Skip to content

Bump actions/upload-code-coverage from 1.4.3 to 1.4.4 in the actions group across 1 directory - #234

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b4a102282b
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b4a102282b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 1 update in the / directory: actions/upload-code-coverage.

Updates actions/upload-code-coverage from 1.4.3 to 1.4.4

Release notes

Sourced from actions/upload-code-coverage's releases.

v1.4.4

Fixed

  • Non-default branch pushes no longer associate coverage with an unrelated fork pull request that uses the same branch name. (#33)
  • When a pushed branch has multiple open pull requests, the action prefers the pull request targeting the default branch. If no unique default-branch target exists, the upload skips successfully instead of selecting arbitrarily or failing CI. (#33)

Documentation

  • Document the action's Bash, Python 3.9+, and conditional GitHub CLI runner requirements, including when pull-requests: read is required. (#29)

Maintenance

  • Add regression tests that prevent shell-injection protections from being reintroduced. (#32)

Full Changelog: actions/upload-code-coverage@v1.4.3...v1.4.4

Changelog

Sourced from actions/upload-code-coverage's changelog.

Changelog

Unreleased

v1.4.4 - 2026-10-01

Fixed

  • Non-default branch pushes no longer associate coverage with an unrelated fork pull request that uses the same branch name.
  • When a pushed branch has multiple open pull requests, the action prefers the pull request targeting the default branch. If no unique default-branch target exists, the upload skips successfully instead of selecting arbitrarily or failing CI.

v1.4.3 - 2026-09-28

Fixed

  • Non-default branch pushes without an open pull request now skip successfully instead of attempting an upload that the API rejects.
  • GitHub CLI failures during pull request discovery now produce an actionable error instead of being silently treated as no matching pull request.
Commits
  • 2b21a77 Merge pull request #34 from actions/cassiomarques/release-v1.4.4
  • c7f2f13 Prepare v1.4.4 release
  • cd112d6 Merge pull request #33 from actions/cassiomarques/scope-push-pr-lookup
  • 19923c1 Address pull request review feedback
  • 9706dd2 Merge pull request #29 from actions/docs/runner-requirements
  • 891aec1 Merge branch 'main' into docs/runner-requirements
  • 60531d5 Prefer default-branch PR for ambiguous pushes
  • 713d268 Scope push PR lookup to repository
  • 1f899d9 Merge pull request #32 from actions/cassiomarques/shell-injection-regression-...
  • 6e4a64d Test shell injection protections
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 5, 2026
@dependabot dependabot Bot changed the title Bump actions/upload-code-coverage from 1.4.3 to 1.4.4 in the actions group Bump actions/upload-code-coverage from 1.4.3 to 1.4.4 in the actions group across 1 directory Oct 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b4a102282b branch from c2f9f4a to 1d225c4 Compare October 7, 2026 06:26
Bumps the actions group with 1 update in the / directory: [actions/upload-code-coverage](https://github.com/actions/upload-code-coverage).


Updates `actions/upload-code-coverage` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/actions/upload-code-coverage/releases)
- [Changelog](https://github.com/actions/upload-code-coverage/blob/main/CHANGELOG.md)
- [Commits](actions/upload-code-coverage@bfa741d...2b21a77)

---
updated-dependencies:
- dependency-name: actions/upload-code-coverage
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b4a102282b branch from 1d225c4 to dca191c Compare October 8, 2026 06:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants