Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps gcovr from 8.4 to 8.5.

Release notes

Sourced from gcovr's releases.

8.5

Breaking changes:

  • The option --lcov-test-name doesn't accept values with spaces anymore. (#1196)
  • The option --lcov-format-1.x is deprecated and mapped to --lcov-format-version=1.x. (#1212)
  • Changes to HTML templates:
    • The file overview table in the default theme now uses a grid layout. (#1216)
    • The function lists table in both themes are changed to a grid layout. (#1216)
    • Add a common template folder where the common templates for the themes are stored. It contains the function content and source page navigation templates. (#1216)
    • Restructure the the summary and move some data to the footer. (#1217)
    • Add sorting by clicking on the headers of the file overview table and the function table. (#1219)
    • Add common stylesheet for all themes. (#1220)
    • Add navigation links to source details. (#1220)
    • Add buttons to toggle line background color in source details view. (#1221)
    • Add a document overview with all active lines in source details view. (#1222)
    • Added --html-static-report and remove argument from --html-single-page. (#1224)

New features and notable changes:

  • Due to added support for LLVM source based code coverage format some configuration file keys got changed. The old gcov named options are still supported but they also affect the LLVM toolchain. (#1188)

    • gcov-exclude-directory is changed to exclude-directory.
    • keep-gcov-files is changed to keep-intermediate-files.
    • delete-gcov-files is changed to delete-input-files.

Bug fixes and small improvements:

  • Fix coveralls report if there are several coverage elements per line. (#1165)
  • Fix not excluded conditions if branches are excluded by comments. (#1171)
  • Fix reported excluded branches in LCOV report. (#1171)
  • Fix exclusion filter --gcov-exclude. (#1176)
  • Add --json-trace-data-source to include the trace data source in the JSON report independent from --verbose. (#1178)
  • Remove generated gcov files on error and catch additional gcov error message. (#1182)
  • Change default HTML theme excluded line color. (#1179)
  • Move theme colors to a separate CSS file so they can be overridden with a simple --html-template-dir directory with only the style.colors.css file (#1179)
  • Fix regular expression for detecting a version mismatch between gcc and gcov. (#1187)
  • Improve logging messages for GCOV execution errors to not print information twice and add trace messages for gcov execution. (#1187)
  • Fix handling of lines after function specialization. (#1189)
  • Improve performance by changing logging messages (level and lazy interpolation). (#1191)
  • Fix text report for covered decisions. (#1192)
  • Fix runtime problem introduced with 8.4. (#1194)
  • Fix wrong entries in data source attribute of JSON report. (#1194)
  • Fix nested HTML report without coverage data. (#1197)
  • Add warning if coverage data is empty. (#1200)

... (truncated)

Changelog

Sourced from gcovr's changelog.

8.5 (08 January 2026)

Known bugs:

  • :ref:fix_1229
  • :ref:fix_1231

Breaking changes:

  • The option :option:--lcov-test-name doesn't accept values with spaces anymore. (:issue:1196)

  • The option :option:--lcov-format-1.x <--lcov-format-1> is deprecated and mapped to :option:--lcov-format-version=1.x. (:issue:1212)

  • Changes to HTML templates:

    • The file overview table in the default theme now uses a grid layout. (:issue:1216)
    • The function lists table in both themes are changed to a grid layout. (:issue:1216)
    • Add a common template folder where the common templates for the themes are stored. It contains the function content and source page navigation templates. (:issue:1216)
    • Restructure the the summary and move some data to the footer. (:issue:1217)
    • Add sorting by clicking on the headers of the file overview table and the function table. (:issue:1219)
    • Add common stylesheet for all themes. (:issue:1220)
    • Add navigation links to source details. (:issue:1220)
    • Add buttons to toggle line background color in source details view. (:issue:1221)
    • Add a document overview with all active lines in source details view. (:issue:1222)
    • Added :option:--html-static-report and remove argument from :option:--html-single-page. (:issue:1224)

New features and notable changes:

  • Due to added support for LLVM source based code coverage format some configuration file keys got changed. The old gcov named options are still supported but they also affect the LLVM toolchain. (:issue:1188)

    • gcov-exclude-directory is changed to exclude-directory.
    • keep-gcov-files is changed to keep-intermediate-files.
    • delete-gcov-files is changed to delete-input-files.

