From 1b65913b6802911b581d89424ce8097f39d2421f Mon Sep 17 00:00:00 2001 From: Bartosz Burda Date: Mon, 8 Jun 2026 14:15:32 +0200 Subject: [PATCH] ci(coverage): bump codecov-action v5 -> v7 for Keybase GPG key migration Codecov migrated the Keybase account hosting the uploader's GPG public key. With codecov-action@v5 the wrapper fetches that key from the old path, gets non-OpenPGP data, and the upload step fails verification with "gpg: no valid OpenPGP data found" / "Can't check signature: No public key", breaking the coverage job on every push to main. v7.0.0 points the uploader at the migrated key and restores coverage uploads. GPG verification and fail_ci_if_error stay enabled. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ec26d728..e9cfff51 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -346,7 +346,7 @@ jobs: - name: Upload coverage to Codecov if: github.event_name == 'push' && github.ref == 'refs/heads/main' - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@v7 with: token: ${{ secrets.CODECOV_TOKEN }} files: coverage.info