Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2026

Bumps codecov/codecov-action from 4 to 5.

Release notes

Sourced from codecov/codecov-action's releases.

v5.0.0

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

  • file (this has been deprecated in favor of files)
  • plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

  • binary
  • gcov_args
  • gcov_executable
  • gcov_ignore
  • gcov_include
  • report_type
  • skip_validation
  • swift_project

You can see their usage in the action.yml file.

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING] The following arguments have been changed

  • file (this has been deprecated in favor of files)
  • plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

  • binary
  • gcov_args
  • gcov_executable
  • gcov_ignore
  • gcov_include
  • report_type
  • skip_validation
  • swift_project

You can see their usage in the action.yml file.

What's Changed

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 13, 2026

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 79ad94f.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/codecov/codecov-action 5.*.* 🟢 7
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 10all changesets reviewed
Maintained⚠️ 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
SAST🟢 9SAST tool detected but not run on all commits
CI-Tests🟢 929 out of 30 merged PRs checked by a CI test -- score normalized to 9
Contributors🟢 10project has 13 contributing companies or organizations

Scanned Files

  • .github/workflows/ci.yml

@github-actions
Copy link

Test Results

607 tests   607 ✅  8s ⏱️
  6 suites    0 💤
  6 files      0 ❌

Results for commit 79ad94f.

@github-actions
Copy link

Code Coverage

Summary
  Generated on: 01/13/2026 - 02:56:56
  Coverage date: 01/13/2026 - 02:56:25 - 01/13/2026 - 02:56:53
  Parser: MultiReport (18x Cobertura)
  Assemblies: 8
  Classes: 76
  Files: 70
  Line coverage: 98.1%
  Covered lines: 2096
  Uncovered lines: 40
  Coverable lines: 2136
  Total lines: 9065
  Branch coverage: 85.7% (482 of 562)
  Covered branches: 482
  Total branches: 562
  Method coverage: 99.5% (733 of 736)
  Full method coverage: 96.6% (711 of 736)
  Covered methods: 733
  Fully covered methods: 711
  Total methods: 736

TinyBDD                                                                  98%
  TinyBDD.Ambient                                                       100%
  TinyBDD.AmbientTestMethodResolver                                     100%
  TinyBDD.AssemblyFixture                                              92.8%
  TinyBDD.AssemblyFixtureCoordinator                                   89.4%
  TinyBDD.AssemblySetupAttribute                                        100%
  TinyBDD.Assertions.Expect                                             100%
  TinyBDD.Assertions.FluentAssertion<T>                                93.1%
  TinyBDD.Assertions.FluentAssertionState<T>                            100%
  TinyBDD.Assertions.FluentPredicate<T>                                 100%
  TinyBDD.Assertions.ShouldExtensions                                   100%
  TinyBDD.Assertions.TinyBddAssertionException                          100%
  TinyBDD.AssertUtil                                                    100%
  TinyBDD.Bdd                                                           100%
  TinyBDD.BddStepException                                              100%
  TinyBDD.ExampleResult                                                 100%
  TinyBDD.ExampleRow<T>                                                 100%
  TinyBDD.ExamplesBuilder<T>                                            100%
  TinyBDD.ExamplesResult                                                100%
  TinyBDD.Extensions.StepExtensions                                     100%
  TinyBDD.Extensions.Throw                                              100%
  TinyBDD.FeatureAttribute                                              100%
  TinyBDD.Flow                                                          100%
  TinyBDD.FromContext                                                   100%
  TinyBDD.GenerateOptimizedAttribute                                      0%
  TinyBDD.GherkinFormatter                                              100%
  TinyBDD.KindStrings                                                  88.8%
  TinyBDD.NullTraitBridge                                               100%
  TinyBDD.Pipeline                                                     98.7%
  TinyBDD.ScenarioAttribute                                             100%
  TinyBDD.ScenarioCaseAttribute                                         100%
  TinyBDD.ScenarioChain<T>                                              100%
  TinyBDD.ScenarioContext                                               100%
  TinyBDD.ScenarioContextAsserts                                        100%
  TinyBDD.ScenarioContextGherkinExtensions                              100%
  TinyBDD.ScenarioContextPrototype                                      100%
  TinyBDD.ScenarioOptions                                               100%
  TinyBDD.ScenarioOutlineBuilder<T>                                     100%
  TinyBDD.ScenarioOutlineChain<T1, T2>                                  100%
  TinyBDD.ScenarioOutlineTerminal<T1, T2>                               100%
  TinyBDD.StepInfo                                                      100%
  TinyBDD.StepIO                                                        100%
  TinyBDD.StepResult                                                    100%
  TinyBDD.StringBddReporter                                             100%
  TinyBDD.TagAttribute                                                  100%
  TinyBDD.TestBase                                                      100%
  TinyBDD.TestBase<T>                                                   100%
  TinyBDD.ThenChain<T>                                                  100%
  TinyBDD.TinyBddExtensibilityOptions                                   100%
  TinyBDD.TinyBddOptionsBuilder                                         100%

TinyBDD.Extensions.DependencyInjection                                  100%
  TinyBDD.Extensions.DependencyInjection.ScenarioContextFactory         100%
  TinyBDD.Extensions.DependencyInjection.ServiceCollectionExtensions    100%
  TinyBDD.Extensions.DependencyInjection.TinyBddOptions                 100%

TinyBDD.Extensions.Hosting                                              100%
  TinyBDD.Extensions.Hosting.HostBuilderExtensions                      100%
  TinyBDD.Extensions.Hosting.TinyBddHostingOptions                      100%
  TinyBDD.Extensions.Hosting.WorkflowHostedService<T>                   100%
  TinyBDD.Extensions.Hosting.WorkflowRunner                             100%

TinyBDD.Extensions.Reporting                                           97.5%
  TinyBDD.Extensions.Reporting.JsonReport                               100%
  TinyBDD.Extensions.Reporting.JsonReportObserver                      96.5%
  TinyBDD.Extensions.Reporting.ScenarioReport                           100%
  TinyBDD.Extensions.Reporting.StepReport                               100%
  TinyBDD.Extensions.Reporting.TinyBddReportingExtensions               100%

TinyBDD.MSTest                                                          100%
  TinyBDD.MSTest.MsTestBddReporter                                      100%
  TinyBDD.MSTest.MsTestTraitBridge                                      100%
  TinyBDD.MSTest.TinyBddMsTestBase                                      100%

TinyBDD.NUnit                                                           100%
  TinyBDD.NUnit.NUnitBddReporter                                        100%
  TinyBDD.NUnit.NUnitTraitBridge                                        100%
  TinyBDD.NUnit.TinyBddNUnitBase                                        100%
  TinyBDD.NUnit.UseTinyBddAttribute                                     100%

TinyBDD.Xunit                                                          93.2%
  TinyBDD.Xunit.TinyBddXunitBase                                       90.6%
  TinyBDD.Xunit.UseTinyBddAttribute                                     100%
  TinyBDD.Xunit.XunitBddReporter                                        100%
  TinyBDD.Xunit.XunitTraitBridge                                        100%

TinyBDD.Xunit.v3                                                        100%
  TinyBDD.Xunit.v3.TinyBddXunitBase                                     100%
  TinyBDD.Xunit.v3.UseTinyBddAttribute                                  100%
  TinyBDD.Xunit.v3.XunitBddReporter                                     100%
  TinyBDD.Xunit.v3.XunitTraitBridge                                     100%

@JerrettDavis JerrettDavis merged commit 6257fed into main Jan 13, 2026
7 checks passed
@JerrettDavis JerrettDavis deleted the dependabot/github_actions/codecov/codecov-action-5 branch January 13, 2026 03:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants