Skip to content

chore(deps): bump the gh-actions-packages group across 3 directories with 2 updates#7901

Merged
dd-octo-sts[bot] merged 1 commit intomasterfrom
dependabot/github_actions/gh-actions-packages-a92c2d1df9
Apr 1, 2026
Merged

chore(deps): bump the gh-actions-packages group across 3 directories with 2 updates#7901
dd-octo-sts[bot] merged 1 commit intomasterfrom
dependabot/github_actions/gh-actions-packages-a92c2d1df9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps the gh-actions-packages group with 1 update in the / directory: dependabot/fetch-metadata.
Bumps the gh-actions-packages group with 1 update in the /.github/actions/coverage directory: codecov/codecov-action.
Bumps the gh-actions-packages group with 1 update in the /.github/workflows directory: dependabot/fetch-metadata.

Updates dependabot/fetch-metadata from 2.5.0 to 3.0.0

Release notes

Sourced from dependabot/fetch-metadata's releases.

v3.0.0

The breaking change is requiring Node.js version v24 as the Actions runtime.

What's Changed

New Contributors

Full Changelog: dependabot/fetch-metadata@v2...v3.0.0

Commits
  • ffa630c v3.0.0 (#686)
  • ec8fff2 Merge pull request #674 from dependabot/dependabot/npm_and_yarn/picomatch-2.3.2
  • caf48bd build(deps-dev): bump picomatch from 2.3.1 to 2.3.2
  • 13d8274 Upgrade @​actions/github to ^9.0.0 and @​octokit/request-error to ^7.1.0 (#678)
  • b603099 Upgrade @​actions/core from ^1.11.1 to ^3.0.0 (#677)
  • c5dc5b1 Enable noImplicitAny in tsconfig.json (#684)
  • a183f3c Add typecheck step to CI (#685)
  • 5e17564 Remove skipLibCheck from tsconfig.json (#683)
  • bb56eeb Switch tsconfig module resolution to bundler (#682)
  • 3632e3d Remove vestigial outDir from tsconfig.json (#681)
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 5.5.2 to 6.0.0

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

What's Changed

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Updates dependabot/fetch-metadata from 2.5.0 to 3.0.0

Release notes

Sourced from dependabot/fetch-metadata's releases.

v3.0.0

The breaking change is requiring Node.js version v24 as the Actions runtime.

What's Changed

New Contributors

Full Changelog: dependabot/fetch-metadata@v2...v3.0.0

Commits
  • ffa630c v3.0.0 (#686)
  • ec8fff2 Merge pull request #674 from dependabot/dependabot/npm_and_yarn/picomatch-2.3.2
  • caf48bd build(deps-dev): bump picomatch from 2.3.1 to 2.3.2
  • 13d8274 Upgrade @​actions/github to ^9.0.0 and @​octokit/request-error to ^7.1.0 (#678)
  • b603099 Upgrade @​actions/core from ^1.11.1 to ^3.0.0 (#677)
  • c5dc5b1 Enable noImplicitAny in tsconfig.json (#684)
  • a183f3c Add typecheck step to CI (#685)
  • 5e17564 Remove skipLibCheck from tsconfig.json (#683)
  • bb56eeb Switch tsconfig module resolution to bundler (#682)
  • 3632e3d Remove vestigial outDir from tsconfig.json (#681)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 2 updates

Bumps the gh-actions-packages group with 1 update in the / directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/coverage directory: [codecov/codecov-action](https://github.com/codecov/codecov-action).
Bumps the gh-actions-packages group with 1 update in the /.github/workflows directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).


Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

Updates `codecov/codecov-action` from 5.5.2 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@671740a...57e3a13)

Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependabot dependencies github_actions Pull requests that update GitHub Actions code semver-patch labels Apr 1, 2026
@dd-octo-sts dd-octo-sts Bot enabled auto-merge (squash) April 1, 2026 01:03
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.39%. Comparing base (2d765e3) to head (a19810f).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #7901      +/-   ##
==========================================
- Coverage   74.39%   74.39%   -0.01%     
==========================================
  Files         768      768              
  Lines       35834    35834              
==========================================
- Hits        26660    26659       -1     
- Misses       9174     9175       +1     
Flag Coverage Δ
aiguard-macos 39.23% <ø> (-0.10%) ⬇️
aiguard-ubuntu 39.35% <ø> (-0.10%) ⬇️
aiguard-windows 39.02% <ø> (-0.10%) ⬇️
apm-capabilities-tracing-macos 49.08% <ø> (ø)
apm-capabilities-tracing-ubuntu 49.00% <ø> (ø)
apm-capabilities-tracing-windows 48.85% <ø> (+0.03%) ⬆️
apm-integrations-child-process 38.56% <ø> (-0.10%) ⬇️
apm-integrations-couchbase-18 37.36% <ø> (-0.10%) ⬇️
apm-integrations-couchbase-eol 37.71% <ø> (-0.24%) ⬇️
apm-integrations-oracledb 37.71% <ø> (-0.10%) ⬇️
appsec-express 55.16% <ø> (-0.07%) ⬇️
appsec-fastify 51.52% <ø> (-0.07%) ⬇️
appsec-graphql 51.69% <ø> (-0.07%) ⬇️
appsec-kafka 44.31% <ø> (-0.08%) ⬇️
appsec-ldapjs 43.94% <ø> (-0.08%) ⬇️
appsec-lodash 43.54% <ø> (-0.08%) ⬇️
appsec-macos 58.10% <ø> (-0.07%) ⬇️
appsec-mongodb-core 48.70% <ø> (-0.08%) ⬇️
appsec-mongoose 49.36% <ø> (-0.07%) ⬇️
appsec-mysql 50.79% <ø> (-0.07%) ⬇️
appsec-node-serialize 43.12% <ø> (-0.08%) ⬇️
appsec-passport 47.55% <ø> (-0.09%) ⬇️
appsec-postgres 50.51% <ø> (-0.20%) ⬇️
appsec-sourcing 42.37% <ø> (-0.08%) ⬇️
appsec-stripe 44.55% <ø> (-0.08%) ⬇️
appsec-template 43.29% <ø> (-0.08%) ⬇️
appsec-ubuntu 58.18% <ø> (-0.07%) ⬇️
appsec-windows 57.91% <ø> (-0.07%) ⬇️
instrumentations-instrumentation-bluebird 32.20% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-body-parser 40.46% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-child_process 37.90% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-cookie-parser 34.23% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-express 34.55% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-express-mongo-sanitize 34.36% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-express-session 40.10% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-fs 31.89% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-generic-pool 29.34% <ø> (ø)
instrumentations-instrumentation-http 39.81% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-knex 32.27% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-mongoose 33.39% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-multer 40.21% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-mysql2 38.24% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-passport 43.98% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-passport-http 43.66% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-passport-local 44.19% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-pg 37.68% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-promise 32.13% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-promise-js 32.14% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-q 32.18% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-url 32.10% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-when 32.15% <ø> (-0.10%) ⬇️
llmobs-ai 42.37% <ø> (-0.10%) ⬇️
llmobs-anthropic 40.39% <ø> (-0.09%) ⬇️
llmobs-bedrock 39.18% <ø> (-0.08%) ⬇️
llmobs-google-genai 39.84% <ø> (+0.04%) ⬆️
llmobs-langchain 40.08% <ø> (-0.19%) ⬇️
llmobs-openai 43.90% <ø> (-0.09%) ⬇️
llmobs-vertex-ai 39.97% <ø> (-0.09%) ⬇️
platform-core 31.47% <ø> (ø)
platform-esbuild 34.42% <ø> (ø)
platform-instrumentations-misc 48.41% <ø> (ø)
platform-shimmer 37.56% <ø> (ø)
platform-unit-guardrails 32.89% <ø> (ø)
platform-webpack 19.98% <ø> (ø)
plugins-azure-durable-functions 25.74% <ø> (ø)
plugins-azure-event-hubs 25.90% <ø> (ø)
plugins-azure-service-bus 25.26% <ø> (ø)
plugins-bullmq 44.40% <ø> (-0.10%) ⬇️
plugins-cassandra 37.73% <ø> (-0.10%) ⬇️
plugins-cookie 26.96% <ø> (ø)
plugins-cookie-parser 26.75% <ø> (ø)
plugins-crypto 26.73% <ø> (ø)
plugins-dd-trace-api 38.26% <ø> (-0.10%) ⬇️
plugins-express-mongo-sanitize 26.89% <ø> (ø)
plugins-express-session 26.70% <ø> (ø)
plugins-fastify 42.18% <ø> (-0.09%) ⬇️
plugins-fetch 38.35% <ø> (-0.10%) ⬇️
plugins-fs 38.58% <ø> (-0.10%) ⬇️
plugins-generic-pool 25.94% <ø> (ø)
plugins-google-cloud-pubsub 45.49% <ø> (-0.09%) ⬇️
plugins-grpc 40.84% <ø> (-0.09%) ⬇️
plugins-handlebars 26.94% <ø> (ø)
plugins-hapi 40.10% <ø> (-0.10%) ⬇️
plugins-hono 40.43% <ø> (-0.10%) ⬇️
plugins-ioredis 38.43% <ø> (-0.10%) ⬇️
plugins-knex 26.57% <ø> (ø)
plugins-langgraph 38.45% <ø> (-0.10%) ⬇️
plugins-ldapjs 24.43% <ø> (ø)
plugins-light-my-request 26.30% <ø> (ø)
plugins-limitd-client 32.48% <ø> (-0.10%) ⬇️
plugins-lodash 26.03% <ø> (ø)
plugins-mariadb 39.44% <ø> (-0.10%) ⬇️
plugins-memcached 38.14% <ø> (-0.10%) ⬇️
plugins-microgateway-core 39.17% <ø> (-0.10%) ⬇️
plugins-moleculer 40.46% <ø> (-0.09%) ⬇️
plugins-mongodb 39.11% <ø> (-0.21%) ⬇️
plugins-mongodb-core 38.95% <ø> (-0.10%) ⬇️
plugins-mongoose 38.76% <ø> (-0.09%) ⬇️
plugins-multer 26.70% <ø> (ø)
plugins-mysql 39.14% <ø> (-0.07%) ⬇️
plugins-mysql2 39.23% <ø> (-0.10%) ⬇️
plugins-node-serialize 27.00% <ø> (ø)
plugins-opensearch 37.59% <ø> (-0.10%) ⬇️
plugins-passport-http 26.76% <ø> (ø)
plugins-postgres 35.50% <ø> (-0.09%) ⬇️
plugins-process 26.73% <ø> (ø)
plugins-pug 26.96% <ø> (ø)
plugins-redis 38.86% <ø> (-0.10%) ⬇️
plugins-router 43.03% <ø> (-0.23%) ⬇️
plugins-sequelize 25.55% <ø> (ø)
plugins-test-and-upstream-amqp10 38.45% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-amqplib 44.15% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-apollo 39.08% <ø> (-0.09%) ⬇️
plugins-test-and-upstream-avsc 38.52% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-bunyan 33.80% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-connect 40.75% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-graphql 40.10% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-koa 40.34% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-protobufjs 38.75% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-rhea 44.18% <ø> (-0.07%) ⬇️
plugins-undici 39.07% <ø> (-0.09%) ⬇️
plugins-url 26.73% <ø> (ø)
plugins-valkey 38.14% <ø> (-0.10%) ⬇️
plugins-vm 26.73% <ø> (ø)
plugins-winston 33.99% <ø> (-0.10%) ⬇️
plugins-ws 41.93% <ø> (-0.10%) ⬇️
profiling-macos 40.47% <ø> (-0.10%) ⬇️
profiling-ubuntu 40.59% <ø> (-0.10%) ⬇️
profiling-windows 41.73% <ø> (-0.10%) ⬇️
serverless-azure-functions-client 25.62% <ø> (ø)
serverless-azure-functions-eventhubs 25.62% <ø> (ø)
serverless-azure-functions-servicebus 25.62% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 1, 2026

