Update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
codecov/codecov-action	action	patch	v3.1.1 -> v3.1.6
ncipollo/release-action	action	minor	v1.8.6 -> v1.20.0
pypa/gh-action-pypi-publish	action	digest	37f50c2 -> 3317ede
suzuki-shunsuke/github-action-renovate-config-validator	action	patch	v0.1.2 -> v0.1.3

---

Release Notes

codecov/codecov-action (codecov/codecov-action)

v3.1.6

Compare Source

#Full Changelog: codecov/codecov-action@v3.1.5...v3.1.6

v3.1.5

Compare Source

What's Changed

• action.yml: Update to Node.js 20 by @​hallabro in #​1228

v3.1.4: 3.1.4

Compare Source

What's Changed

• build(deps-dev): bump @​types/node from 18.15.12 to 18.16.3 by @​dependabot in #​970
• Fix typo in README.md by @​hisaac in #​967
• fix: add back in working dir by @​thomasrockhu-codecov in #​971
• fix: CLI option names for uploader by @​kleisauke in #​969
• build(deps-dev): bump @​types/node from 18.16.3 to 20.1.0 by @​dependabot in #​975
• build(deps-dev): bump @​types/node from 20.1.0 to 20.1.2 by @​dependabot in #​979
• build(deps-dev): bump @​types/node from 20.1.2 to 20.1.4 by @​dependabot in #​981
• release: 3.1.4 by @​thomasrockhu-codecov in #​983

New Contributors

• @​hisaac made their first contribution in #​967
• @​kleisauke made their first contribution in #​969

Full Changelog: codecov/codecov-action@v3.1.3...v3.1.4

v3.1.3: 3.1.3

Compare Source

What's Changed

• build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0 by @​dependabot in #​957
• build(deps): bump openpgp from 5.7.0 to 5.8.0 by @​dependabot in #​958
• build(deps-dev): bump @​types/node from 18.15.10 to 18.15.12 by @​dependabot in #​959
• fix: allow for aarch64 build by @​thomasrockhu-codecov in #​960
• chore(release): bump to 3.1.3 by @​thomasrockhu-codecov in #​961

Full Changelog: codecov/codecov-action@v3.1.2...v3.1.3

v3.1.2: 3.1.2

Compare Source

What's Changed

• build(deps): bump node-fetch from 3.2.4 to 3.2.10 by @​dependabot in #​835
• build(deps-dev): bump @​types/node from 16.11.40 to 18.13.0 by @​dependabot in #​911
• build(deps-dev): bump @​vercel/ncc from 0.34.0 to 0.36.1 by @​dependabot in #​900
• build(deps-dev): bump typescript from 4.7.4 to 4.9.5 by @​dependabot in #​905
• Update README.md by @​stefanomunarini in #​718
• build(deps): bump openpgp from 5.4.0 to 5.5.0 by @​dependabot in #​819
• build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4 by @​dependabot in #​840
• build(deps): bump @​actions/core from 1.9.1 to 1.10.0 by @​dependabot in #​841
• build(deps): bump @​actions/github from 5.0.3 to 5.1.1 by @​dependabot in #​843
• build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by @​dependabot in #​896
• build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0 by @​dependabot in #​872
• build(deps): bump node-fetch from 3.2.10 to 3.3.0 by @​dependabot in #​869
• build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 by @​dependabot in #​879
• build(deps): bump json5 from 2.2.1 to 2.2.3 by @​dependabot in #​895
• codeql-analysis.yml by @​minumulasri in #​898
• build(deps): bump ossf/scorecard-action from 1.1.1 to 2.1.2 by @​dependabot in #​889
• build(deps-dev): bump @​types/node from 18.13.0 to 18.14.0 by @​dependabot in #​922
• build(deps): bump openpgp from 5.5.0 to 5.7.0 by @​dependabot in #​924
• build(deps-dev): bump @​types/node from 18.14.0 to 18.14.2 by @​dependabot in #​927
• Remove unsupported path_to_write_report argument by @​jsoref in #​851
• Update README to contain correct information - inputs and negate feature by @​moshe-azaria-sage in #​901
• build(deps-dev): bump @​types/node from 18.14.2 to 18.14.6 by @​dependabot in #​933
• build(deps-dev): bump @​types/node from 18.14.6 to 18.15.0 by @​dependabot in #​937
• build(deps-dev): bump @​types/node from 18.15.0 to 18.15.5 by @​dependabot in #​945
• build(deps): bump node-fetch from 3.3.0 to 3.3.1 by @​dependabot in #​938
• build(deps-dev): bump @​types/node from 18.15.5 to 18.15.6 by @​dependabot in #​946
• build(deps-dev): bump @​types/node from 18.15.6 to 18.15.10 by @​dependabot in #​947
• build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 by @​dependabot in #​951
• fix: add in all the extra arguments for uploader by @​thomasrockhu-codecov in #​955
• chore(release): bump to 3.1.2 by @​thomasrockhu-codecov in #​956

New Contributors

• @​stefanomunarini made their first contribution in #​718
• @​minumulasri made their first contribution in #​898
• @​jsoref made their first contribution in #​851
• @​moshe-azaria-sage made their first contribution in #​901

Full Changelog: codecov/codecov-action@v3.1.1...v3.1.2

ncipollo/release-action (ncipollo/release-action)

v1.20.0

Compare Source

What's Changed

• Fixes #​542 Add previous tag option by @​ncipollo in #​550

Full Changelog: ncipollo/release-action@v1...v1.20.0

v1.19.2

Compare Source

What's Changed

• Update immutableCreate's default in the documentation by @​bblanchon in #​547
• Fixes #​548 Add support body + generated release notes by @​ncipollo in #​549

New Contributors

• @​bblanchon made their first contribution in #​547

Full Changelog: ncipollo/release-action@v1...v1.19.2

v1.19.1

Compare Source

Defaults immutableCreate to false if it is omitted.

Full Changelog: ncipollo/release-action@v1.19.0...v1.19.1

v1.19.0

Compare Source

What's Changed

• Fixes #​540 Add support for immutable releases by @​ncipollo in #​544
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​541
• Bump glob from 11.0.2 to 11.0.3 by @​dependabot[bot] in #​534

Full Changelog: ncipollo/release-action@v1...v1.19.0

v1.18.0

Compare Source

• Fixes #​529 Collect asset URLs into output

Full Changelog: ncipollo/release-action@v1...v1.18.0

v1.17.0

Compare Source

What's Changed

• Bump ts-jest from 29.2.5 to 29.2.6 by @​dependabot in #​506
• Bump @​types/node from 22.13.4 to 22.13.8 by @​dependabot in #​505
• Bump @​octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @​dependabot in #​507
• Bump @​octokit/request from 8.1.6 to 8.4.1 by @​dependabot in #​508
• Fixes #​513 Don't generate release notes if omitBody is set by @​ncipollo in #​517
• Bump typescript from 5.7.3 to 5.8.3 by @​dependabot in #​518
• Bump ts-jest from 29.2.6 to 29.3.2 by @​dependabot in #​521
• Bump glob from 11.0.1 to 11.0.2 by @​dependabot in #​520
• Bump @​types/node from 22.13.8 to 22.15.3 by @​dependabot in #​519
• Bump ts-jest from 29.3.2 to 29.3.4 by @​dependabot in #​526
• Bump @​actions/github from 6.0.0 to 6.0.1 by @​dependabot in #​525
• Bump @​types/node from 22.15.18 to 22.15.29 by @​dependabot in #​524
• Fixes #​529 Add zip and tarball urls to output

Full Changelog: ncipollo/release-action@v1...v1.17.0

v1.16.0

Compare Source

What's Changed

• Bump @​octokit/request-error from 5.0.1 to 5.1.1 by @​dependabot in #​498
• Update checkout action version in example by @​Cycloctane in #​496
• Bump undici from 5.28.4 to 5.28.5 by @​dependabot in #​499
• Bump glob from 11.0.0 to 11.0.1 by @​dependabot in #​495
• Bump @​types/node from 22.10.3 to 22.13.4 by @​dependabot in #​500
• Regenerate release notes on release updates by @​rantoniuk in #​497

New Contributors

• @​rantoniuk made their first contribution in #​497

Full Changelog: ncipollo/release-action@v1...v1.16.0

v1.15.0

Compare Source

What's Changed

Add more explicit error when release list API call fails.

TLDR below - many dependency updates.

