chore(release): 7.0.0#1957
Merged
Merged
Conversation
jason-ford-codecov
approved these changes
Jun 7, 2026
Bump the wrapper submodule (src/scripts) to the latest main (bad8df5), which fetches the Codecov Uploader PGP key from the codecovsecops Keybase account, and cut a new major version. Co-authored-by: Cursor <cursoragent@cursor.com>
thomasrockhu-codecov
force-pushed
the
th/v7-wrapper-bump
branch
from
e6f5d35 to
6d497bb
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1957 +/- ##
=======================================
Coverage 97.14% 97.14%
=======================================
Files 2 2
Lines 35 35
=======================================
Hits 34 34
Misses 1 1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. |
mergify Bot
added a commit
to ArcadeData/arcadedb
that referenced
this pull request
Jun 7, 2026
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0. Release notes *Sourced from [codecov/codecov-action's releases](https://github.com/codecov/codecov-action/releases).* > v7.0.0 > ------ > >⚠️ Due to migration issues with keybase, we are unable to update our keys under the `codecovsecurity` account. We have deleted the account and are using `codecovsecops` with the original gpg key > > What's Changed > -------------- > > * ci: remove Enforce License Compliance workflow by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1950](https://redirect.github.com/codecov/codecov-action/pull/1950) > * chore(release): 7.0.0 by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1957](https://redirect.github.com/codecov/codecov-action/pull/1957) > > **Full Changelog**: <codecov/codecov-action@v6.0.1...v7.0.0> > > v6.0.2 > ------ > > This is a copy of the `v7.0.0` release to make updates easier > > What's Changed > -------------- > > * ci: remove Enforce License Compliance workflow by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1950](https://redirect.github.com/codecov/codecov-action/pull/1950) > * chore(release): 7.0.0 by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1957](https://redirect.github.com/codecov/codecov-action/pull/1957) > > **Full Changelog**: <codecov/codecov-action@v6.0.1...v6.0.2> Changelog *Sourced from [codecov/codecov-action's changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md).* > v5.5.2 > ------ > > ### What's Changed > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2> > > v5.5.1 > ------ > > ### What's Changed > > * fix: overwrite pr number on fork by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1871](https://redirect.github.com/codecov/codecov-action/pull/1871) > * build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by `@app/dependabot` in [codecov/codecov-action#1868](https://redirect.github.com/codecov/codecov-action/pull/1868) > * build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by `@app/dependabot` in [codecov/codecov-action#1867](https://redirect.github.com/codecov/codecov-action/pull/1867) > * fix: update to use local app/ dir by [`@thomasrockhu-codecov`](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1872](https://redirect.github.com/codecov/codecov-action/pull/1872) > * docs: fix typo in README by [`@datalater`](https://github.com/datalater) in [codecov/codecov-action#1866](https://redirect.github.com/codecov/codecov-action/pull/1866) > * Document a `codecov-cli` version reference example by [`@webknjaz`](https://github.com/webknjaz) in [codecov/codecov-action#1774](https://redirect.github.com/codecov/codecov-action/pull/1774) > * build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by `@app/dependabot` in [codecov/codecov-action#1861](https://redirect.github.com/codecov/codecov-action/pull/1861) > * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by `@app/dependabot` in [codecov/codecov-action#1833](https://redirect.github.com/codecov/codecov-action/pull/1833) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1> > > v5.5.0 > ------ > > ### What's Changed > > * feat: upgrade wrapper to 0.2.4 by [`@jviall`](https://github.com/jviall) in [codecov/codecov-action#1864](https://redirect.github.com/codecov/codecov-action/pull/1864) > * Pin actions/github-script by Git SHA by [`@martincostello`](https://github.com/martincostello) in [codecov/codecov-action#1859](https://redirect.github.com/codecov/codecov-action/pull/1859) > * fix: check reqs exist by [`@joseph-sentry`](https://github.com/joseph-sentry) in [codecov/codecov-action#1835](https://redirect.github.com/codecov/codecov-action/pull/1835) > * fix: Typo in README by [`@spalmurray`](https://github.com/spalmurray) in [codecov/codecov-action#1838](https://redirect.github.com/codecov/codecov-action/pull/1838) > * docs: Refine OIDC docs by [`@spalmurray`](https://github.com/spalmurray) in [codecov/codecov-action#1837](https://redirect.github.com/codecov/codecov-action/pull/1837) > * build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by `@app/dependabot` in [codecov/codecov-action#1829](https://redirect.github.com/codecov/codecov-action/pull/1829) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0> > > v5.4.3 > ------ > > ### What's Changed > > * build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by `@app/dependabot` in [codecov/codecov-action#1822](https://redirect.github.com/codecov/codecov-action/pull/1822) > * fix: OIDC on forks by [`@joseph-sentry`](https://github.com/joseph-sentry) in [codecov/codecov-action#1823](https://redirect.github.com/codecov/codecov-action/pull/1823) > > **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3> > > v5.4.2 > ------ ... (truncated) Commits * [`fb8b358`](codecov/codecov-action@fb8b358) chore(release): 7.0.0 ([#1957](https://redirect.github.com/codecov/codecov-action/issues/1957)) * [`ca0a928`](codecov/codecov-action@ca0a928) ci: remove Enforce License Compliance workflow ([#1950](https://redirect.github.com/codecov/codecov-action/issues/1950)) * See full diff in [compare view](codecov/codecov-action@e79a696...fb8b358) [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
src/scripts473e292→bad8df5(latestcodecov/wrappermain). This pulls in the switch to fetching the Codecov Uploader PGP key from thecodecovsecopsKeybase account (the pin was 12 commits behind).6.0.1→7.0.0insrc/version.Makefiledeploy tagsv6→v7and add a## v7 Releasenote toREADME.md.Why a submodule bump was needed
git submodule update --init --recursiveonly checks out the commit pinned in this repo's tree, not the tip of the wrapper'smain. The pin had drifted 12 commits behind, so this records the new pointer (bad8df5) that everyone/CI will now check out.Test plan
git submodule update --init --recursivechecks outbad8df5undersrc/scripts.codecovsecopsand verifies the CLISHA256SUMsignature.make deployretagsv7/v7.0.0after merge.Made with Cursor