Skip to content

Conversation

@stephprince
Copy link
Contributor

Motivation

This PR supersedes #616, which has a failing required CI check.

codecov/codecov-action@v4 stopped permitting tokenless coverage uploading and dependabot PRs do not have access to GitHub Actions secrets, including our CODECOV_TOKEN.

This will update the actions to allow coverage upload failures to pass for dependabot PRs (see suggestions outlined in https://docs.github.com/en/code-security/dependabot/troubleshooting-dependabot/troubleshooting-dependabot-on-github-actions)

dependabot bot and others added 2 commits September 4, 2025 15:41
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.4.2 to 1.13.0.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.4.2...v1.13.0)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.13.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@stephprince stephprince requested a review from rly September 4, 2025 23:09
@codecov-commenter
Copy link

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.37%. Comparing base (7776f47) to head (1819002).
⚠️ Report is 1 commits behind head on dev.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##              dev     #617      +/-   ##
==========================================
- Coverage   83.16%   76.37%   -6.79%     
==========================================
  Files          47       47              
  Lines        1562     1562              
==========================================
- Hits         1299     1193     -106     
- Misses        263      369     +106     

see 7 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@stephprince stephprince merged commit 6e6bd47 into dev Sep 15, 2025
46 of 47 checks passed
@stephprince stephprince deleted the dependabot-pypi-actions-fix branch September 15, 2025 22:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants