ci: bump codecov/codecov-action from 5 to 7 - #2
Closed
dependabot[bot] wants to merge 12 commits into
Closed
Conversation
Prepares the JOSS submission on a branch. Not merged to master; nothing is submitted by this commit. - paper.md: 819-word software paper, single author (Kuan-Ta Wu, ORCID 0009-0006-0529-8709). Describes the software only; research results of the three methodology preprints are cited, not restated. - paper.bib: six references, every field taken verbatim from the resolved DOI record (DataCite for the figshare preprints, Crossref for the rest). - README: adds Statement of need, API overview and Community guidelines -- the three items the JOSS review checklist checks in the docs separately from the paper. - .github/workflows/draft-pdf.yml: Open Journals preview build (artifact only, contacts nothing). No package code touched; numerical behavior unchanged.
pit-release-gate --badge runs the demo unchanged and then appends a markdown badge snippet plus a comment carrying each signal's frozen rho_hat, so a user who pastes the badge has something to point it at. The badge reads 'screened with' -- it records that the screen was RUN and explicitly disclaims any pass/fail reading. No certification language. No numerical behavior changed: badge_snippet() is pure formatting over the dict run_demo() already returns, and test_badge_flag_does_not_change_demo_output asserts the demo output is byte-identical with and without the flag. tests/test_reproduces_paper.py is untouched. 14 passed (11 existing + 3 new).
Documentation only. No package behavior changed: the only edit under src/ is the __version__ string, tests/test_reproduces_paper.py is untouched, and the demo reproduces the same numbers as 0.1.0 (11 passed). - paper.md / paper.bib for the JOSS submission - README: Statement of need, API overview, Community guidelines - .github/workflows/draft-pdf.yml: Open Journals preview build
Adds an offline export of the screen result: per-signal summary statistics (periods screened and flagged, mean and max rho_hat, assigned completeness, verdict) plus the five settings that produced those verdicts. The format is documented as a standalone versioned interchange spec in docs/results-schema.md and is free for other tools to adopt. No change to package behavior: tests/test_reproduces_paper.py is untouched and the demo reproduces the same numbers as 0.1.1. controller.MIN_ENTITIES names an existing literal; the value is unchanged. No telemetry, enforced structurally rather than by policy: no module in the package imports a transport, and a test walks every module and fails if one ever does. The submission half of this work is parked on the submit-cli branch until a receiving endpoint exists.
Combines the two additive CLI flags: --badge prints a README snippet recording that the screen was run, --export writes the pit-screen-results record. Both are pure formatting or serialization over an existing run_demo result; neither performs estimation. No change to numerical behavior: gate, store, reweight, monitor and tests/test_reproduces_paper.py are untouched relative to 0.1.1.
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 7. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v5...v7) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
MaxWellApexLab
force-pushed
the
master
branch
from
September 7, 2026 18:29
6532042 to
d47be84
Compare
MaxWellApexLab
deleted the
dependabot/github_actions/codecov/codecov-action-7
branch
September 7, 2026 18:29
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps codecov/codecov-action from 5 to 7.
Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
fb8b358chore(release): 7.0.0 (#1957)ca0a928ci: remove Enforce License Compliance workflow (#1950)e79a696chore(release): 6.0.1 (#1949)51e6422fix: prevent template injection in run: steps (VULN-1652) (#1947)57e3a13Th/6.0.0 (#1928)f67d33dRevert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0""...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)