124
• fix: OIDC on forks by @​joseph-sentry in #​123
• Update README.md by @​joseph-sentry in #​122

Full Changelog: codecov/test-results-action@v1...v1.1.1

v1.1.0

Compare Source

What's Changed

• fix: trailing comma in files and flags by @​joseph-sentry in #​114
• feat: add_oidc by @​joseph-sentry in #​113

Full Changelog: codecov/test-results-action@v1...v1.1.0

v1.0.4

Compare Source

What's Changed

• feat: 'binary' argument to use a preinstalled cli executable by @​matt-codecov in #​112

New Contributors

• @​matt-codecov made their first contribution in #​112

Full Changelog: codecov/test-results-action@v1...v1.0.4

v1.0.3

Compare Source

What's Changed

• fix: support tokenless by @​joseph-sentry in #​106

Full Changelog: codecov/test-results-action@v1...v1.0.3

dorny/test-reporter (dorny/test-reporter)

v2.3.0

Compare Source

What's Changed

• Fix short summary formatting when a report title is present by @​micmarc in #​645
• Python support based on Java JUnit parser by @​micmarc in #​643
• Update sax.js to fix large XML file parsing by @​phactum-mnestler in #​681
• Enhance pytest support by @​micmarc in #​683
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​687
• Add missing golang-json reporter to action.yml by @​jozefizso in #​690
• Bump js-yaml from 3.14.0 to 3.14.2 in /reports/jest by @​dependabot[bot] in #​685
• Complete documentation for all supported reporters by @​jozefizso in #​691
• Bump js-yaml and mocha in /reports/mocha by @​dependabot[bot] in #​682

New Contributors

• @​phactum-mnestler made their first contribution in #​681

Full Changelog: dorny/test-reporter@v2.2.0...v2.3.0

v2.2.0

Compare Source

ncipollo/release-action (ncipollo/release-action)

v1.20.0

Compare Source

What's Changed

• Fixes #​542 Add previous tag option by @​ncipollo in #​550

Full Changelog: ncipollo/release-action@v1...v1.20.0

v1.19.2

Compare Source

What's Changed

• Update immutableCreate's default in the documentation by @​bblanchon in #​547
• Fixes #​548 Add support body + generated release notes by @​ncipollo in #​549

New Contributors

• @​bblanchon made their first contribution in #​547

Full Changelog: ncipollo/release-action@v1...v1.19.2

v1.19.1

Compare Source

Defaults immutableCreate to false if it is omitted.

Full Changelog: ncipollo/release-action@v1.19.0...v1.19.1

v1.19.0

Compare Source

What's Changed

• Fixes #​540 Add support for immutable releases by @​ncipollo in #​544
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​541
• Bump glob from 11.0.2 to 11.0.3 by @​dependabot[bot] in #​534

Full Changelog: ncipollo/release-action@v1...v1.19.0

v1.18.0

Compare Source

• Fixes #​529 Collect asset URLs into output

Full Changelog: ncipollo/release-action@v1...v1.18.0

v1.17.0

Compare Source

What's Changed

• Bump ts-jest from 29.2.5 to 29.2.6 by @​dependabot in #​506
• Bump @​types/node from 22.13.4 to 22.13.8 by @​dependabot in #​505
• Bump @​octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @​dependabot in #​507
• Bump @​octokit/request from 8.1.6 to 8.4.1 by @​dependabot in #​508
• Fixes #​513 Don't generate release notes if omitBody is set by @​ncipollo in #​517
• Bump typescript from 5.7.3 to 5.8.3 by @​dependabot in #​518
• Bump ts-jest from 29.2.6 to 29.3.2 by @​dependabot in #​521
• Bump glob from 11.0.1 to 11.0.2 by @​dependabot in #​520
• Bump @​types/node from 22.13.8 to 22.15.3 by @​dependabot in #​519
• Bump ts-jest from 29.3.2 to 29.3.4 by @​dependabot in #​526
• Bump @​actions/github from 6.0.0 to 6.0.1 by @​dependabot in #​525
• Bump @​types/node from 22.15.18 to 22.15.29 by @​dependabot in #​524
• Fixes #​529 Add zip and tarball urls to output

Full Changelog: ncipollo/release-action@v1...v1.17.0

v1.16.0

Compare Source

What's Changed

• Bump @​octokit/request-error from 5.0.1 to 5.1.1 by @​dependabot in #​498
• Update checkout action version in example by @​Cycloctane in #​496
• Bump undici from 5.28.4 to 5.28.5 by @​dependabot in #​499
• Bump glob from 11.0.0 to 11.0.1 by @​dependabot in #​495
• Bump @​types/node from 22.10.3 to 22.13.4 by @​dependabot in #​500
• Regenerate release notes on release updates by @​rantoniuk in #​497

New Contributors

• @​rantoniuk made their first contribution in #​497

Full Changelog: ncipollo/release-action@v1...v1.16.0

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-30017
• Link: https://bitwarden.atlassian.net/browse/PM-30017

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 16.01%. Comparing base (321db6e) to head (72a4156).
⚠️ Report is 5 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff            @@
##            main     #955      +/-   ##
=========================================
+ Coverage   6.87%   16.01%   +9.13%     
=========================================
  Files         67       67              
  Lines       2791     2791              
  Branches     481      481              
=========================================
+ Hits         192      447     +255     
+ Misses      2585     2306     -279     
- Partials      14       38      +24     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[eliykat]

No breaking changes detected. I have created a follow-up ticket to remove the deprecated test-results-action here: https://bitwarden.atlassian.net/browse/PM-30556