build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 #932
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Testing - Github Actions | |
| # | |
| # Security references: | |
| # - https://securitylab.github.com/resources/github-actions-preventing-pwn-requests | |
| # - https://securitylab.github.com/resources/github-actions-untrusted-input | |
| # - https://securitylab.github.com/resources/github-actions-building-blocks | |
| # - https://securitylab.github.com/resources/github-actions-new-patterns-and-mitigations | |
| # | |
| # Used actions: | |
| # - actions/checkout | |
| # repo: https://github.com/actions/checkout | |
| # releases: https://github.com/actions/checkout/tags | |
| # | |
| # - astral-sh/setup-uv: set up uv environment | |
| # repo: https://github.com/astral-sh/setup-uv | |
| # releases: https://github.com/astral-sh/setup-uv/tags | |
| # docs: https://docs.astral.sh/uv/guides/integration/github/ | |
| name: Testing | |
| concurrency: | |
| # see https://docs.github.com/en/actions/using-jobs/using-concurrency | |
| # Run jobs on all commits - we're on free tier and want full diagnostic history | |
| # cancel-in-progress: ${{ github.event_name == 'pull_request' }} | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| env: | |
| # Enable colored output for pytest | |
| # https://github.com/pytest-dev/pytest/issues/7443 | |
| # https://github.com/actions/runner/issues/241 | |
| PY_COLORS: 1 | |
| # Pin just version for reproducible builds | |
| # https://github.com/casey/just/releases | |
| JUST_VERSION: "1.46.0" # released on 2026-01-02 | |
| # Pin uv version for reproducible builds | |
| # https://github.com/astral-sh/uv/releases | |
| UV_VERSION: "0.9.26" # released on 2026-01-15 | |
| on: | |
| pull_request: | |
| types: [opened, reopened, synchronize] | |
| push: | |
| branches: | |
| - main | |
| permissions: | |
| contents: read | |
| jobs: | |
| # see https://docs.astral.sh/uv/guides/integration/github/ | |
| python-tests: | |
| name: python | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| python-version: | |
| - "3.14" | |
| - "3.13" | |
| steps: | |
| # repo: https://github.com/actions/checkout | |
| # releases: https://github.com/actions/checkout/tags | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.1 released on 02-12-2025 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Remove sitecustomize.py | |
| run: | | |
| sudo rm -f /usr/lib/python3.*/sitecustomize.py | |
| sudo rm -f /etc/python3.*/sitecustomize.py | |
| # repo: https://github.com/extractions/setup-just | |
| # releases: https://github.com/extractions/setup-just/releases | |
| - name: Install pinned version of just | |
| uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b # v3 released on 2025-03-15 | |
| with: | |
| just-version: ${{ env.JUST_VERSION }} | |
| # repo: https://github.com/astral-sh/setup-uv | |
| # releases: https://github.com/astral-sh/setup-uv/tags | |
| # docs: https://docs.astral.sh/uv/guides/integration/github | |
| - name: Install pinned version of uv | |
| uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.0.0 released on 2026-03-29 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| version: ${{ env.UV_VERSION }} | |
| enable-cache: true | |
| cache-dependency-glob: "uv.lock" | |
| prune-cache: true | |
| - name: Set up Python ${{ matrix.python-version }} | |
| run: uv python install ${{ matrix.python-version }} | |
| # - name: Install the project | |
| # run: uv sync --all-groups | |
| - name: Install project + dependencies | |
| run: | | |
| just ubuntu-remove-global-sitecustomize | |
| just uv-set-python-version ${{ matrix.python-version }} | |
| just install | |
| - name: Run pytest with coverage | |
| run: | | |
| just pytest-cov | |
| # - name: Run tests | |
| # run: uv run pytest tests --color=yes --cov=src --cov-fail-under=50 --cov-report html:var/coverage/html --cov-report xml:var/coverage/pytest-cobertura.xml --cov-report term-missing -v | |
| # repo: https://github.com/codecov/codecov-action | |
| # releases: https://github.com/codecov/codecov-action/tags | |
| - name: "Upload coverage to Codecov" | |
| uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.0 released on 2026-03-26 | |
| with: | |
| # Don't fail CI on Codecov upload errors - coverage is informational, | |
| # and secrets aren't available to Dependabot PRs anyway. | |
| fail_ci_if_error: false | |
| files: var/coverage/pytest-cobertura.xml | |
| flags: unittests | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| verbose: true # false is default |