Skip to content

chore(deps): update codecov/codecov-action action to v7#88

Merged
github-actions[bot] merged 1 commit into
mainfrom
renovate/codecov-codecov-action-7.x
Jun 7, 2026
Merged

chore(deps): update codecov/codecov-action action to v7#88
github-actions[bot] merged 1 commit into
mainfrom
renovate/codecov-codecov-action-7.x

Conversation

@renovate

@renovate renovate Bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
codecov/codecov-action action major v6.0.1v7.0.0

Release Notes

codecov/codecov-action (codecov/codecov-action)

v7.0.0

Compare Source

v7

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions github-actions Bot merged commit 64f29b8 into main Jun 7, 2026
14 checks passed
@github-actions

github-actions Bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/codecov/codecov-action fb8b3582c8e4def4969c97caa2f19720cb33a72f 🟢 8.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
SAST🟢 9SAST tool detected but not run on all commits
CI-Tests🟢 929 out of 30 merged PRs checked by a CI test -- score normalized to 9
Contributors🟢 10project has 14 contributing companies or organizations

Scanned Files

  • .github/workflows/ci.yml

@github-actions github-actions Bot deleted the renovate/codecov-codecov-action-7.x branch June 7, 2026 02:04
@sonarqubecloud

sonarqubecloud Bot commented Jun 7, 2026

Copy link
Copy Markdown

@codecov

codecov Bot commented Jun 7, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.47%. Comparing base (bcb4539) to head (b332f09).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #88   +/-   ##
=======================================
  Coverage   69.47%   69.47%           
=======================================
  Files          22       22           
  Lines        3345     3345           
=======================================
  Hits         2324     2324           
  Misses       1021     1021           
Flag Coverage Δ
unittests 69.47% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

CybotTM added a commit that referenced this pull request Jun 7, 2026
## What

Replaces the inline `Test Suite` job with the org-standard
`netresearch/.github/.github/workflows/python-ci.yml@main` reusable
(added in netresearch/.github#174). It runs the unit + integration
pytest suites with coverage and uploads to Codecov.

`lint`, `security`, `build`, `docs`, and `integration-e2e` are
unchanged. The reusable caller keeps the job name `test`, so the `needs:
[lint, test]` / `needs: [test]` dependencies stay valid.

## Why

Renovate was bumping `codecov/codecov-action` in this repo per release
(#88). The action now lives once in `python-ci.yml` and is pinned/bumped
centrally — the same model PHP repos use via `php-ci.yml`. There is no
longer an inline `codecov-action` reference here.

Closes #88.

## Behavior notes

- Test execution still runs across `ubuntu-latest`, `macos-latest`,
`windows-latest` on Python 3.14.
- Coverage now uploads **once** (ubuntu / 3.14) instead of from all
three OS cells — the previous setup uploaded three reports with
different `name=` values.
- Install still uses `pip install -r requirements-dev.txt` (matching the
previous job; not switched to uv).

## Residual

The `lint`, `security`, `build`, `docs`, `integration-e2e` jobs still
pin `actions/checkout` / `actions/setup-python`, which Renovate will
still bump occasionally. This PR stops the **codecov** churn
specifically.

## Validation

`yamllint` (org config) and `actionlint` clean.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants