From e61a10e9dfe8794892380e596c3b3583ec7220cf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 18 Jun 2026 18:18:37 +0000 Subject: [PATCH 1/3] Bump the github-actions group across 1 directory with 5 updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6.0.3` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `4` | `7` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `5` | `7` | | [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` | Updates `actions/checkout` from 4 to 6.0.3 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v6.0.3) Updates `codecov/codecov-action` from 4 to 7 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v4...v7) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `astral-sh/setup-uv` from 5 to 7 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v5...v7) Updates `actions/setup-python` from 5 to 6 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: astral-sh/setup-uv dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/integration-test.yml | 14 +++++++------- .github/workflows/publish.yml | 6 +++--- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/integration-test.yml b/.github/workflows/integration-test.yml index 1bfbc5b..db50d0e 100644 --- a/.github/workflows/integration-test.yml +++ b/.github/workflows/integration-test.yml @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout repo - uses: actions/checkout@v4 + uses: actions/checkout@v6.0.3 - name: Setup python and environment uses: ./.github/actions/setup-env with: @@ -57,7 +57,7 @@ jobs: OS: ${{ matrix.os }} steps: - name: Checkout repo - uses: actions/checkout@v4 + uses: actions/checkout@v6.0.3 - name: Setup python and environment uses: ./.github/actions/setup-env with: @@ -75,7 +75,7 @@ jobs: run: uv run pytest --cov=deepprofiler --cov-report=xml ${{ github.event.inputs.pytest_addopts }} - name: Upload coverage to Codecov if: (matrix.os == 'ubuntu-24.04') && (matrix.python-version == env.TARGET_PYTHON_VERSION) - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v7 env: OS: ${{ matrix.os }} PYTHON: ${{ matrix.python-version }} @@ -97,7 +97,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout repo - uses: actions/checkout@v4 + uses: actions/checkout@v6.0.3 - name: Setup python and environment uses: ./.github/actions/setup-env with: @@ -118,7 +118,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout repo - uses: actions/checkout@v4 + uses: actions/checkout@v6.0.3 with: fetch-depth: 0 - name: Setup python and environment @@ -132,14 +132,14 @@ jobs: - name: Build run: uv build - name: Upload wheel artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: wheel path: dist/*.whl if-no-files-found: error retention-days: 90 - name: Upload sdist artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: sdist path: dist/*.tar.gz diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 5f8226b..ed04f55 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -12,13 +12,13 @@ jobs: permissions: id-token: write # required for trusted publishing steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6.0.3 - name: Install uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: "3.12" From c7eb85dcc2d9212fda07566b1c76697ebbe7d811 Mon Sep 17 00:00:00 2001 From: d33bs Date: Thu, 18 Jun 2026 16:51:25 -0600 Subject: [PATCH 2/3] avoid coverage if dependabot --- .github/workflows/integration-test.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/integration-test.yml b/.github/workflows/integration-test.yml index db50d0e..c3892d5 100644 --- a/.github/workflows/integration-test.yml +++ b/.github/workflows/integration-test.yml @@ -74,7 +74,10 @@ jobs: if: (matrix.os == 'ubuntu-24.04') && (matrix.python-version == env.TARGET_PYTHON_VERSION) run: uv run pytest --cov=deepprofiler --cov-report=xml ${{ github.event.inputs.pytest_addopts }} - name: Upload coverage to Codecov - if: (matrix.os == 'ubuntu-24.04') && (matrix.python-version == env.TARGET_PYTHON_VERSION) + if: > + (matrix.os == 'ubuntu-24.04') && + (matrix.python-version == env.TARGET_PYTHON_VERSION) && + !(github.event_name == 'pull_request' && github.actor == 'dependabot[bot]') uses: codecov/codecov-action@v7 env: OS: ${{ matrix.os }} From d1f347635aeff800ed26b0cb25b68820f8b3b5bf Mon Sep 17 00:00:00 2001 From: d33bs Date: Thu, 18 Jun 2026 17:07:09 -0600 Subject: [PATCH 3/3] try different config --- .github/workflows/integration-test.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/integration-test.yml b/.github/workflows/integration-test.yml index c3892d5..7e586f8 100644 --- a/.github/workflows/integration-test.yml +++ b/.github/workflows/integration-test.yml @@ -53,6 +53,9 @@ jobs: - ubuntu-24.04 python-version: ["3.10", "3.11"] runs-on: ${{ matrix.os }} + permissions: + contents: read + id-token: write env: OS: ${{ matrix.os }} steps: @@ -88,8 +91,7 @@ jobs: fail_ci_if_error: true flags: unittests name: deepprofiler - # See https://docs.codecov.com/docs/adding-the-codecov-token - token: ${{ secrets.CODECOV_TOKEN }} + use_oidc: true - name: Run pytest if: (matrix.os != 'ubuntu-24.04') || (matrix.python-version != env.TARGET_PYTHON_VERSION) run: uv run pytest ${{ github.event.inputs.pytest_addopts }}