Skip to content

build(deps): bump actions/upload-code-coverage from 1.4.3 to 1.4.4 - #9259

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-code-coverage-1.4.4
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-code-coverage-1.4.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/upload-code-coverage from 1.4.3 to 1.4.4.

Release notes

Sourced from actions/upload-code-coverage's releases.

v1.4.4

Fixed

  • Non-default branch pushes no longer associate coverage with an unrelated fork pull request that uses the same branch name. (#33)
  • When a pushed branch has multiple open pull requests, the action prefers the pull request targeting the default branch. If no unique default-branch target exists, the upload skips successfully instead of selecting arbitrarily or failing CI. (#33)

Documentation

  • Document the action's Bash, Python 3.9+, and conditional GitHub CLI runner requirements, including when pull-requests: read is required. (#29)

Maintenance

  • Add regression tests that prevent shell-injection protections from being reintroduced. (#32)

Full Changelog: actions/upload-code-coverage@v1.4.3...v1.4.4

Changelog

Sourced from actions/upload-code-coverage's changelog.

Changelog

Unreleased

v1.4.4 - 2026-10-01

Fixed

  • Non-default branch pushes no longer associate coverage with an unrelated fork pull request that uses the same branch name.
  • When a pushed branch has multiple open pull requests, the action prefers the pull request targeting the default branch. If no unique default-branch target exists, the upload skips successfully instead of selecting arbitrarily or failing CI.

v1.4.3 - 2026-09-28

Fixed

  • Non-default branch pushes without an open pull request now skip successfully instead of attempting an upload that the API rejects.
  • GitHub CLI failures during pull request discovery now produce an actionable error instead of being silently treated as no matching pull request.
Commits
  • 2b21a77 Merge pull request #34 from actions/cassiomarques/release-v1.4.4
  • c7f2f13 Prepare v1.4.4 release
  • cd112d6 Merge pull request #33 from actions/cassiomarques/scope-push-pr-lookup
  • 19923c1 Address pull request review feedback
  • 9706dd2 Merge pull request #29 from actions/docs/runner-requirements
  • 891aec1 Merge branch 'main' into docs/runner-requirements
  • 60531d5 Prefer default-branch PR for ambiguous pushes
  • 713d268 Scope push PR lookup to repository
  • 1f899d9 Merge pull request #32 from actions/cassiomarques/shell-injection-regression-...
  • 6e4a64d Test shell injection protections
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/upload-code-coverage](https://github.com/actions/upload-code-coverage) from 1.4.3 to 1.4.4.
- [Release notes](https://github.com/actions/upload-code-coverage/releases)
- [Changelog](https://github.com/actions/upload-code-coverage/blob/main/CHANGELOG.md)
- [Commits](actions/upload-code-coverage@bfa741d...2b21a77)

---
updated-dependencies:
- dependency-name: actions/upload-code-coverage
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The valid SHA-pinned patch update is consistently applied and compatible with both workflows.

0 open findings

What changed in this PR

Updates the code-coverage upload action to v1.4.4 across Python and .NET CI workflows.

Changes:

  • Replaces the pinned v1.4.3 commit with the v1.4.4 commit.
  • Retains required workflow permissions and existing configuration.
File Description
.github/​workflows/​python-test-coverage.yml Updates the Python coverage upload action.
.github/​workflows/​dotnet-build-and-test.yml Updates the .NET coverage upload action.

🧠 Review effort: Balanced


💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

@dependabot
dependabot Bot temporarily deployed to github-app-auth October 12, 2026 12:38 Inactive
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like actions/upload-code-coverage is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 12, 2026 12:39 Inactive
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/upload-code-coverage-1.4.4 branch October 12, 2026 12:39

This branch was previously deployed

1 inactive deployment
github-app-auth — 579b428e Deployed Oct 12, 2026 by dependabot[bot] via add_label #25026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Usage: [Issues, PRs], Target: dependencies in the project github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant