rustyconover opened a new pull request, #929: URL: https://github.com/apache/arrow-nanoarrow/pull/929
The coverage workflow on `main` currently completes successfully even though Codecov rejects its upload with `Token required because branch is protected`. This leaves the repository coverage baseline stale and causes PR patch reports to compare against an old commit. Configure the Codecov action to use GitHub OIDC, grant the required permissions, and fail the job when an upload is rejected. Fork pull requests continue to use Codecov tokenless uploads because the action detects fork events and skips OIDC for them. The failed protected-branch upload is visible in https://github.com/apache/arrow-nanoarrow/actions/runs/32611406823. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
