Update codecov/codecov-action action to v7 (main) - #873
Open
red-hat-konflux[bot] wants to merge 1 commit into
Open
Update codecov/codecov-action action to v7 (main)#873red-hat-konflux[bot] wants to merge 1 commit into
red-hat-konflux[bot] wants to merge 1 commit into
Conversation
Reviewer's guide (collapsed on small PRs)Reviewer's GuideUpdates all GitHub workflows to use the latest major version (v7) of the codecov/codecov-action instead of v3, without changing any action inputs or workflow logic. Sequence diagram for GitHub Actions build using updated codecov/codecov-action v7sequenceDiagram
actor Developer
participant GitHubActions
participant TestSuite
participant codecov_action_v7 as codecov_codecov-action_v7
participant Codecov
Developer->>GitHubActions: Push or open PR
GitHubActions->>TestSuite: Run unit tests
TestSuite-->>GitHubActions: Test results and coverage files
GitHubActions->>codecov_action_v7: uses codecov/codecov-action@v7
codecov_action_v7->>Codecov: Upload coverage with flags unittests
Codecov-->>codecov_action_v7: Store and process coverage
codecov_action_v7-->>GitHubActions: Upload status
GitHubActions-->>Developer: Report build and coverage status
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
Hey - I've left some high level feedback:
- Consider pinning
codecov/codecov-actionto a specific commit SHA (e.g.codecov/codecov-action@<sha>) rather than justv7to reduce the risk of supply-chain changes affecting your workflow.
Prompt for AI Agents
Please address the comments from this code review:
## Overall Comments
- Consider pinning `codecov/codecov-action` to a specific commit SHA (e.g. `codecov/codecov-action@<sha>`) rather than just `v7` to reduce the risk of supply-chain changes affecting your workflow.Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main-main/codecov-codecov-action-7.x
branch
from
August 10, 2026 05:06
f8ffbf7 to
61a1eb8
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3→v7Release Notes
codecov/codecov-action (codecov/codecov-action)
v7.0.0Compare Source
codecovsecurityaccount. We have deleted the account and are usingcodecovsecopswith the original gpg keyWhat's Changed
Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0
v7Compare Source
v6.0.2Compare Source
This is a copy of the
v7.0.0release to make updates easierWhat's Changed
Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2
v6.0.1Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1
v6.0.0Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0
v6Compare Source
v5.5.5Compare Source
This release only contains the keybase.io change as described here.
Full Changelog: codecov/codecov-action@v5.5.4...v5.5.5
v5.5.4Compare Source
This is a mirror of
v5.5.2.v6will be released which requiresnode24What's Changed
Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4
v5.5.3Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3
v5.5.2Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2
v5.5.1Compare Source
What's Changed
codecov-cliversion reference example by @webknjaz in #1774Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1
v5.5.0Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0
v5.4.3Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3
v5.4.2Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2
v5.4.1Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1
v5.4.0Compare Source
What's Changed
use_pypibypasses integrity checks too by @webknjaz in #1773Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0
v5.3.1Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1
v5.3.0Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0
v5.2.0Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0
v5.1.2Compare Source
What's Changed
${{ inputs.token }}inaction.ymlby @jwodder in #1721Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.1..v5.1.2
v5.1.1Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.0..v5.1.1
v5.1.0Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.7..v5.1.0
v5.0.7Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.6..v5.0.7
v5.0.6Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.5..v5.0.6
v5.0.5Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.4..v5.0.5
v5.0.4Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.3..v5.0.4
v5.0.3Compare Source
What's Changed
inputs.disable_safe_directoryby @mkroening in #1666Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.2..v5.0.3
v5.0.2Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v5.0.1...v5.0.2
v5.0.1Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v5.0.0...v5.0.1
v5.0.0Compare Source
v5 Release
v5of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.Migration Guide
The
v5release also coincides with the opt-out feature for tokens for public repositories. In theGlobal Upload Tokensection of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.The following arguments have been added:
binarygcov_argsgcov_executablegcov_ignoregcov_includereport_typeskip_validationswift_projectYou can see their usage in the
action.ymlfile.v5Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2
v4.6.0Compare Source
What's Changed
versionInfoby @marcobiedermann in #1407evenNamein the logs correctly by @webknjaz in #1560v4.5.0Compare Source
What's Changed
v4.4.1Compare Source
What's Changed
v4.4.0Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v4.3.1...v4.4.0
v4.3.1Compare Source
What's Changed
v4.3.0Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v4.2.0...v4.3.0
v4.2.0Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v4.1.1...v4.2.0
v4.1.1Compare Source
What's Changed
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.