id,node_id,number,state,locked,title,user,body,created_at,updated_at,closed_at,merged_at,merge_commit_sha,assignee,milestone,draft,head,base,author_association,auto_merge,repo,url,merged_by
615299377,MDExOlB1bGxSZXF1ZXN0NjE1Mjk5Mzc3,5157,closed,0,Bump pre-commit/action from v2.0.0 to v2.0.2,49699333,"Bumps [pre-commit/action](https://github.com/pre-commit/action) from v2.0.0 to v2.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pre-commit/action/releases"">pre-commit/action's releases</a>.</em></p>
<blockquote>
<h2>pre-commit/action@v2.0.2</h2>
<p>retag of 2.0.1 but on the proper branch</p>
<h2>pre-commit/action@v2.0.1</h2>
<h3>Fixes</h3>
<ul>
<li>Avoid failures if cache saving fails
<ul>
<li><a href=""https://github-redirect.dependabot.com/pre-commit/action/issues/54"">#54</a> PR by <a href=""https://github.com/s-weigand""><code>@​s-weigand</code></a></li>
<li><a href=""https://github-redirect.dependabot.com/pre-commit/action/issues/53"">#53</a> issue by <a href=""https://github.com/s-weigand""><code>@​s-weigand</code></a></li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pre-commit/action/commit/9cf68dc1ace5504cd0e05b9f3df32e6a0822ad89""><code>9cf68dc</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/12c0cbaee9b37d569632139754759021b4dc2ed7""><code>12c0cba</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/686243b93a269e859b827b37c83af97ad125b407""><code>686243b</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/5b6c59a01a99def46b9fd96111c1533e8df334cf""><code>5b6c59a</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/23933a87f57b9d68d9841cef1ca481eac28c9458""><code>23933a8</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/ba03328ac18694cb521a8fcb053db2f07419862b""><code>ba03328</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/055fa4e7efbddb7cdc641d81a40c4497a3f4e39d""><code>055fa4e</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/2fcbdbb9ddd55fb1f15449c82b3e66ffb1320634""><code>2fcbdbb</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/8ba276b2444e938dfc4a7ec990b590b0be4f11e9""><code>8ba276b</code></a> Deployed to github pages</li>
<li><a href=""https://github.com/pre-commit/action/commit/34072ce8c47fc47e70ba4d94386763155b3c1f8e""><code>34072ce</code></a> Deployed to github pages</li>
<li>See full diff in <a href=""https://github.com/pre-commit/action/compare/v2.0.0...9cf68dc1ace5504cd0e05b9f3df32e6a0822ad89"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by @andersy005.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-04-14T14:40:11Z,2021-04-14T15:25:27Z,2021-04-14T15:25:25Z,2021-04-14T15:25:25Z,8040a9acb2f6dbf368d34cd85308eeb1b799a00b,,,0,59e2e909e764ab8470349ead11aa2ae0015d5e9b,00d1028188f6d323ac87f68a826ca698bf861b56,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5157,
615299411,MDExOlB1bGxSZXF1ZXN0NjE1Mjk5NDEx,5158,closed,0,Bump styfle/cancel-workflow-action from 0.8.0 to 0.9.0,49699333,"Bumps [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) from 0.8.0 to 0.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/styfle/cancel-workflow-action/releases"">styfle/cancel-workflow-action's releases</a>.</em></p>
<blockquote>
<h2>0.9.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>Add <code>all_but_latest</code> flag - cancel all workflows but the latest: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/35"">#35</a></li>
<li>Cleanup <code>all_but_latest</code>: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/67"">#67</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a href=""https://github.com/thomwiggers""><code>@​thomwiggers</code></a> for helping!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/89f242ee29e10c53a841bfe71cc0ce7b2f065abc""><code>89f242e</code></a> 0.9.0</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/1f01010c62353732693b6d4b9317a5e1964efb5c""><code>1f01010</code></a> Cleanup all_but_latest (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/67"">#67</a>)</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/1adde81177c51394e6482cd911704cf9ba77faad""><code>1adde81</code></a> Optionally cancel all workflows but the latest (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/35"">#35</a>)</li>
<li>See full diff in <a href=""https://github.com/styfle/cancel-workflow-action/compare/0.8.0...89f242ee29e10c53a841bfe71cc0ce7b2f065abc"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by @andersy005.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-04-14T14:40:13Z,2021-04-14T15:47:46Z,2021-04-14T15:47:44Z,2021-04-14T15:47:44Z,c796eb600d61f77db1754b25570945de12287bb8,,,0,b07d4483c278647ab8a406769f2baf12b26606de,00d1028188f6d323ac87f68a826ca698bf861b56,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5158,
623080300,MDExOlB1bGxSZXF1ZXN0NjIzMDgwMzAw,5217,closed,0,Bump actions/github-script from v3 to v4.0.2,49699333,"Bumps [actions/github-script](https://github.com/actions/github-script) from v3 to v4.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/github-script/releases"">actions/github-script's releases</a>.</em></p>