• Bump semver from 6.3.0 to 6.3.1 by @​dependabot in #​350
• Bump actions/checkout from 3 to 4 by @​dependabot in #​364
• Bump glob from 10.3.1 to 10.3.4 by @​dependabot in #​361
• Bump jest-circus from 29.5.0 to 29.6.4 by @​dependabot in #​359
• Bump typescript from 5.1.6 to 5.2.2 by @​dependabot in #​362
• Bump @​types/node from 20.3.3 to 20.6.0 by @​dependabot in #​366
• Bump jest and @​types/jest by @​dependabot in #​367
• Bump @​babel/traverse from 7.17.3 to 7.23.2 by @​dependabot in #​378
• Bump jest and @​types/jest by @​dependabot in #​377
• Bump jest-circus from 29.6.4 to 29.7.0 by @​dependabot in #​376
• Bump @​types/node from 20.6.0 to 20.8.6 by @​dependabot in #​379
• Bump @​actions/core from 1.10.0 to 1.10.1 by @​dependabot in #​375
• Bump @​types/jest from 29.5.5 to 29.5.7 by @​dependabot in #​386
• Bump actions/setup-node from 3 to 4 by @​dependabot in #​381
• Bump @​types/node from 20.8.6 to 20.9.0 by @​dependabot in #​390
• Bump typescript from 5.2.2 to 5.3.2 by @​dependabot in #​396
• Bump @​types/node from 20.9.0 to 20.10.1 by @​dependabot in #​395
• Bump @​types/jest from 29.5.7 to 29.5.11 by @​dependabot in #​399
• Bump @​actions/github from 5.1.1 to 6.0.0 by @​dependabot in #​385
• Bump typescript from 5.3.2 to 5.3.3 by @​dependabot in #​403
• Bump @​types/node from 20.10.1 to 20.10.6 by @​dependabot in #​402
• Upgrade to Node 20 by @​aovens-quantifi in #​411
• Bump undici from 5.28.2 to 5.28.3 by @​dependabot in #​423
• Bump @​types/jest from 29.5.11 to 29.5.12 by @​dependabot in #​427
• Bump @​types/node from 20.10.6 to 20.11.24 by @​dependabot in #​426
• Bump ts-jest from 29.1.1 to 29.1.2 by @​dependabot in #​409
• Bump undici from 5.28.3 to 5.28.4 by @​dependabot in #​439
• Bump typescript from 5.3.3 to 5.4.3 by @​dependabot in #​438
• Bump @​types/node from 20.11.24 to 20.12.2 by @​dependabot in #​437
• Bump glob from 10.3.10 to 10.3.12 by @​dependabot in #​436
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in #​449
• Bump glob from 10.3.12 to 11.0.0 by @​dependabot in #​457
• Bump typescript from 5.4.3 to 5.5.4 by @​dependabot in #​459
• Bump ts-jest from 29.1.2 to 29.2.4 by @​dependabot in #​460
• Bump @​types/node from 20.12.2 to 22.0.2 by @​dependabot in #​458
• Bump cross-spawn from 7.0.3 to 7.0.6 by @​dependabot in #​480
• Bump micromatch from 4.0.4 to 4.0.8 by @​dependabot in #​463
• Bump @​types/node from 22.0.2 to 22.10.3 by @​dependabot in #​487
• Bump @​types/jest from 29.5.12 to 29.5.14 by @​dependabot in #​476
• Bump ts-jest from 29.2.4 to 29.2.5 by @​dependabot in #​464
• Bump @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in #​488
• Bump typescript from 5.5.4 to 5.7.3 by @​dependabot in #​490

New Contributors

• @​aovens-quantifi made their first contribution in #​411

Full Changelog: ncipollo/release-action@v1.13.0...v1.15.0

v1.14.0

Compare Source

What's Changed

• Bump semver from 6.3.0 to 6.3.1 by @​dependabot in #​350
• Bump actions/checkout from 3 to 4 by @​dependabot in #​364
• Bump glob from 10.3.1 to 10.3.4 by @​dependabot in #​361
• Bump jest-circus from 29.5.0 to 29.6.4 by @​dependabot in #​359
• Bump typescript from 5.1.6 to 5.2.2 by @​dependabot in #​362
• Bump @​types/node from 20.3.3 to 20.6.0 by @​dependabot in #​366
• Bump jest and @​types/jest by @​dependabot in #​367
• Bump @​babel/traverse from 7.17.3 to 7.23.2 by @​dependabot in #​378
• Bump jest and @​types/jest by @​dependabot in #​377
• Bump jest-circus from 29.6.4 to 29.7.0 by @​dependabot in #​376
• Bump @​types/node from 20.6.0 to 20.8.6 by @​dependabot in #​379
• Bump @​actions/core from 1.10.0 to 1.10.1 by @​dependabot in #​375
• Bump @​types/jest from 29.5.5 to 29.5.7 by @​dependabot in #​386
• Bump actions/setup-node from 3 to 4 by @​dependabot in #​381
• Bump @​types/node from 20.8.6 to 20.9.0 by @​dependabot in #​390
• Bump typescript from 5.2.2 to 5.3.2 by @​dependabot in #​396
• Bump @​types/node from 20.9.0 to 20.10.1 by @​dependabot in #​395
• Bump @​types/jest from 29.5.7 to 29.5.11 by @​dependabot in #​399
• Bump @​actions/github from 5.1.1 to 6.0.0 by @​dependabot in #​385
• Bump typescript from 5.3.2 to 5.3.3 by @​dependabot in #​403
• Bump @​types/node from 20.10.1 to 20.10.6 by @​dependabot in #​402
• Upgrade to Node 20 by @​aovens-quantifi in #​411

