Bump py-cov-action/python-coverage-comment-action from 3.40 to 4.1

[dependabot]

Bumps py-cov-action/python-coverage-comment-action from 3.40 to 4.1.

Release notes

Sourced from py-cov-action/python-coverage-comment-action's releases.

v4.1

What's Changed

(Should have been 4.0, but I borked the tag)

Breaking changes & features

In #698: Zizmor compatibility means we don't commit using checkout's persisted credentials, and use the GITHUB_TOKEN to commit instead. Also, it's now officially recommended to pin this (and all other) actions in your workflows using a commit hash and not a tag. See Pinact. For the same reason, this action now uses immutable releases so you can't use @v4 anymore in your workflows. In #621 and 718: If you want control over what exactly the action does (is it a PR (process_pr) or the main branch (save_coverage_data_files) or should it just create the PR comment(post_comment)), you can now specify ACTIVITY. The default heuristics should work for 99% of cases though. As part of solving that, we also discovered that MAX_FILES_IN_COMMENT has actually never worked, and we fixed it.

Full Changelog: py-cov-action/python-coverage-comment-action@v3...v4.1

What's Changed

• Add zizmor by @​ewjoachim in py-cov-action/python-coverage-comment-action#698
• Improve error handling by @​ewjoachim in py-cov-action/python-coverage-comment-action#695
• Switch pre-commit to prek and autofix by @​ewjoachim in py-cov-action/python-coverage-comment-action#712
• Simplify renovate config by @​ewjoachim in py-cov-action/python-coverage-comment-action#715
• Add pytest-subprocess, pytest-httpx, remove pytest-mock by @​ewjoachim in py-cov-action/python-coverage-comment-action#716
• Add support for custom event dispatching by @​dgolombek in py-cov-action/python-coverage-comment-action#621
• Advocate for pinning other actions in readme by @​ewjoachim in py-cov-action/python-coverage-comment-action#717
• Add activity in action by @​ewjoachim in py-cov-action/python-coverage-comment-action#718

New Contributors

• @​dgolombek made their first contribution in py-cov-action/python-coverage-comment-action#621

Full Changelog: py-cov-action/python-coverage-comment-action@v3...v4.1

v3.41

What's Changed

• improve wording on needed permissions by @​wollew in py-cov-action/python-coverage-comment-action#641
• fix: add conventional commit prefix to message by @​arturo-guridi-snkeos in py-cov-action/python-coverage-comment-action#645

New Contributors

• @​wollew made their first contribution in py-cov-action/python-coverage-comment-action#641
• @​arturo-guridi-snkeos made their first contribution in py-cov-action/python-coverage-comment-action#645

Full Changelog: py-cov-action/python-coverage-comment-action@v3.40...v3.41

Commits

• 5d8df59 Merge pull request #718 from py-cov-action/activities-input
• 9be84c4 Don't pass empty values, use defaults
• b95bc79 Handle no-activity
• edcd720 Add 2 missing params
• b1edcf9 Add activity in action
• 239bb59 Merge pull request #717 from py-cov-action/immutability
• 9ebc436 Document immutability
• 869b6c3 Advocate for pinning other actions in readme
• 3742c86 Merge pull request #621 from dgolombek/custom_event_dispatching
• 5589483 Add missing test
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Coverage report

This PR does not seem to contain any modification to coverable code.