Skip to content

ci(deps): bump codecov/codecov-action from 3 to 5#1

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/codecov/codecov-action-5
Closed

ci(deps): bump codecov/codecov-action from 3 to 5#1
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/codecov/codecov-action-5

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Dec 5, 2025

Bumps codecov/codecov-action from 3 to 5.

Release notes

Sourced from codecov/codecov-action's releases.

v5.0.0

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

  • file (this has been deprecated in favor of files)
  • plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

  • binary
  • gcov_args
  • gcov_executable
  • gcov_ignore
  • gcov_include
  • report_type
  • skip_validation
  • swift_project

You can see their usage in the action.yml file.

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING] The following arguments have been changed

  • file (this has been deprecated in favor of files)
  • plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

  • binary
  • gcov_args
  • gcov_executable
  • gcov_ignore
  • gcov_include
  • report_type
  • skip_validation
  • swift_project

You can see their usage in the action.yml file.

What's Changed

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

chendelin1982 and others added 2 commits December 5, 2025 18:05
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v3...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Dec 5, 2025

Assignees

The following users could not be added as assignees: Websoft9/waterflow-maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 5, 2025
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Dec 12, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/codecov/codecov-action-5 branch December 12, 2025 00:54
zhaojing1987 added a commit that referenced this pull request Jan 12, 2026
All findings addressed:
- HIGH #1: Server IPv4 access - Added troubleshooting guide (Issue #5)
- HIGH #2: Temporal UI - Added port conflict troubleshooting (Issue #6)
- HIGH #3: Agent healthcheck - Documented metrics endpoint issue (Issue #7)
- MEDIUM #4: README validation - Added network troubleshooting
- MEDIUM #5: .env.example - Expanded from 27 to 88 lines with detailed comments
- MEDIUM #6: Completion Notes - Updated with honest AC assessment
- MEDIUM #7: README testing - Added prerequisite clarifications
- LOW #8: Agent healthcheck - Optimized wget command (simplified)
- LOW #9: Story doc - Updated AC2 CORS example
- LOW #10: Completion Notes - Clarified /v1/nodes endpoint status

AC Achievement:
- AC3, AC4, AC6, AC7: 100% achieved
- AC1 (full stack): Partial - Agent unhealthy (metrics not implemented)
- AC2 (Temporal UI): Partial - Container runs but port may conflict
- AC5 (endpoints): Partial - Server listens IPv6, host access may fail

Known Issues Documented:
1. Server listens on IPv6 (:::8080) not IPv4 (0.0.0.0:8080)
2. Agent metrics HTTP server not implemented (9090/metrics)
3. Temporal UI port mapping may conflict

Files Modified:
- deployments/.env.example: Expanded with detailed comments (88 lines)
- deployments/README.md: Added 3 troubleshooting scenarios
- deployments/docker-compose.yaml: Optimized Agent healthcheck
- docs/sprint-artifacts/8-2: Updated Completion Notes

Story Status: review -> done
zhaojing1987 added a commit that referenced this pull request Jan 12, 2026
修复Story 8-3配置管理的8个审查问题:

P1问题修复 (文档和示例):
- #1: 添加TOML格式文档示例和格式对比表格
- #2: 创建examples/configs/config-minimal.toml示例文件
- #6: 补充Agent环境变量文档,添加Docker/K8s部署示例

P2/P3问题修复 (文档优化):
- #3: 更新Completion Notes,包含详细AC达成表、技术细节、测试覆盖
- #4: 添加配置文件路径章节,说明Server/Agent默认路径差异原因
- #7: 修正Agent ID注释说明(移除未实现的auto-generated承诺)
- #8: 配置示例已有详细注释,无需额外修改

文档增强:
- 在docs/configuration.md添加格式对比表格(YAML vs TOML)
- 补充Agent环境变量使用示例(bash/Docker/Kubernetes)
- 添加配置文件路径说明章节(默认路径/指定路径/不存在行为)
- Completion Notes扩展至200+行,包含AC达成度、技术细节、已知限制

文件修改:
- docs/configuration.md: +153行 (TOML示例、Agent环境变量、路径说明)
- docs/sprint-artifacts/8-3-configuration-management.md: +200行 (Completion Notes)
- examples/configs/config-minimal.toml: 新增39行TOML格式示例
- pkg/config/config.go: 修正AgentConfig.ID注释说明

审查结果: 8个问题全部修复,代码质量8.5/10

Related: Story 8-3
zhaojing1987 added a commit that referenced this pull request Jan 28, 2026
…gger field

BREAKING CHANGE: Remove 'on' field from Workflow YAML schema to implement
API-driven architecture where trigger configuration is managed via REST API.

Changes:
- Remove Workflow.On field and trigger types (TriggerConfig, PushTrigger, etc)
- Update JSON Schema: remove 'on' from required fields and property definitions
- Update workflow-schema.json description to reflect API-driven architecture
- Fix renderer.go, parser_test.go, renderer_test.go to remove On field usage
- Remove 'on:' field from 32 test/example YAML files across testdata/ and examples/
- Add architecture refactoring section to Story 1-3 documentation

Benefits:
- Separation of concerns: YAML defines workflow logic, API manages triggers
- Flexibility: Same workflow supports multiple trigger configurations
- Maintainability: Trigger changes don't affect workflow definitions
- Extensibility: Support new trigger types without YAML schema changes

Migration:
- Users must remove 'on:' field from existing YAML files
- Configure triggers via Schedule API (Story 1.10) or Webhook API (Story 1.11)

Related Stories: #1.10 (Schedule API), #1.11 (Webhook API)
Files changed: 48 (6 core code + 42 tests/examples)
All tests passing: pkg/dsl (0.813s), internal/api (0.032s)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant