chore(deps): update codecov/codecov-action action to v5.5.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
codecov/codecov-action	action	patch	v5.5.0 -> v5.5.1

---

Release Notes

codecov/codecov-action (codecov/codecov-action)

v5.5.1

Compare Source

What's Changed

• fix: overwrite pr number on fork by @​thomasrockhu-codecov in #​1871
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​app/dependabot in #​1868
• build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @​app/dependabot in #​1867
• fix: update to use local app/ dir by @​thomasrockhu-codecov in #​1872
• docs: fix typo in README by @​datalater in #​1866
• Document a codecov-cli version reference example by @​webknjaz in #​1774
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @​app/dependabot in #​1861
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​app/dependabot in #​1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.71%. Comparing base (a69b3ce) to head (a7bdf8a).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #574   +/-   ##
=======================================
  Coverage   86.71%   86.71%           
=======================================
  Files          12       12           
  Lines        2364     2364           
=======================================
  Hits         2050     2050           
  Misses        238      238           
  Partials       76       76           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[claude]

Pull Request Review

Overview

This is an automated dependency update by Renovate to update the codecov/codecov-action from v5.5.0 to v5.5.1 in the GitHub Actions workflow.

Code Quality Assessment ✅

• Change Type: Simple version bump in GitHub Actions workflow
• Scope: Single line change in .github/workflows/build.yml:61
• Impact: Minimal - patch version update with bug fixes and improvements

Security Analysis 🔐

• Action Source: Official Codecov action from a trusted organization
• Version Update: Patch release (5.5.0 → 5.5.1) - low risk
• Permissions: No changes to existing workflow permissions
• Secrets: No changes to secret handling (CODECOV_TOKEN usage remains unchanged)

Technical Review 📋

Positive Aspects:

1. Proper Versioning: Uses pinned version tags (good security practice)
2. Automated Updates: Renovate configuration ensures timely dependency updates
3. Minimal Change: Single line update reduces risk of introduction of issues
4. Release Notes: PR includes comprehensive changelog from upstream

Key Improvements in v5.5.1:

• Fix for PR number overwrite on forks
• Documentation improvements
• Dependency updates for security
• Bug fixes for local app directory usage

Performance Considerations ⚡

• Impact: None expected - patch release focused on bug fixes
• CI Runtime: No changes to test execution time
• Resource Usage: No additional resource consumption

Test Coverage Assessment 🧪

• No Code Changes: This update doesn't affect the Go codebase
• CI Pipeline: Existing test suite continues to run unchanged
• Coverage Reporting: May have improved reliability for coverage uploads

Recommendations 💡

1. Approve and Merge: This is a safe, automated dependency update
2. Monitor: Watch for any CI failures post-merge (unlikely but good practice)
3. Automerge: Consider enabling automerge for patch-level Codecov action updates

Risk Assessment: LOW ✅

• Patch version update from trusted source
• Focused on bug fixes and improvements
• No breaking changes or API modifications
• Renovate has proper testing and validation

Verdict

APPROVE - This is a standard maintenance update that improves the reliability of the CI pipeline's code coverage reporting. The change is minimal, well-documented, and from a trusted source.