Skip to content

ci: bump codecov-action to v6 and fail CI on upload error#1142

Open
timtreis wants to merge 2 commits into
mainfrom
fix/codecov-action-v6-signature
Open

ci: bump codecov-action to v6 and fail CI on upload error#1142
timtreis wants to merge 2 commits into
mainfrom
fix/codecov-action-v6-signature

Conversation

@timtreis

@timtreis timtreis commented Jun 8, 2026

Copy link
Copy Markdown
Member

Two changes to the coverage upload step:

  1. codecov-action@v5 -> @v6. v5 verifies the codecov CLI binary against Codecov's old Keybase key, which they bricked after migrating accounts, so uploads now fail with Could not verify signature. @v6 (= 6.0.2) ships the updated key.

  2. Restore fail_ci_if_error: true. This matches the cookiecutter-scverse template default, so a broken coverage upload surfaces as a CI failure instead of silently passing (which is what masked this issue here until now).

Ref: codecov/codecov-action#1956

codecov-action@v5 verifies the codecov CLI against Codecov's old Keybase
key, which they bricked after migrating accounts, so the upload step now
fails with "Could not verify signature". v6 (= 6.0.2) ships the updated
key.

Also restores fail_ci_if_error: true (the cookiecutter-scverse template
default) so a broken coverage upload surfaces as a CI failure instead of
silently passing.

Ref: codecov/codecov-action#1956

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@timtreis timtreis requested a review from LucaMarconato June 8, 2026 13:24
@codecov

codecov Bot commented Jun 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.44%. Comparing base (af51100) to head (7d8cb29).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1142   +/-   ##
=======================================
  Coverage   92.44%   92.44%           
=======================================
  Files          51       51           
  Lines        7811     7811           
=======================================
  Hits         7221     7221           
  Misses        590      590           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@ajkswamy

ajkswamy commented Jun 8, 2026

Copy link
Copy Markdown

@timtreis Thanks for the fix. Could we also bump directly to v7? In case there are any more hotfix releases like v7.0.1, we would not need to bump again

@timtreis

timtreis commented Jun 8, 2026

Copy link
Copy Markdown
Member Author

Hey @ajkswamy,

the rational for v6 vs v7 was that there might be more breaking changes coming in the v7 lane which we might not want to sneak up on us, given the major version change

@timtreis timtreis enabled auto-merge (squash) June 9, 2026 00:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants