chore(deps): bump actions/upload-code-coverage from 1.4.3 to 1.4.4

[dependabot]

Bumps actions/upload-code-coverage from 1.4.3 to 1.4.4.

Release notes

Sourced from actions/upload-code-coverage's releases.

v1.4.4

Fixed

• Non-default branch pushes no longer associate coverage with an unrelated fork pull request that uses the same branch name. (#33)
• When a pushed branch has multiple open pull requests, the action prefers the pull request targeting the default branch. If no unique default-branch target exists, the upload skips successfully instead of selecting arbitrarily or failing CI. (#33)

Documentation

• Document the action's Bash, Python 3.9+, and conditional GitHub CLI runner requirements, including when pull-requests: read is required. (#29)

Maintenance

• Add regression tests that prevent shell-injection protections from being reintroduced. (#32)

Full Changelog: actions/upload-code-coverage@v1.4.3...v1.4.4

Changelog

Sourced from actions/upload-code-coverage's changelog.

Changelog

Unreleased

v1.4.4 - 2026-10-01

Fixed

• Non-default branch pushes no longer associate coverage with an unrelated fork pull request that uses the same branch name.
• When a pushed branch has multiple open pull requests, the action prefers the pull request targeting the default branch. If no unique default-branch target exists, the upload skips successfully instead of selecting arbitrarily or failing CI.

v1.4.3 - 2026-09-28

Fixed

• Non-default branch pushes without an open pull request now skip successfully instead of attempting an upload that the API rejects.
• GitHub CLI failures during pull request discovery now produce an actionable error instead of being silently treated as no matching pull request.

Commits

• 2b21a77 Merge pull request #34 from actions/cassiomarques/release-v1.4.4
• c7f2f13 Prepare v1.4.4 release
• cd112d6 Merge pull request #33 from actions/cassiomarques/scope-push-pr-lookup
• 19923c1 Address pull request review feedback
• 9706dd2 Merge pull request #29 from actions/docs/runner-requirements
• 891aec1 Merge branch 'main' into docs/runner-requirements
• 60531d5 Prefer default-branch PR for ambiguous pushes
• 713d268 Scope push PR lookup to repository
• 1f899d9 Merge pull request #32 from actions/cassiomarques/shell-injection-regression-...
• 6e4a64d Test shell injection protections
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud