Merge pull request #5708 from microsoft/dependabot/github_actions/cod…

…ecov/codecov-action-4.0.0

Bump codecov/codecov-action from 3.1.6 to 4.0.0

.github/workflows/pytest.yaml

@@ -21,6 +21,7 @@ jobs:
   pytestmypy:
 
     runs-on: ${{ matrix.os }}
+    environment: testing-environment
     strategy:
       # don't stop other jobs if one fails
       # this is often due to network issues
@@ -99,10 +100,12 @@ jobs:
       run: |
         pytest -m "serial" -n 0 --dist no --cov=qcodes --cov-report xml --cov-append --hypothesis-profile ci tests
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6
+      uses: codecov/codecov-action@f30e4959ba63075080d4f7f90cacc18d9f3fafd7 # v4.0.0
       with:
         file: ./coverage.xml
         env_vars: OS,PYTHON
+      env:
+        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
       if: ${{ github.event_name != 'merge_group' }}
       # we don't trigger coverage from merge groups since that would
       # make twice the number of coverage reports be uploded from a given commit