From 6974a617b687de885f77c871102841f38d740320 Mon Sep 17 00:00:00 2001 From: Tim Treis Date: Mon, 8 Jun 2026 15:34:41 +0200 Subject: [PATCH 1/2] ci: bump codecov-action to v6 to fix signature verification codecov-action@v5 verifies the codecov CLI against Codecov's old Keybase key, which they bricked after migrating accounts, so uploads now fail with "Could not verify signature". v6 (= 6.0.2) ships the updated key. Ref: https://github.com/codecov/codecov-action/issues/1956 Co-Authored-By: Claude Opus 4.8 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9cb4c86..68a038b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -63,7 +63,7 @@ jobs: # https://github.com/codecov/codecov-cli/issues/648 uvx hatch run ${{ matrix.env.name }}:coverage xml rm test-data/.coverage - - uses: codecov/codecov-action@v5 + - uses: codecov/codecov-action@v6 with: name: ${{ matrix.env.name }} fail_ci_if_error: true From ef333fb276b77982f4a58b5fcfe5940fff3a8260 Mon Sep 17 00:00:00 2001 From: Tim Treis Date: Mon, 8 Jun 2026 15:34:43 +0200 Subject: [PATCH 2/2] ci: bump codecov-action to v6 to fix signature verification codecov-action@v5 verifies the codecov CLI against Codecov's old Keybase key, which they bricked after migrating accounts, so uploads now fail with "Could not verify signature". v6 (= 6.0.2) ships the updated key. Ref: https://github.com/codecov/codecov-action/issues/1956 Co-Authored-By: Claude Opus 4.8 --- .github/workflows/ci-gpu.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-gpu.yml b/.github/workflows/ci-gpu.yml index 554b6dd..ba6c4d3 100644 --- a/.github/workflows/ci-gpu.yml +++ b/.github/workflows/ci-gpu.yml @@ -57,7 +57,7 @@ jobs: # https://github.com/codecov/codecov-cli/issues/648 coverage xml rm test-data/.coverage - - uses: codecov/codecov-action@v5 + - uses: codecov/codecov-action@v6 with: name: GPU Tests fail_ci_if_error: true