[dependabot]

Bumps actions/upload-code-coverage from 1.4.2 to 1.4.3.

Release notes

Sourced from actions/upload-code-coverage's releases.

v1.4.3

Fixed

• Non-default branch pushes without an open pull request now skip successfully instead of attempting an upload that the API rejects. (#30)
• GitHub CLI failures during pull request discovery now produce an actionable error instead of being silently treated as no matching pull request. (#27)

Full Changelog: actions/upload-code-coverage@v1.4.2...v1.4.3

Changelog

Sourced from actions/upload-code-coverage's changelog.

Changelog

Unreleased

v1.4.4 - 2026-10-01

Fixed

• Non-default branch pushes no longer associate coverage with an unrelated fork pull request that uses the same branch name.
• When a pushed branch has multiple open pull requests, the action prefers the pull request targeting the default branch. If no unique default-branch target exists, the upload skips successfully instead of selecting arbitrarily or failing CI.

v1.4.3 - 2026-09-28

Fixed

• Non-default branch pushes without an open pull request now skip successfully instead of attempting an upload that the API rejects.
• GitHub CLI failures during pull request discovery now produce an actionable error instead of being silently treated as no matching pull request.

Commits

• bfa741d Merge pull request #31 from actions/cassiomarques/release-v1.4.3
• 12d57db Prepare v1.4.3 release
• 85ee719 Merge pull request #30 from actions/cassiomarques/composite-action-investigation
• ba2250c Test pull request target routing
• 3b9af3b Document push-only coverage timing
• 32ff83e Document coverage workflow strategies
• 293c9eb Skip unsupported branch coverage uploads
• b519b7c Merge pull request #28 from actions/docs/immutable-release-process
• 46ffb21 Merge pull request #27 from actions/fix/report-gh-pr-lookup-errors
• 1f6d0c8 Document immutable release process
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

Copilot review overview

🟢 Approval recommended

Both workflow references consistently use the documented v1.4.3 commit SHA.

Review effort: Balanced
Findings: None

What changed in this PR

Updates the code coverage upload action to v1.4.3 across CI workflows.

Changes:

• Pins Python and .NET coverage uploads to the v1.4.3 commit.
• Retains immutable SHA-based action references.

File	Description
.github/​workflows/​python-test-coverage.yml	Updates the Python coverage upload action.
.github/​workflows/​dotnet-build-and-test.yml	Updates the .NET coverage upload action.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.