New Contributors

• @​aovens-quantifi made their first contribution in #​411

Full Changelog: ncipollo/release-action@v1...v1.14.0

v1.13.0

Compare Source

What's Changed

• Fixed #​357 - we now use a ReadStream for artifacts which will hopefully prevent them from being loaded entirely into memory before being uploaded.
• Bump json5 from 2.2.1 to 2.2.3 by @​dependabot in #​296
• Bump typescript from 4.9.3 to 4.9.4 by @​dependabot in #​293
• Bump @​types/node from 18.11.10 to 18.11.18 by @​dependabot in #​292
• Bump glob and @​types/glob by @​dependabot in #​304
• Bump typescript from 4.9.4 to 4.9.5 by @​dependabot in #​305
• Bump jest-circus from 29.3.1 to 29.4.1 by @​dependabot in #​306
• Bump jest-circus from 29.4.1 to 29.5.0 by @​dependabot in #​318
• Bump @​types/node from 18.11.18 to 18.15.11 by @​dependabot in #​319
• Readme: update checkout to v3 by @​SpencerIsGiddy in #​303
• Bump typescript from 4.9.5 to 5.0.3 by @​dependabot in #​320
• Bump glob from 8.1.0 to 9.3.2 by @​dependabot in #​321
• Bump @​types/jest from 29.5.0 to 29.5.1 by @​dependabot in #​326
• Bump glob from 9.3.2 to 10.2.2 by @​dependabot in #​330
• Bump ts-jest from 29.0.5 to 29.1.0 by @​dependabot in #​329
• Bump typescript from 5.0.3 to 5.0.4 by @​dependabot in #​327
• Bump @​types/jest from 29.5.1 to 29.5.2 by @​dependabot in #​337
• Bump glob from 10.2.2 to 10.2.6 by @​dependabot in #​339
• Bump @​types/node from 18.15.11 to 20.3.2 by @​dependabot in #​340
• Bump ts-jest from 29.1.0 to 29.1.1 by @​dependabot in #​345
• Bump glob from 10.2.6 to 10.3.1 by @​dependabot in #​342
• Bump typescript from 5.0.4 to 5.1.6 by @​dependabot in #​343
• Bump @​types/node from 18.15.11 to 20.3.3 by @​dependabot in #​341

New Contributors

• @​SpencerIsGiddy made their first contribution in #​303

Full Changelog: ncipollo/release-action@v1...v1.13.0

v1.12.0

Compare Source

What's Changed

• Add support for make_latest option when creating or updating a release by @​ericcornelissen in #​283
• Dependency updates

New Contributor

• @​ericcornelissen made their first contribution in #​283

Full Changelog: ncipollo/release-action@v1.11.2...v1.12.0

v1.11.2

Compare Source

• Security updates
• Adds support for skipIfReleaseExists

v1.11.1

Compare Source

Fixes artifact glob issue for windows machines.

Full Changelog: ncipollo/release-action@v1.11.0...v1.11.1

v1.11.0

Compare Source

#​219 Add action input updateOnlyUnreleased. This will fail updates to releases which are not draft or prerelease.

v1.10.1

Compare Source

Update node version & dependencies.

v1.10.0

Compare Source

• Adds omitDraftDuringUpdate. This property allows you to avoid moving a release back to a draft if it's already been promoted to being a public (non-draft) release.
• Dependency updates (fixes for security bulletins & general updates)

v1.9.0

Compare Source

Adds support for generate_release_notes.

v1.8.10

Compare Source

• Update removeArtifacts logic so it runs even if you have no artifacts defined in the action.
• Security and dependency updates.

v1.8.9

Compare Source

Adds the removeArtifacts input which will remove all exiting artifacts before uploading new ones.

v1.8.8

Compare Source

The token input will now default to github.token if it's omitted (#​104).

v1.8.7

Compare Source

• Update dependencies.
• Add option to ignore prerelease on update (#​96)

suzuki-shunsuke/github-action-renovate-config-validator (suzuki-shunsuke/github-action-renovate-config-validator)

v0.1.3

Compare Source

#​316 Support .renovaterc.json5 by default

https://docs.renovatebot.com/configuration-options/#configuration-options

---

Configuration

📅 Schedule: Branch creation - "before 9am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (623e1e7) to head (41f08c4).

❗ Current head 41f08c4 differs from pull request most recent head b90bc06

Please upload reports for the commit b90bc06 to get more accurate results.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #285   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            6         6           
  Lines          173       173           
  Branches        20        20           
=========================================
  Hits           173       173