From 89d2fe893519325a67fca63edffa7f49fe5f820f Mon Sep 17 00:00:00 2001 From: Tim Treis Date: Mon, 8 Jun 2026 15:23:05 +0200 Subject: [PATCH] ci: bump codecov-action to v6 to fix signature verification codecov-action@v5 verifies the codecov CLI against Codecov's old Keybase key, which they bricked after migrating accounts. The upload step now fails with "Could not verify signature" and, with fail_ci_if_error true, hard-fails the Coverage job. v6 (= 6.0.2) ships the updated key. Ref: https://github.com/codecov/codecov-action/issues/1956 Co-Authored-By: Claude Opus 4.8 --- .github/workflows/test.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 7d00e8a3..1db7c86c 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -94,7 +94,7 @@ jobs: path: tests/figures/* - name: Upload coverage if: matrix.env.name == 'hatch-test.py3.14-stable' - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@v6 with: fail_ci_if_error: true use_oidc: true