Bug fixes and small improvements:

  • Fix coveralls report if there are several coverage elements per line. (:issue:1165)
  • Fix not excluded conditions if branches are excluded by comments. (:issue:1171)
  • Fix reported excluded branches in LCOV report. (:issue:1171)
  • Fix exclusion filter :option:--gcov-exclude. (:issue:1176)
  • Add :option:--json-trace-data-source to include the trace data source in the JSON report independent from :option:--verbose. (:issue:1178)
  • Remove generated gcov files on error and catch additional gcov error message. (:issue:1182)
  • Change default HTML theme excluded line color. (:issue:1179)
  • Move theme colors to a separate CSS file so they can be overridden with a simple :option:--html-template-dir directory with only the style.colors.css file (:issue:1179)
  • Fix regular expression for detecting a version mismatch between gcc and gcov. (:issue:1187)
  • Improve logging messages for GCOV execution errors to not print information twice and add trace

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [gcovr](https://github.com/gcovr/gcovr) from 8.4 to 8.5.
- [Release notes](https://github.com/gcovr/gcovr/releases)
- [Changelog](https://github.com/gcovr/gcovr/blob/main/CHANGELOG.rst)
- [Commits](gcovr/gcovr@8.4...8.5)

---
updated-dependencies:
- dependency-name: gcovr
  dependency-version: '8.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 19, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 19, 2026 09:30
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 19, 2026
@sonarqubecloud
Copy link

@github-actions
Copy link
Contributor

MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 20 0 0 0.5s
✅ DOCKERFILE hadolint 2 0 0 0.7s
✅ GHERKIN gherkin-lint 6 0 0 2.35s
✅ JSON npm-package-json-lint yes no no 0.35s
✅ JSON prettier 19 4 0 0 0.49s
✅ JSON v8r 19 0 0 7.25s
✅ MARKDOWN markdownlint 11 0 0 0 0.84s
✅ MARKDOWN markdown-table-formatter 11 0 0 0 0.21s
✅ REPOSITORY checkov yes no no 16.98s
❌ REPOSITORY gitleaks yes 1 2 0.66s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 27.79s
✅ REPOSITORY secretlint yes no no 0.91s
✅ REPOSITORY syft yes no no 1.96s
✅ REPOSITORY trivy yes no no 5.23s
✅ REPOSITORY trivy-sbom yes no no 0.22s
✅ REPOSITORY trufflehog yes no no 2.3s
✅ SPELL lychee 77 0 0 11.81s
✅ YAML prettier 28 0 0 0 0.94s
✅ YAML v8r 28 0 0 8.17s
✅ YAML yamllint 28 0 0 0.67s

Detailed Issues

❌ REPOSITORY / gitleaks - 1 error
warning: generic-api-key has detected secret for file .devcontainer/cpp/Dockerfile at commit be74f3fd6bab27a7566f8734a07cb283629dc989.
   ┌─ .devcontainer/cpp/Dockerfile:67:22
   │
67 │  wget --no-hsts -qO - https://apt.llvm.org/llvm-snapshot.gpg.key | gpg --dearmor -o /usr/share/keyrings/llvm-snapshot-keyring.gpg \
   │                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: generic-api-key has detected secret for file docs/SECURITY_ANALYSIS.md at commit 6845ffdde30aea13c6882ae42e1bee0be6450d62.

warning: 2 warnings emitted

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.3.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,DOCKERFILE_HADOLINT,GHERKIN_GHERKIN_LINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security

@github-actions
Copy link
Contributor

📦 Container Size Analysis

Note

Comparing ghcr.io/philips-software/amp-devcontainer-rust:edgeghcr.io/philips-software/amp-devcontainer-rust:pr-1082

📈 Size Comparison Table

OS/Platform Previous Current Change Trend
linux/amd64 548.17 MB 548.18 MB +68 B (+0%) 🔼
linux/arm64 502.9 MB 502.91 MB +1.04 kB (+0%) 🔼

@github-actions
Copy link
Contributor

📦 Container Size Analysis

Note

Comparing ghcr.io/philips-software/amp-devcontainer-cpp:edgeghcr.io/philips-software/amp-devcontainer-cpp:pr-1082

📈 Size Comparison Table

OS/Platform Previous Current Change Trend
linux/amd64 683.37 MB 683.37 MB +1.01 kB (+0%) 🔼
linux/arm64 665.29 MB 665.29 MB +8.61 kB (+0%) 🔼

@github-actions
Copy link
Contributor

Test Results

 5 files  ±0   5 suites  ±0   3m 39s ⏱️ +15s
32 tests ±0  32 ✅ ±0  0 💤 ±0  0 ❌ ±0 
67 runs  ±0  67 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit c1db37f. ± Comparison against base commit 5ec2927.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant