Bump codecov/codecov-action from 3 to 5 #1425
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=80&v=4){kind=small}
dependabot
bot
added
dependencies
Blocked until a
|
|
It seems that the token is, indeed, needed [0], but I'm not sure it will fix the case for dependabot PRs [1] 0: https://github.com/jazzband/django-simple-history/actions/runs/10800665227/job/29959181399 |
|
Regarding your second point ([1]), I think that's fixed by simply adding (Dependabot accessing the Dependabot secrets was apparently not a feature at the time the issue comment you linked was written, but it's mentioned in the second bullet point of this comment, and announced a little over a month later.) |
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 5. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v3...v5) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Also added Codecov token, as token-less uploading is unsupported from v4 - see https://github.com/codecov/codecov-action/blob/v5/CHANGELOG.md#v400 Co-authored-by: Anders <[email protected]>
ddabble
force-pushed
the
dependabot/github_actions/codecov/codecov-action-5
branch
from
2d2e48b to
3ecfcde
Compare
|
Added a |
2 participants
Bumps codecov/codecov-action from 3 to 5.
Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
015f24echore(release): 5.0.7 (#1691)a76271dfix: use HEAD_REPO (#1690)d168679chore(release): 5.0.6 (#1689)373fd71fix: update CODECOV_TOKEN and fix tokenless (#1688)288befbchore(release): 5.0.5 (#1686)7e69d37chore(release): wrapper-0.0.27 (#1685)985343dchore(release): 5.0.4 (#1682)31d1900chore(deps): bump wrapper to 0.0.26 (#1681)095cfe0fix: strip out a trailing /n from input tokens (#1679)b542d5afix: add action version (#1678)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)