build(deps): bump py-cov-action/python-coverage-comment-action from 3.39 to 4.3

[dependabot]

Bumps py-cov-action/python-coverage-comment-action from 3.39 to 4.3.

Release notes

Sourced from py-cov-action/python-coverage-comment-action's releases.

v4.3

What's Changed

• Improve release procedure by @​ewjoachim in py-cov-action/python-coverage-comment-action#739

Full Changelog: py-cov-action/python-coverage-comment-action@v4.2...v4.3

v4.2

What's Changed

• Zizmor, Linting, documentation by @​ewjoachim in py-cov-action/python-coverage-comment-action#738

Full Changelog: py-cov-action/python-coverage-comment-action@v4.1...v4.2

v4.1

What's Changed

(Should have been 4.0, but I borked the tag)

Breaking changes & features

In #698: Zizmor compatibility means we don't commit using checkout's persisted credentials, and use the GITHUB_TOKEN to commit instead. Also, it's now officially recommended to pin this (and all other) actions in your workflows using a commit hash and not a tag. See Pinact. For the same reason, this action now uses immutable releases so you can't use @v4 anymore in your workflows. In #621 and 718: If you want control over what exactly the action does (is it a PR (process_pr) or the main branch (save_coverage_data_files) or should it just create the PR comment(post_comment)), you can now specify ACTIVITY. The default heuristics should work for 99% of cases though. As part of solving that, we also discovered that MAX_FILES_IN_COMMENT has actually never worked, and we fixed it.

Full Changelog: py-cov-action/python-coverage-comment-action@v3...v4.1

What's Changed

• Add zizmor by @​ewjoachim in py-cov-action/python-coverage-comment-action#698
• Improve error handling by @​ewjoachim in py-cov-action/python-coverage-comment-action#695
• Switch pre-commit to prek and autofix by @​ewjoachim in py-cov-action/python-coverage-comment-action#712
• Simplify renovate config by @​ewjoachim in py-cov-action/python-coverage-comment-action#715
• Add pytest-subprocess, pytest-httpx, remove pytest-mock by @​ewjoachim in py-cov-action/python-coverage-comment-action#716
• Add support for custom event dispatching by @​dgolombek in py-cov-action/python-coverage-comment-action#621
• Advocate for pinning other actions in readme by @​ewjoachim in py-cov-action/python-coverage-comment-action#717
• Add activity in action by @​ewjoachim in py-cov-action/python-coverage-comment-action#718

New Contributors

• @​dgolombek made their first contribution in py-cov-action/python-coverage-comment-action#621

Full Changelog: py-cov-action/python-coverage-comment-action@v3...v4.1

... (truncated)

Commits

• a05be3d Merge pull request #739 from py-cov-action/improve-release
• ef991b3 Avoid full checkout
• a5496e3 Exclude renovate form auto-notes
• bf8a28f Lock file maintenance (#733)
• 8207f4b Merge pull request #738 from py-cov-action/persist-credentials-and-workflow-lint
• 89461f2 ci: link the e2e repositories from the deployment
• 1c01767 ci: run the end-to-end tests in their own job
• c64623c ci: keep the e2e tokens available to ci.yml
• a5a7a09 chore: check that action.yml and the docs agree on the inputs
• f7bf75b docs: document USE_GH_PAGES_HTML_URL
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Coverage report

This PR does not seem to contain any modification to coverable code.