chore(deps): bump codecov/codecov-action from 5 to 7 - #11113
Merged
vicancy merged 1 commit intoAug 14, 2026
Merged
Conversation
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 7. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v5...v7) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
vicancy
deleted the
dependabot/github_actions/main/codecov/codecov-action-7
branch
August 14, 2026 09:29
This was referenced Sep 18, 2026
This was referenced Sep 21, 2026
Benziza
pushed a commit
to Benziza/queryguard-dotnet
that referenced
this pull request
Sep 21, 2026
Updated [docfx](https://github.com/dotnet/docfx) from 2.78.5 to 2.80.1. <details> <summary>Release notes</summary> _Sourced from [docfx's releases](https://github.com/dotnet/docfx/releases)._ ## 2.80.1 <!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed ### 💪 Other Changes * fix: preserve thematic breaks in overwrite Markdown by @vicancy in dotnet/docfx#11142 * fix: XML comment parse logics for block element that is adjacent to markdown content by @filzrev in dotnet/docfx#10966 * chore: Update Roslyn and Microsoft.Build package dependencies by @filzrev in dotnet/docfx#11124 * fix: preserve indentation around XML comment code blocks by @vicancy in dotnet/docfx#11143 * fix: stop metadata generation when restore fails by @vicancy in dotnet/docfx#11146 * fix: clarify empty .NET API diagnostics by @vicancy in dotnet/docfx#11145 * fix: share tool templates across target frameworks by @vicancy in dotnet/docfx#11144 * fix: honor TOC metadata while preserving file metadata overrides by @vicancy in dotnet/docfx#11140 * fix(deps): update esbuild to 0.28.1 and tsx to 4.22.4 by @dependabot[bot] in dotnet/docfx#11077 * feat(pdf): allow footer and header on cover and toc by @sergimos in dotnet/docfx#10958 * chore(deps): bump actions/setup-dotnet from 5 to 6 by @dependabot[bot] in dotnet/docfx#11116 * chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in dotnet/docfx#11115 * Bump Markdig from 1.1.0 to 1.1.1 by @dependabot[bot] in dotnet/docfx#11024 * deps: Update JsonSchema.Net dependency to 8.0.5 by @filzrev in dotnet/docfx#10964 ## New Contributors * @sergimos made their first contribution in dotnet/docfx#10958 **Full Changelog**: dotnet/docfx@v2.78.6...v2.80.1 ## 2.78.6 <!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed ### 💪 Other Changes * chore(deps): bump dependabot/fetch-metadata from 2.3.0 to 2.5.0 by @dependabot[bot] in dotnet/docfx#10956 * chore(deps): bump paulhatch/semantic-version from 5.4.0 to 6.0.1 by @dependabot[bot] in dotnet/docfx#10978 * chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5 in /templates by @dependabot[bot] in dotnet/docfx#11016 * Bump Jint from 4.6.0 to 4.6.1 by @dependabot[bot] in dotnet/docfx#11018 * chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in dotnet/docfx#11015 * chore(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in dotnet/docfx#11014 * Bump Markdig from 1.0.0 to 1.1.0 by @dependabot[bot] in dotnet/docfx#11019 * chore: remove unnecessary using to fix the Lint check by @lahma in dotnet/docfx#11085 * Make xref archive download test hermetic by @vicancy in dotnet/docfx#11092 * fix: treat different ports as external links by @vicancy in dotnet/docfx#11091 * chore: cleanup YamlSerializationTest.cs by @filzrev in dotnet/docfx#10974 * chore(deps-dev): bump follow-redirects from 1.15.11 to 1.16.0 in /templates by @dependabot[bot] in dotnet/docfx#11062 * chore(deps): bump postcss from 8.5.6 to 8.5.14 in /templates by @dependabot[bot] in dotnet/docfx#11070 * chore(deps): bump uuid and mermaid in /templates by @dependabot[bot] in dotnet/docfx#11073 * chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 in /templates by @dependabot[bot] in dotnet/docfx#11061 * chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /templates by @dependabot[bot] in dotnet/docfx#11071 * chore(deps): bump mermaid from 11.15.0 to 11.16.1 in /templates by @dependabot[bot] in dotnet/docfx#11093 * chore(deps): bump dompurify from 3.3.1 to 3.4.13 in /templates by @dependabot[bot] in dotnet/docfx#11096 * chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.1 in /templates by @dependabot[bot] in dotnet/docfx#11095 * chore(deps): bump postcss from 8.5.14 to 8.5.26 in /templates by @dependabot[bot] in dotnet/docfx#11094 * chore(deps): bump fast-uri from 3.1.2 to 3.1.5 in /templates by @dependabot[bot] in dotnet/docfx#11097 * chore(deps-dev): bump socket.io-parser from 4.2.5 to 4.2.7 in /templates by @dependabot[bot] in dotnet/docfx#11098 * chore(deps): bump ws, engine.io-client, engine.io and socket.io-adapter in /templates by @dependabot[bot] in dotnet/docfx#11101 * chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.18 in /templates by @dependabot[bot] in dotnet/docfx#11099 * deps: Update playwright version to 1.60.0 by @filzrev in dotnet/docfx#11074 * deps: Update roslyn package versions to 5.6.0 by @filzrev in dotnet/docfx#11047 * fix(deps): apply compatible npm security updates by @vicancy in dotnet/docfx#11105 * Bump the spectre group with 2 updates by @dependabot[bot] in dotnet/docfx#11102 * Bump the xunit group with 1 update by @dependabot[bot] in dotnet/docfx#11107 * Fix typo in Schema Document Processor overview by @smartcaveman in dotnet/docfx#11005 * Bump coverlet.collector from 8.0.0 to 8.0.1 by @dependabot[bot] in dotnet/docfx#11045 * chore(deps): bump paulhatch/semantic-version from 6.0.1 to 6.0.2 by @dependabot[bot] in dotnet/docfx#11036 * chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by @dependabot[bot] in dotnet/docfx#11051 * chore(deps): bump actions/deploy-pages from 4 to 5 by @dependabot[bot] in dotnet/docfx#11049 * chore(deps): bump azure/login from 2 to 3 by @dependabot[bot] in dotnet/docfx#11035 * Bump Jint from 4.6.1 to 4.6.3 by @dependabot[bot] in dotnet/docfx#11032 * chore(deps): bump dorny/test-reporter from 2.5.0 to 3.0.0 by @dependabot[bot] in dotnet/docfx#11043 * Bump AwesomeAssertions from 9.4.0 to 9.5.0 by @dependabot[bot] in dotnet/docfx#11114 * chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @dependabot[bot] in dotnet/docfx#11110 * chore(deps): bump paulhatch/semantic-version from 6.0.2 to 6.0.3 by @dependabot[bot] in dotnet/docfx#11112 * chore(deps): bump actions/upload-pages-artifact from 4 to 5 by @dependabot[bot] in dotnet/docfx#11109 * chore(deps): bump codecov/codecov-action from 5 to 7 by @dependabot[bot] in dotnet/docfx#11113 * chore(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in dotnet/docfx#11111 * Bump the xunit group with 1 update by @dependabot[bot] in dotnet/docfx#11117 * Bump coverlet.collector from 8.0.1 to 10.0.1 by @dependabot[bot] in dotnet/docfx#11119 * Bump Microsoft.NET.Test.Sdk from 18.0.1 to 18.9.0 by @dependabot[bot] in dotnet/docfx#11122 ... (truncated) Commits viewable in [compare view](dotnet/docfx@v2.78.5...v2.80.1). </details> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This was referenced Sep 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps codecov/codecov-action from 5 to 7.
Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
fb8b358chore(release): 7.0.0 (#1957)ca0a928ci: remove Enforce License Compliance workflow (#1950)e79a696chore(release): 6.0.1 (#1949)51e6422fix: prevent template injection in run: steps (VULN-1652) (#1947)57e3a13Th/6.0.0 (#1928)f67d33dRevert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0""...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)