Bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: codecov/codecov-action and slackapi/slack-github-action.

Updates codecov/codecov-action from 4.6.0 to 5.0.2

Release notes

Sourced from codecov/codecov-action's releases.

v5.0.2

What's Changed

• fix: override commit and pr values for PR cases by @​thomasrockhu-codecov in codecov/codecov-action#1657

Full Changelog: codecov/codecov-action@v5.0.1...v5.0.2

v5.0.1

What's Changed

• fix: use marketplace v5 badge by @​thomasrockhu-codecov in codecov/codecov-action#1646
• fix: update tokenless branch logic by @​thomasrockhu-codecov in codecov/codecov-action#1650
• chore(release): 5.0.1 by @​thomasrockhu-codecov in codecov/codecov-action#1656

Full Changelog: codecov/codecov-action@v5.0.0...v5.0.1

v5.0.0

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

• file (this has been deprecated in favor of files)
• plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

• binary
• gcov_args
• gcov_executable
• gcov_ignore
• gcov_include
• report_type
• skip_validation
• swift_project

You can see their usage in the action.yml file.

What's Changed

• chore(deps): bump to eslint9+ and remove eslint-config-google by @​thomasrockhu-codecov in codecov/codecov-action#1591
• build(deps-dev): bump @​octokit/webhooks-types from 7.5.1 to 7.6.1 by @​dependabot in codecov/codecov-action#1595
• build(deps-dev): bump typescript from 5.6.2 to 5.6.3 by @​dependabot in codecov/codecov-action#1604
• build(deps-dev): bump @​typescript-eslint/parser from 8.8.0 to 8.8.1 by @​dependabot in codecov/codecov-action#1601
• build(deps): bump @​actions/core from 1.11.0 to 1.11.1 by @​dependabot in codecov/codecov-action#1597
• build(deps): bump github/codeql-action from 3.26.9 to 3.26.11 by @​dependabot in codecov/codecov-action#1596
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 8.8.0 to 8.8.1 by @​dependabot in codecov/codecov-action#1600
• build(deps-dev): bump eslint from 9.11.1 to 9.12.0 by @​dependabot in codecov/codecov-action#1598

... (truncated)

Commits

• 5c47607 fix: override commit and pr values for PR cases (#1657)
• 3b1354a chore(release): 5.0.1 (#1656)
• 2e2a9c6 fix: update tokenless branch logic (#1650)
• cfc521b Update README.md
• 0642541 fix: use marketplace v5 badge (#1646)
• 9688725 Update README.md
• 2112eae chore(deps): bump wrapper to 0.0.23 (#1644)
• 193421c fixL use the correct source (#1642)
• 6018df7 fix: update container builds (#1640)
• eff1a64 fix: add missing vars (#1638)
• Additional commits viewable in compare view

Updates slackapi/slack-github-action from 1.27.0 to 2.0.0

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack Send v2.0.0

YAML! And more API methods! With improved erroring! And more!

Sending data to Slack can now be done with the YAML format, and that data can be sent to [a Slack API method][methods] or technique of choice with the provided payload. And additional configurations can improve error handling or customize values between steps.

Breaking changes happen with this update and recommended migration strategies are detailed below. Adding this step to new workflows might prefer to follow the README instead 📚

What's changed

Both inputs of payload variables, techniques for sending the payload, additional configurations, and expected outputs were changed:

• Sending variables
  • Breaking changes
    • Only one payload input can be provided
    • Only one technique to send can be provided
    • Variable replacements no longer happen by default
    • Payload file path parsed option was removed
  • Enhancements
    • Payloads can now be written in YAML
    • Payload can now be written in unwrapped JSON
• Sending techniques
  • Technique 1: Slack Workflow Builder
    • Breaking changes
      • The webhook type must be specified in webhook inputs
      • Payload flattening no longer happens by default
    • Enhancements
      • The webhook URL can be specified in webhook inputs
  • Technique 2: Slack API method
    • Breaking changes
      • The Slack API method now must be specified in inputs
      • A token must be provided with other inputs
      • Inputs to the Slack API method must be provided in payloads
      • Messages cannot be sent to multiple channels in one step
  • Technique 3: Slack incoming webhook
    • Breaking changes
      • The webhook type must be specified for incoming webhooks
    • Enhancements
      • The webhook URL can be specified for incoming webhook
• Additional configurations
  • Enhancements
    • Steps can exit with an error after a failed Slack API call
    • Failed requests can be retried various amounts of times
    • Provided payloads can be flattened with a delimiter
    • Provided payloads can have templated variables replaced
    • Proxying HTTPS requests can be done within inputs
• Expected outputs
  • Breaking changes
    • The time value is now returned as the Unix epoch time
  • Enhancements
    • An ok value is added to represent response success

... (truncated)

Commits

• 485a9d4 Release
• e598089 chore(release): tag version 2.0.0
• e9b3a6b feat!: wrap payloads to send to a "method" with "token" or "webhook" (#333)
• 74ae656 chore(release): tag version 1.27.1
• bd0e281 build(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 (#355)
• e127529 build(deps): bump @​actions/core from 1.10.1 to 1.11.1 (#354)
• 6b51022 build(deps-dev): bump eslint-plugin-jsdoc from 50.3.1 to 50.4.3 (#353)
• 555e4ad build(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 (#352)
• 8d4500e build(deps): bump @​slack/web-api from 7.5.0 to 7.7.0 (#351)
• d0dece6 build(deps-dev): bump mocha from 10.7.3 to 10.8.2 (#350)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Test using WordPress Playground

The changes in this pull request can previewed and tested using a WordPress Playground instance.

WordPress Playground is an experimental project that creates a full WordPress instance entirely within the browser.

Some things to be aware of

• The Plugin and Theme Directories cannot be accessed within Playground.
• All changes will be lost when closing a tab with a Playground instance.
• All changes will be lost when refreshing the page.
• A fresh instance is created each time the link below is clicked.
• Every time this pull request is updated, a new ZIP file containing all changes is created. If changes are not reflected in the Playground instance,
  it's possible that the most recent build failed, or has not completed. Check the list of workflow runs to be sure.

For more details about these limitations and more, check out the Limitations page in the WordPress Playground documentation.

Test this pull request with WordPress Playground.

[dependabot]

Superseded by #7846.

[github-actions]

Trac Ticket Missing

This pull request is missing a link to a Trac ticket. For a contribution to be considered, there must be a corresponding ticket in Trac.

To attach a pull request to a Trac ticket, please include the ticket's full URL in your pull request description. More information about contributing to WordPress on GitHub can be found in the Core Handbook.