<blockquote>
<h2>Update <code>@​actions/core</code> package</h2>
<p>This release updates the <code>@actions/core</code> package to 1.2.7 - <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/137"">actions/github-script#137</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/github-script/commit/a3e7071a34d7e1f219a8a4de9a5e0a34d1ee1293""><code>a3e7071</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/137"">#137</a> from actions/joshgross/update-actions-core</li>
<li><a href=""https://github.com/actions/github-script/commit/3858e71d11531a5b5bbcbc726fddadcba075b157""><code>3858e71</code></a> Update license for <code>@​actions/core</code></li>
<li><a href=""https://github.com/actions/github-script/commit/2b34a689ec86a68d8ab9478298f91d5401337b7d""><code>2b34a68</code></a> Update <code>@​actions/core</code> to 1.2.7</li>
<li><a href=""https://github.com/actions/github-script/commit/85e88a66eaa831097093a3d278536947f2984d20""><code>85e88a6</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/136"">#136</a> from actions/search-cwd-first</li>
<li><a href=""https://github.com/actions/github-script/commit/5cbb702e24d65c8ebafd6aa4a1dff5a2e7c5a0d7""><code>5cbb702</code></a> v4.0.1</li>
<li><a href=""https://github.com/actions/github-script/commit/1ef7fd09cae454dd85632525cb815e8260f7517b""><code>1ef7fd0</code></a> Remove require search fallback</li>
<li><a href=""https://github.com/actions/github-script/commit/a49bf6b2cd2d19d7353cf281ec5f195f17a57cd6""><code>a49bf6b</code></a> Search the cwd first, then existing module paths</li>
<li><a href=""https://github.com/actions/github-script/commit/95fb649573b4020d9a24b4480947c1746afcb137""><code>95fb649</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/135"">#135</a> from actions/wrap-require</li>
<li><a href=""https://github.com/actions/github-script/commit/2923e50f2900cc87d1480ca89c5058b1b9bb4c4e""><code>2923e50</code></a> Run build script</li>
<li><a href=""https://github.com/actions/github-script/commit/b616178d6da5de6da31a1a601c15fbcba8e5d115""><code>b616178</code></a> Merge branch 'wrap-require' of <a href=""https://github.com/actions/github-script"">https://github.com/actions/github-script</a> into ...</li>
<li>Additional commits viewable in <a href=""https://github.com/actions/github-script/compare/v3...a3e7071a34d7e1f219a8a4de9a5e0a34d1ee1293"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by @andersy005.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-04-26T08:11:12Z,2021-04-27T02:57:37Z,2021-04-27T02:57:36Z,2021-04-27T02:57:35Z,293782b9713b79599ce940a581a4c7181cd78108,,,0,e2f96675e455ad5ac498550ba16004fdcfb1c69d,2d76d22a1bdb55f6461da55a228f1b3efd478a28,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5217,
623080435,MDExOlB1bGxSZXF1ZXN0NjIzMDgwNDM1,5218,closed,0,Bump pre-commit/action from v2.0.2 to v2.0.3,49699333,"Bumps [pre-commit/action](https://github.com/pre-commit/action) from v2.0.2 to v2.0.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pre-commit/action/releases"">pre-commit/action's releases</a>.</em></p>
<blockquote>
<h2>pre-commit/action@v2.0.3</h2>
<h3>Fixes</h3>
<ul>
<li><code>push</code> compatibility with <code>actions/checkout@v2</code> which checks out the branch
<ul>
<li><a href=""https://github-redirect.dependabot.com/pre-commit/action/issues/97"">#97</a> PR by <a href=""https://github.com/jackton1""><code>@​jackton1</code></a>.</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pre-commit/action/commit/9b88afc9cd57fd75b655d5c71bd38146d07135fe""><code>9b88afc</code></a> Deployed to github pages</li>
<li>See full diff in <a href=""https://github.com/pre-commit/action/compare/v2.0.2...9b88afc9cd57fd75b655d5c71bd38146d07135fe"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @andersy005.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-04-26T08:11:20Z,2021-04-27T03:33:46Z,2021-04-27T03:33:44Z,2021-04-27T03:33:44Z,77b494b7b34f41d5ed60c5a8bba63ba799c7b18f,,,0,22754b1e26ae6742424b9351bcaadb9751fb1609,293782b9713b79599ce940a581a4c7181cd78108,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5218,
696715635,MDExOlB1bGxSZXF1ZXN0Njk2NzE1NjM1,5633,closed,0,Bump codecov/codecov-action from 1 to 2.0.2,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 1 to 2.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v2.0.2</h2>
<h3>Fixes</h3>
<ul>
<li>Underlying uploader fixes issues with tokens not being sent properly for users seeing
