From f13a3e88339b7c5e0ec6b416381a31802a187a8d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 00:02:51 +0000
Subject: [PATCH] ci(deps): bump the github-actions group with 2 updates

Bumps the github-actions group with 2 updates: [voidzero-dev/setup-vp](https://github.com/voidzero-dev/setup-vp) and [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `voidzero-dev/setup-vp` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/voidzero-dev/setup-vp/releases)
- [Commits](https://github.com/voidzero-dev/setup-vp/compare/9fd26ff49f9b5e6276c2b493da4454ad4527f7f4...24d870228786dc83ae73482406bdd1e7befaec14)

Updates `codecov/codecov-action` from 7.1.0 to 7.1.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/0b35c9ecc4f0529d0eb674914510c22f85b196b4...303a32d7a59b442fa8d48b6a1cc6825c09c847a5)

---
updated-dependencies:
- dependency-name: voidzero-dev/setup-vp
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml      | 10 +++++-----
 .github/workflows/release.yml |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1421bfc9..81d07627 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
       # vp (version resolved from the vite-plus range via yarn.lock), sets up
       # Node and the pinned yarn, and caches the yarn store.
       - name: 'Setup Vite+'
-        uses: voidzero-dev/setup-vp@9fd26ff49f9b5e6276c2b493da4454ad4527f7f4 # v1.20.0
+        uses: voidzero-dev/setup-vp@24d870228786dc83ae73482406bdd1e7befaec14 # v1.21.0
         with:
           node-version: '24'
           cache: true
@@ -54,7 +54,7 @@ jobs:
           fetch-depth: 0
 
       - name: 'Setup Vite+'
-        uses: voidzero-dev/setup-vp@9fd26ff49f9b5e6276c2b493da4454ad4527f7f4 # v1.20.0
+        uses: voidzero-dev/setup-vp@24d870228786dc83ae73482406bdd1e7befaec14 # v1.21.0
         with:
           node-version: '24'
           cache: true
@@ -80,7 +80,7 @@ jobs:
           fetch-depth: 0
 
       - name: 'Setup Vite+'
-        uses: voidzero-dev/setup-vp@9fd26ff49f9b5e6276c2b493da4454ad4527f7f4 # v1.20.0
+        uses: voidzero-dev/setup-vp@24d870228786dc83ae73482406bdd1e7befaec14 # v1.21.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: true
@@ -96,7 +96,7 @@ jobs:
 
       - name: 'Upload coverage to Codecov'
         if: ${{ matrix.node-version == 'lts' }}
-        uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: coverage/clover.xml
@@ -105,7 +105,7 @@ jobs:
 
       - name: 'Upload test results to Codecov'
         if: ${{ !cancelled() && matrix.node-version == 'lts' }}
-        uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           report_type: 'test_results'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2a3a4454..83b9acd6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,7 @@ jobs:
           # the job token is read-only; git push must use the GH_TOKEN PAT from env
           persist-credentials: false
       - name: 'Setup Vite+'
-        uses: voidzero-dev/setup-vp@9fd26ff49f9b5e6276c2b493da4454ad4527f7f4 # v1.20.0
+        uses: voidzero-dev/setup-vp@24d870228786dc83ae73482406bdd1e7befaec14 # v1.21.0
         with:
           node-version: '24'
           cache: true