fix CI: emit coverage.xml + bump cryptography (clears codecov + pip-audit)#175
Merged
Conversation
pytest's addopts only produced --cov-report=term-missing, so no coverage file was written to disk. codecov-action (now v7, #172) hard-fails with "No coverage reports found" when there is no report to upload — turning a passing test run into a red CI job (surfaced on the pre-commit autoupdate PR #174, but it affects every run). Add --cov-report=xml so coverage.xml is generated for the upload. As the template repo, this propagates the fix to every generated project. Assisted-With: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #175 +/- ##
========================================
- Coverage 3.70% 2.29% -1.42%
========================================
Files 5 4 -1
Lines 135 131 -4
========================================
- Hits 5 3 -2
+ Misses 130 128 -2 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
pip-audit (the `audit-deps` CI step) flagged cryptography 48.0.0 (GHSA-537c-gmf6-5ccf, fixed in 48.0.1). The floor was >=46.0.7, so the lock resolved to the vulnerable 48.0.0. Raise the floor to >=48.0.1; the re-solve picks up conda-forge's 49.0.0. As the template, this propagates to generated repos. Assisted-With: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
KedoKudo
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
The pre-commit autoupdate PR #174 showed a red Unit tests job — but the tests passed; the failure was the Upload coverage to codecov step:
Error: No coverage reports found. pytest'saddoptsonly emitted--cov-report=term-missing(a terminal table, no file), and codecov-action — bumped to v7 in #172 — hard-fails when there's no report file to upload. So this is a false test failure that affects every run, not just #174.Fix
Add
--cov-report=xmlto the pytestaddoptssocoverage.xmlis written for the upload step. One-line change; as the template repo it propagates to every generated project.Effect
🤖 Assisted with Claude Code