<code>Error!: Error: Error uploading to https://codecov.io: Error: Error uploading to Codecov: Error: Not Found</code></li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/432"">#432</a> fix: use import to destructure package.json</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/434"">#434</a> fix: openpgp and asn1.js</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/440"">#440</a> 2.0.2 token fixes</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/420"">#420</a> Bump eslint from 7.30.0 to 7.31.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/433"">#433</a> build(deps-dev): bump <code>@​types/node</code> from 16.3.3 to 16.4.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/425"">#425</a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 4.28.3 to 4.28.4</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/426"">#426</a> build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 4.28.3 to 4.28.4</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/438"">#438</a> Set up Dependabot for github-actions dependencies</li>
</ul>
<h2>v2.0.1</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/424"">#424</a> fix: Issue in building all deep dependencies</li>
</ul>
<h2>v2.0.0</h2>
<p>On February 1, 2022, the <code>v1</code> uploader will be full sunset and no longer function. This is due
to the deprecation of the underlying bash uploader. This version uses the new <a href=""https://github.com/codecov/uploader"">uploader</a>.</p>
<p>The <code>v2</code> Action downloads, verifies, and runs the Codecov binary.</p>
<h3>Breaking Changes</h3>
<ul>
<li>Multiple fields have not been transferred from the bash uploader or have been deprecated. Notably
many of the <code>functionalities</code> and <code>gcov_</code> arguments have been removed. Please check the documentation
for the full list.</li>
</ul>
<h3>Features</h3>
<ul>
<li><code>dry-run</code> argument allows Codecov flow without uploading reports to Codecov</li>
<li>(Enterprise only) <code>slug</code> allows specifying the repository slug manually</li>
<li>(Enterprise only) <code>url</code> allows changing the upload host</li>
</ul>
<h2>v1.5.2</h2>
<h2>1.5.2</h2>
<h3>Fixes</h3>
<ul>
<li>
<h1>fix: Import version properly as string not object</h1>
</li>
</ul>
<h2>v1.5.1</h2>
<h2>1.5.1</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/320"">#320</a> doc: add github actions badge</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/336"">#336</a> Update bash uploader to 1.0.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/339"">#339</a> fix: Add action version</li>
</ul>
<h3>Dependencies</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>2.0.2</h2>
<h3>Fixes</h3>
<ul>
<li>Underlying uploader fixes issues with tokens not being sent properly for users seeing
<code>Error!: Error: Error uploading to https://codecov.io: Error: Error uploading to Codecov: Error: Not Found</code></li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/440"">#440</a> fix: Validation ordering</li>
</ul>
<h2>2.0.1</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/424"">#424</a> fix: Issue in building all deep dependencies</li>
</ul>
<h2>2.0.0</h2>
<p>On February 1, 2022, the <code>v1</code> uploader will be full sunset and no longer function. This is due
to the deprecation of the underlying bash uploader. This version uses the new <a href=""https://github.com/codecov/uploader"">uploader</a>.</p>
<p>The <code>v2</code> Action downloads, verifies, and runs the Codecov binary.</p>
<h3>Breaking Changes</h3>
<ul>
<li>Multiple fields have not been transferred from the bash uploader or have been deprecated. Notably
many of the <code>functionalities</code> and <code>gcov_</code> arguments have been removed. Please check the documentation
for the full list.</li>
</ul>
<h3>Features</h3>
<ul>
<li><code>dry-run</code> argument allows Codecov flow without uploading reports to Codecov</li>
<li>(Enterprise only) <code>slug</code> allows specifying the repository slug manually</li>
<li>(Enterprise only) <code>url</code> allows changing the upload host</li>
</ul>
<h2>1.5.2</h2>
<h3>Fixes</h3>
<ul>
<li>
<h1>fix: Import version properly as string not object</h1>
</li>
</ul>
<h2>1.5.1</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/320"">#320</a> doc: add github actions badge</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/336"">#336</a> Update bash uploader to 1.0.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/339"">#339</a> fix: Add action version</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/302"">#302</a> Bump <code>@​typescript-eslint/eslint-plugin</code> from 4.22.0 to 4.22.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/303"">#303</a> Bump <code>@​typescript-eslint/parser</code> from 4.22.0 to 4.22.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/304"">#304</a> Bump ts-jest from 26.5.5 to 26.5.6</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/309"">#309</a> Bump lodash from 4.17.19 to 4.17.21</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/310"">#310</a> Bump hosted-git-info from 2.8.8 to 2.8.9</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/311"">#311</a> Bump <code>@​actions/github</code> from 4.0.0 to 5.0.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/314"">#314</a> Bump eslint from 7.25.0 to 7.27.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/315"">#315</a> Bump <code>@​actions/core</code> from 1.2.7 to 1.3.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/316"">#316</a> Bump <code>@​typescript-eslint/parser</code> from 4.22.1 to 4.25.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/317"">#317</a> Bump <code>@​typescript-eslint/eslint-plugin</code> from 4.22.1 to 4.25.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/319"">#319</a> Bump jest-junit from 12.0.0 to 12.1.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/321"">#321</a> Bump typescript from 4.2.4 to 4.3.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/323"">#323</a> Bump ws from 7.3.1 to 7.4.6</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/51d810878be5422784e86451c0e7c14e5860ec47""><code>51d8108</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/440"">#440</a> from codecov/2.0.2-token-fixes</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/88c796db184decd9587ce608896441b1c96fb3d9""><code>88c796d</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/438"">#438</a> from mmorel-35/chore/dependabot</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/0bbb08247af9376cc8aa170281fce5b5e48bfde4""><code>0bbb082</code></a> fix: Update validation</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/53f686aaf8540352482d0bea7b92248ef1e2cb0a""><code>53f686a</code></a> fix: Update validation</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/6ab08a75e2ef9b04e5402468f88c8f08039017c0""><code>6ab08a7</code></a> Bump to 2.0.2</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/f2242e1815c6a47d64639e34b6aad38aef3fc4e1""><code>f2242e1</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/425"">#425</a> from codecov/dependabot/npm_and_yarn/typescript-eslin...</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/fc2878a5309ea34776e2a8fb3853258d64710d6d""><code>fc2878a</code></a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code></li>
<li><a href=""https://github.com/codecov/codecov-action/commit/e00e953908be2880a844c7917679fe2adc0f6c83""><code>e00e953</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/426"">#426</a> from codecov/dependabot/npm_and_yarn/typescript-eslin...</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/8dcb1d2117f92afad705f41f41974505a1ed3fd8""><code>8dcb1d2</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/433"">#433</a> from codecov/dependabot/npm_and_yarn/types/node-16.4.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/c5857ba40cc009e8157219891e3a99dbc86718ba""><code>c5857ba</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/434"">#434</a> from RA80533/fix/openpgp</li>
<li>Additional commits viewable in <a href=""https://github.com/codecov/codecov-action/compare/v1...v2.0.2"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=1&new-version=2.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-07-26T06:05:38Z,2021-07-26T07:01:58Z,2021-07-26T06:42:26Z,2021-07-26T06:42:26Z,da99a5664df4f5013c2f6b0e758394bec5e0bc80,,,0,042db2e384c76dccb8f19c6956d357c08dd2ff89,12810c2c264a004648fdb750262f2da4973a7ca5,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5633,
701150737,MDExOlB1bGxSZXF1ZXN0NzAxMTUwNzM3,5663,closed,0,Bump styfle/cancel-workflow-action from 0.9.0 to 0.9.1,49699333,"Bumps [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) from 0.9.0 to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/styfle/cancel-workflow-action/releases"">styfle/cancel-workflow-action's releases</a>.</em></p>
<blockquote>
<h2>0.9.1</h2>
<h3>Patches</h3>
<ul>
<li>Fix: cancelling jobs from different repos where two branches have the same name: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/105"">#105</a></li>
<li>Fix: use getBooleanInput instead of getInput: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/92"">#92</a></li>
<li>Chore: add permissions configuration in the README.md: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/96"">#96</a></li>
<li>Chore: add prettier config, format file, add lint workflow: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/63"">#63</a></li>
<li>Chore: create <code>dependabot.yml</code>: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/68"">#68</a></li>
<li>Bump typescript from 4.1.5 to 4.2.4: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/71"">#71</a></li>
<li>Bump actions/setup-node requirement to v2.1.5: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/69"">#69</a></li>
<li>Bump <code>@​vercel/ncc</code> to 0.28.3: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/73"">#73</a></li>
<li>Bump <code>@​actions/core</code> from 1.2.6 to 1.2.7: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/74"">#74</a></li>