Overall package size

Self size: 5.07 MB
Deduped: 5.91 MB
No deduping: 5.91 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.0.0 | 81.15 kB | 815.98 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@datadog-official
Copy link
Copy Markdown

datadog-official Bot commented Apr 1, 2026

✅ Tests

🎉 All green!

❄️ No new flaky tests detected
🧪 All tests passed

🎯 Code Coverage (details)
Patch Coverage: 100.00%
Overall Coverage: 68.83% (-0.01%)

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: a19810f | Docs | Datadog PR Page | Was this helpful? React with 👍/👎 or give us feedback!

@dd-octo-sts dd-octo-sts Bot merged commit 6a9c89a into master Apr 1, 2026
954 of 957 checks passed
@dd-octo-sts dd-octo-sts Bot deleted the dependabot/github_actions/gh-actions-packages-a92c2d1df9 branch April 1, 2026 01:22
dd-octo-sts Bot pushed a commit that referenced this pull request Apr 1, 2026
…with 2 updates (#7901)

Bumps the gh-actions-packages group with 1 update in the / directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/coverage directory: [codecov/codecov-action](https://github.com/codecov/codecov-action).
Bumps the gh-actions-packages group with 1 update in the /.github/workflows directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).


Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

Updates `codecov/codecov-action` from 5.5.2 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@671740a...57e3a13)

Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dd-octo-sts dd-octo-sts Bot mentioned this pull request Apr 1, 2026
juan-fernandez pushed a commit that referenced this pull request Apr 1, 2026
…with 2 updates (#7901)

Bumps the gh-actions-packages group with 1 update in the / directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/coverage directory: [codecov/codecov-action](https://github.com/codecov/codecov-action).
Bumps the gh-actions-packages group with 1 update in the /.github/workflows directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).


Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

Updates `codecov/codecov-action` from 5.5.2 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@671740a...57e3a13)

Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies github_actions Pull requests that update GitHub Actions code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants