Skip to content

build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 #932

build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1

build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 #932

Workflow file for this run

# Testing - Github Actions
#
# Security references:
# - https://securitylab.github.com/resources/github-actions-preventing-pwn-requests
# - https://securitylab.github.com/resources/github-actions-untrusted-input
# - https://securitylab.github.com/resources/github-actions-building-blocks
# - https://securitylab.github.com/resources/github-actions-new-patterns-and-mitigations
#
# Used actions:
# - actions/checkout
# repo: https://github.com/actions/checkout
# releases: https://github.com/actions/checkout/tags
#
# - astral-sh/setup-uv: set up uv environment
# repo: https://github.com/astral-sh/setup-uv
# releases: https://github.com/astral-sh/setup-uv/tags
# docs: https://docs.astral.sh/uv/guides/integration/github/
name: Testing
concurrency:
# see https://docs.github.com/en/actions/using-jobs/using-concurrency
# Run jobs on all commits - we're on free tier and want full diagnostic history
# cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: ${{ github.workflow }}-${{ github.ref }}
env:
# Enable colored output for pytest
# https://github.com/pytest-dev/pytest/issues/7443
# https://github.com/actions/runner/issues/241
PY_COLORS: 1
# Pin just version for reproducible builds
# https://github.com/casey/just/releases
JUST_VERSION: "1.46.0" # released on 2026-01-02
# Pin uv version for reproducible builds
# https://github.com/astral-sh/uv/releases
UV_VERSION: "0.9.26" # released on 2026-01-15
on:
pull_request:
types: [opened, reopened, synchronize]
push:
branches:
- main
permissions:
contents: read
jobs:
# see https://docs.astral.sh/uv/guides/integration/github/
python-tests:
name: python
runs-on: ubuntu-latest
timeout-minutes: 10
strategy:
fail-fast: false
matrix:
python-version:
- "3.14"
- "3.13"
steps:
# repo: https://github.com/actions/checkout
# releases: https://github.com/actions/checkout/tags
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.1 released on 02-12-2025
with:
persist-credentials: false
fetch-depth: 0
- name: Remove sitecustomize.py
run: |
sudo rm -f /usr/lib/python3.*/sitecustomize.py
sudo rm -f /etc/python3.*/sitecustomize.py
# repo: https://github.com/extractions/setup-just
# releases: https://github.com/extractions/setup-just/releases
- name: Install pinned version of just
uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b # v3 released on 2025-03-15
with:
just-version: ${{ env.JUST_VERSION }}
# repo: https://github.com/astral-sh/setup-uv
# releases: https://github.com/astral-sh/setup-uv/tags
# docs: https://docs.astral.sh/uv/guides/integration/github
- name: Install pinned version of uv
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.0.0 released on 2026-03-29
with:
python-version: ${{ matrix.python-version }}
version: ${{ env.UV_VERSION }}
enable-cache: true
cache-dependency-glob: "uv.lock"
prune-cache: true
- name: Set up Python ${{ matrix.python-version }}
run: uv python install ${{ matrix.python-version }}
# - name: Install the project
# run: uv sync --all-groups
- name: Install project + dependencies
run: |
just ubuntu-remove-global-sitecustomize
just uv-set-python-version ${{ matrix.python-version }}
just install
- name: Run pytest with coverage
run: |
just pytest-cov
# - name: Run tests
# run: uv run pytest tests --color=yes --cov=src --cov-fail-under=50 --cov-report html:var/coverage/html --cov-report xml:var/coverage/pytest-cobertura.xml --cov-report term-missing -v
# repo: https://github.com/codecov/codecov-action
# releases: https://github.com/codecov/codecov-action/tags
- name: "Upload coverage to Codecov"
uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.0 released on 2026-03-26
with:
# Don't fail CI on Codecov upload errors - coverage is informational,
# and secrets aren't available to Dependabot PRs anyway.
fail_ci_if_error: false
files: var/coverage/pytest-cobertura.xml
flags: unittests
token: ${{ secrets.CODECOV_TOKEN }}
verbose: true # false is default