<li>Bump <code>@​vercel/ncc</code> from 0.28.3 to 0.28.5: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/81"">#81</a></li>
<li>Bump <code>@​actions/core</code> from 1.2.7 to 1.3.0: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/90"">#90</a></li>
<li>Bump prettier from 2.2.1 to 2.3.0: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/85"">#85</a></li>
<li>Bump <code>@​vercel/ncc</code> from 0.28.5 to 0.28.6: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/95"">#95</a></li>
<li>Bump typescript from 4.2.4 to 4.3.2: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/94"">#94</a></li>
<li>Bump prettier from 2.3.0 to 2.3.1: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/97"">#97</a></li>
<li>Bump typescript from 4.3.2 to 4.3.4: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/99"">#99</a></li>
<li>Bump prettier from 2.3.1 to 2.3.2: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/100"">#100</a></li>
<li>Bump typescript from 4.3.4 to 4.3.5: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/101"">#101</a></li>
<li>Bump husky from 6.0.0 to 7.0.0: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/102"">#102</a></li>
<li>Bump husky from 7.0.0 to 7.0.1: <a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/103"">#103</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a href=""https://github.com/mikehardy""><code>@​mikehardy</code></a>, <a href=""https://github.com/MichaelDeBoey""><code>@​MichaelDeBoey</code></a>, <a href=""https://github.com/Warashi""><code>@​Warashi</code></a>, <a href=""https://github.com/adrienbernede""><code>@​adrienbernede</code></a>, and <a href=""https://github.com/spaceface777""><code>@​spaceface777</code></a> for helping!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/a40b8845c0683271d9f53dfcb887a7e181d3918b""><code>a40b884</code></a> 0.9.1</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/a66ae1f29f50777b386e60b6bc1abeae8a8462a5""><code>a66ae1f</code></a> fix cancelling jobs from different repos where two branches have the same nam...</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/b54f1a5f83cea0b2be160c391b76400f88c60274""><code>b54f1a5</code></a> Bump husky from 7.0.0 to 7.0.1 (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/103"">#103</a>)</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/cc6225c296093377dedda470594e263d8acf2e27""><code>cc6225c</code></a> Bump husky from 6.0.0 to 7.0.0 (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/102"">#102</a>)</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/c94109d2f86cb1b9c3c694e1b87aafdc46be4ac2""><code>c94109d</code></a> Bump typescript from 4.3.4 to 4.3.5 (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/101"">#101</a>)</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/fc3581b3434c129506b262a4a9823ba9ed4a93e8""><code>fc3581b</code></a> Bump prettier from 2.3.1 to 2.3.2 (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/100"">#100</a>)</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/6f9f8b4dcf8c8f9d99904a92c5e5644915597b57""><code>6f9f8b4</code></a> Bump typescript from 4.3.2 to 4.3.4 (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/99"">#99</a>)</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/6135c0ff6214e01d42a5736c988e39b7831f1e2f""><code>6135c0f</code></a> Bump prettier from 2.3.0 to 2.3.1 (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/97"">#97</a>)</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/531a0365f0a7dba0c9b3edca40968be698841761""><code>531a036</code></a> chore: add permissions configuration in the README.md (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/96"">#96</a>)</li>
<li><a href=""https://github.com/styfle/cancel-workflow-action/commit/1f10757debeb7d19892a866529f3c8b5cd06b14a""><code>1f10757</code></a> Bump typescript from 4.2.4 to 4.3.2 (<a href=""https://github-redirect.dependabot.com/styfle/cancel-workflow-action/issues/94"">#94</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/styfle/cancel-workflow-action/compare/0.9.0...0.9.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=styfle/cancel-workflow-action&package-manager=github_actions&previous-version=0.9.0&new-version=0.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-08-02T06:05:09Z,2021-08-02T10:46:13Z,2021-08-02T10:19:32Z,2021-08-02T10:19:32Z,35d798a36912418e5c6b4bd7d6c3c6e39accf3d0,,,0,78ea4eb328e35d81db2ab84005e847131336fbb2,c44b816bf4a858af1bb621d96e1d3482db3976da,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5663,
717526634,MDExOlB1bGxSZXF1ZXN0NzE3NTI2NjM0,5730,closed,0,Bump actions/github-script from 4.0.2 to 4.1,49699333,"Bumps [actions/github-script](https://github.com/actions/github-script) from 4.0.2 to 4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/github-script/releases"">actions/github-script's releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Adding <code>@​actions/exec</code> to github-script by <a href=""https://github.com/bhavanakonchada""><code>@​bhavanakonchada</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/178"">actions/github-script#178</a></li>
<li>Run npm audit and update dev dependencies by <a href=""https://github.com/joshmgross""><code>@​joshmgross</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/181"">actions/github-script#181</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/MichaelDeBoey""><code>@​MichaelDeBoey</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/145"">actions/github-script#145</a></li>
<li><a href=""https://github.com/oscard0m""><code>@​oscard0m</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/174"">actions/github-script#174</a></li>
<li><a href=""https://github.com/brcrista""><code>@​brcrista</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/177"">actions/github-script#177</a></li>
<li><a href=""https://github.com/bhavanakonchada""><code>@​bhavanakonchada</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/178"">actions/github-script#178</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/github-script/compare/v4.0.2...v4.1.0"">https://github.com/actions/github-script/compare/v4.0.2...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/github-script/commit/f891eff65186019cbb3f7190c4590bc0a1b76fbc""><code>f891eff</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/181"">#181</a> from actions/joshmgross/update-dependencies</li>
<li><a href=""https://github.com/actions/github-script/commit/43434074d0d66a909ca7d845d12ff9d299cd1280""><code>4343407</code></a> Update dev dependencies</li>
<li><a href=""https://github.com/actions/github-script/commit/ab3c97fb6bb07ef56b67c915a5784be31ea1e58b""><code>ab3c97f</code></a> Run npm audit fix</li>
<li><a href=""https://github.com/actions/github-script/commit/e02270e59f7bb3eee18f21087920e5e7216fc572""><code>e02270e</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/178"">#178</a> from bhavanakonchada/bhavanakonchada-exec</li>
<li><a href=""https://github.com/actions/github-script/commit/c07f5aaf742e7f7158c2cfe2ae001431db94ccc5""><code>c07f5aa</code></a> Placed the exe.dep.yml file at the right location</li>
<li><a href=""https://github.com/actions/github-script/commit/49d397a5383aa4a99547ab111b6a9ad66eb52f96""><code>49d397a</code></a> updated package-lock.json to reflect v2</li>
<li><a href=""https://github.com/actions/github-script/commit/6f9b9a87b5f53d9feb6b80689fc9c572b049debc""><code>6f9b9a8</code></a> Merge branch 'bhavanakonchada-exec' of <a href=""https://github.com/bhavanakonchada/git"">https://github.com/bhavanakonchada/git</a>...</li>
<li><a href=""https://github.com/actions/github-script/commit/6456c11da25f038530f8f43124ea79c5f39702b6""><code>6456c11</code></a> Adding <code>@​actions/exec</code></li>
<li><a href=""https://github.com/actions/github-script/commit/a8325789f17a670048b2a7e0daf3392215a1d56c""><code>a832578</code></a> Added license file for <code>@​actions/exec</code></li>
<li><a href=""https://github.com/actions/github-script/commit/771c6ccbd2a6c366b9369b59864dab03ed9476db""><code>771c6cc</code></a> updated readme.md</li>
<li>Additional commits viewable in <a href=""https://github.com/actions/github-script/compare/v4.0.2...v4.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=4.0.2&new-version=4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-08-23T06:04:14Z,2021-08-23T19:42:21Z,2021-08-23T19:16:21Z,2021-08-23T19:16:21Z,a6b44d72010c5311fad4f60194b527194e26094b,,,0,e42ad1f600527331047a75ff091aad075e2db63e,4f1e2d37b662079e830c9672400fabc19b44a376,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5730,
722188327,MDExOlB1bGxSZXF1ZXN0NzIyMTg4MzI3,5747,closed,0,Bump codecov/codecov-action from 2.0.2 to 2.0.3,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2.0.2 to 2.0.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v2.0.3</h2>
<h2>2.0.3</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/464"">#464</a> Fix wrong link in the readme</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/485"">#485</a> fix: Add override OS and linux default to platform</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/447"">#447</a> build(deps): bump openpgp from 5.0.0-4 to 5.0.0-5</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/458"">#458</a> build(deps-dev): bump eslint from 7.31.0 to 7.32.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/465"">#465</a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 4.28.4 to 4.29.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/466"">#466</a> build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 4.28.4 to 4.29.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/468"">#468</a> build(deps-dev): bump <code>@​types/jest</code> from 26.0.24 to 27.0.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/470"">#470</a> build(deps-dev): bump <code>@​types/node</code> from 16.4.0 to 16.6.