From 6fd08a36a5324c0ed98d73dc638985197f48fb0a Mon Sep 17 00:00:00 2001 From: demolaf Date: Thu, 23 Jul 2026 18:17:33 +0100 Subject: [PATCH 1/3] fix(ci): use allow-listed codecov-action@v4 ref instead of a SHA pin --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 54a1f115..3415f738 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -234,7 +234,7 @@ jobs: - name: Upload coverage to codecov if: matrix.dart-version == 'stable' continue-on-error: true - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f + uses: codecov/codecov-action@v4 with: files: coverage.lcov flags: unittests From 005b4a72ec2069bf586e1a5c6cbe4a1876246ba4 Mon Sep 17 00:00:00 2001 From: demolaf Date: Thu, 23 Jul 2026 21:38:35 +0100 Subject: [PATCH 2/3] test(ci): try pinning codecov-action to the actual v4 release SHA --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3415f738..88402967 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -234,7 +234,7 @@ jobs: - name: Upload coverage to codecov if: matrix.dart-version == 'stable' continue-on-error: true - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4 with: files: coverage.lcov flags: unittests From 01a5a8529d731a8039ff51b09dccc3af87a561b2 Mon Sep 17 00:00:00 2001 From: demolaf Date: Thu, 23 Jul 2026 22:03:23 +0100 Subject: [PATCH 3/3] Revert "test(ci): try pinning codecov-action to the actual v4 release SHA" This reverts commit 005b4a72ec2069bf586e1a5c6cbe4a1876246ba4. --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 88402967..3415f738 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -234,7 +234,7 @@ jobs: - name: Upload coverage to codecov if: matrix.dart-version == 'stable' continue-on-error: true - uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4 + uses: codecov/codecov-action@v4 with: files: coverage.lcov flags: unittests