datadog-agent icon indicating copy to clipboard operation
datadog-agent copied to clipboard

Published 20 hours ago • verified publisher icon DataDog

Bump codecov/codecov-action from 3 to 4

Open dependabot[bot] opened this issue 1 year ago • 5 comments

Bumps codecov/codecov-action from 3 to 4.

Release notes

Sourced from codecov/codecov-action's releases.

v4.0.0

v4 of the Codecov Action uses the CLI as the underlying upload. The CLI has helped to power new features including local upload, the global upload token, and new upcoming features.

Breaking Changes

  • The Codecov Action runs as a node20 action due to node16 deprecation. See this post from GitHub on how to migrate.
  • Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This doc shows instructions on how to add the Codecov token.
  • OS platforms have been added, though some may not be automatically detected. To see a list of platforms, see our CLI download page
  • Various arguments to the Action have been changed. Please be aware that the arguments match with the CLI's needs

v3 versions and below will not have access to CLI features (e.g. global upload token, ATS).

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

4.0.0-beta.2

Fixes

  • #1085 not adding -n if empty to do-upload command

4.0.0-beta.1

v4 represents a move from the universal uploader to the Codecov CLI. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.

Breaking Changes

  • No current support for aarch64 and alpine architectures.
  • Tokenless uploading is unsuported
  • Various arguments to the Action have been removed

3.1.4

Fixes

  • #967 Fix typo in README.md
  • #971 fix: add back in working dir
  • #969 fix: CLI option names for uploader

Dependencies

  • #970 build(deps-dev): bump @​types/node from 18.15.12 to 18.16.3
  • #979 build(deps-dev): bump @​types/node from 20.1.0 to 20.1.2
  • #981 build(deps-dev): bump @​types/node from 20.1.2 to 20.1.4

3.1.3

Fixes

  • #960 fix: allow for aarch64 build

Dependencies

  • #957 build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0
  • #958 build(deps): bump openpgp from 5.7.0 to 5.8.0
  • #959 build(deps-dev): bump @​types/node from 18.15.10 to 18.15.12

3.1.2

Fixes

  • #718 Update README.md
  • #851 Remove unsupported path_to_write_report argument
  • #898 codeql-analysis.yml
  • #901 Update README to contain correct information - inputs and negate feature
  • #955 fix: add in all the extra arguments for uploader

Dependencies

  • #819 build(deps): bump openpgp from 5.4.0 to 5.5.0
  • #835 build(deps): bump node-fetch from 3.2.4 to 3.2.10
  • #840 build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4
  • #841 build(deps): bump @​actions/core from 1.9.1 to 1.10.0
  • #843 build(deps): bump @​actions/github from 5.0.3 to 5.1.1
  • #869 build(deps): bump node-fetch from 3.2.10 to 3.3.0
  • #872 build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0
  • #879 build(deps): bump decode-uri-component from 0.2.0 to 0.2.2

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot[bot] avatar Feb 05 '24 20:02 dependabot[bot]

The following labels could not be found: dependencies-github-actions.

dependabot[bot] avatar Feb 05 '24 20:02 dependabot[bot]

Bloop Bleep... Dogbot Here

Regression Detector Results

Run ID: 87ab2be6-c94f-4efd-9c6b-3ed7a035b06c Baseline: 34f0fcf2b8c31c2733320f266d03f078e5e827f0 Comparison: c94365ae51b217c8b5372efdfc69688341ec4f13

Performance changes are noted in the perf column of each table:

  • ✅ = significantly better comparison variant performance
  • ❌ = significantly worse comparison variant performance
  • ➖ = no significant change in performance

No significant changes in experiment optimization goals

Confidence level: 90.00% Effect size tolerance: |Δ mean %| ≥ 5.00%

There were no significant changes in experiment optimization goals at this confidence level and effect size tolerance.

Experiments ignored for regressions

Regressions in experiments with settings containing erratic: true are ignored.

perf experiment goal Δ mean % Δ mean % CI
➖ file_to_blackhole % cpu utilization -1.29 [-7.81, +5.23]

Fine details of change detection per experiment

perf experiment goal Δ mean % Δ mean % CI
➖ pycheck_1000_100byte_tags % cpu utilization +2.35 [-2.94, +7.64]
➖ tcp_syslog_to_blackhole ingress throughput +0.53 [+0.45, +0.62]
➖ process_agent_real_time_mode memory utilization +0.21 [+0.16, +0.26]
➖ file_tree memory utilization +0.21 [+0.15, +0.27]
➖ process_agent_standard_check_with_stats memory utilization +0.12 [+0.09, +0.16]
➖ trace_agent_msgpack ingress throughput +0.01 [-0.01, +0.02]
➖ trace_agent_json ingress throughput +0.00 [-0.02, +0.02]
➖ tcp_dd_logs_filter_exclude ingress throughput -0.00 [-0.05, +0.05]
➖ uds_dogstatsd_to_api ingress throughput -0.00 [-0.06, +0.06]
➖ uds_dogstatsd_to_api_cpu % cpu utilization -0.18 [-3.29, +2.92]
➖ otel_to_otel_logs ingress throughput -0.20 [-0.84, +0.44]
➖ process_agent_standard_check memory utilization -0.24 [-0.28, -0.20]
➖ basic_py_check % cpu utilization -0.51 [-2.86, +1.83]
➖ file_to_blackhole % cpu utilization -1.29 [-7.81, +5.23]
➖ idle memory utilization -1.56 [-1.61, -1.51]

Explanation

A regression test is an A/B test of target performance in a repeatable rig, where "performance" is measured as "comparison variant minus baseline variant" for an optimization goal (e.g., ingress throughput). Due to intrinsic variability in measuring that goal, we can only estimate its mean value for each experiment; we report uncertainty in that value as a 90.00% confidence interval denoted "Δ mean % CI".

For each experiment, we decide whether a change in performance is a "regression" -- a change worth investigating further -- if all of the following criteria are true:

  1. Its estimated |Δ mean %| ≥ 5.00%, indicating the change is big enough to merit a closer look.

  2. Its 90.00% confidence interval "Δ mean % CI" does not contain zero, indicating that if our statistical model is accurate, there is at least a 90.00% chance there is a difference in performance between baseline and comparison variants.

  3. Its configuration does not mark it "erratic".

pr-commenter[bot] avatar Feb 05 '24 21:02 pr-commenter[bot]

@dependabot rebase

paulcacheux avatar Mar 12 '24 12:03 paulcacheux

It looks like the codecov step is now failing to fetch the token, rebased the PR to see if we fixed the issue on main in the mean time

paulcacheux avatar Mar 12 '24 12:03 paulcacheux

@amenasria it looks like v4 does not support tokenless uploading, so no bump is possible as-is here

paulcacheux avatar Mar 12 '24 13:03 paulcacheux

@dependabot close

chouetz avatar Aug 06 '24 12:08 chouetz

windows-unittest was deleted

chouetz avatar Aug 06 '24 12:08 chouetz