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/472"">#472</a> build(deps): bump path-parse from 1.0.6 to 1.0.7</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/473"">#473</a> build(deps-dev): bump <code>@​types/jest</code> from 27.0.0 to 27.0.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/478"">#478</a> build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 4.29.1 to 4.29.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/479"">#479</a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 4.29.1 to 4.29.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/481"">#481</a> build(deps-dev): bump <code>@​types/node</code> from 16.6.0 to 16.6.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/483"">#483</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.29.0 to 0.29.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/484"">#484</a> build(deps): bump <code>@​actions/core</code> from 1.4.0 to 1.5.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>2.0.3</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/464"">#464</a> Fix wrong link in the readme</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/485"">#485</a> fix: Add override OS and linux default to platform</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/447"">#447</a> build(deps): bump openpgp from 5.0.0-4 to 5.0.0-5</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/458"">#458</a> build(deps-dev): bump eslint from 7.31.0 to 7.32.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/465"">#465</a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 4.28.4 to 4.29.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/466"">#466</a> build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 4.28.4 to 4.29.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/468"">#468</a> build(deps-dev): bump <code>@​types/jest</code> from 26.0.24 to 27.0.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/470"">#470</a> build(deps-dev): bump <code>@​types/node</code> from 16.4.0 to 16.6.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/472"">#472</a> build(deps): bump path-parse from 1.0.6 to 1.0.7</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/473"">#473</a> build(deps-dev): bump <code>@​types/jest</code> from 27.0.0 to 27.0.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/478"">#478</a> build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 4.29.1 to 4.29.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/479"">#479</a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 4.29.1 to 4.29.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/481"">#481</a> build(deps-dev): bump <code>@​types/node</code> from 16.6.0 to 16.6.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/483"">#483</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.29.0 to 0.29.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/484"">#484</a> build(deps): bump <code>@​actions/core</code> from 1.4.0 to 1.5.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/5a8bb4701eca7ba3673f21664b887f652c58d0a3""><code>5a8bb47</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/485"">#485</a> from codecov/alternate-os</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/3e9a2814f275c203e54e7d52a37d6510f7b927c0""><code>3e9a281</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/481"">#481</a> from codecov/dependabot/npm_and_yarn/types/node-16.6.2</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/6feb914f258d64e26a6821b9e5c299734cdf0063""><code>6feb914</code></a> chore: Update CHANGELOG</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/9f40d310dd9118c73b76b8f8cb2040347db674bc""><code>9f40d31</code></a> build(deps-dev): bump <code>@​types/node</code> from 16.6.0 to 16.6.2</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/c4e74feb726d24e316fe82a00e5b134cc1488a39""><code>c4e74fe</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/483"">#483</a> from codecov/dependabot/npm_and_yarn/vercel/ncc-0.29.2</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/6ba3fb33c76727f4d10d9155bbd82d3bfe86fbc5""><code>6ba3fb3</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/479"">#479</a> from codecov/dependabot/npm_and_yarn/typescript-eslin...</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/7efb9be09a656c6f53dfeb11dc4fdd8e4272362d""><code>7efb9be</code></a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code></li>
<li><a href=""https://github.com/codecov/codecov-action/commit/514990d4ef0e7a59fa01d3c0c0f16c8e41fe1e1a""><code>514990d</code></a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.29.0 to 0.29.2</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/cd6db5e3130cd4b4a180ce3d742a97ecfe34061c""><code>cd6db5e</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/484"">#484</a> from codecov/dependabot/npm_and_yarn/actions/core-1.5.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/678cc77a4f5fd03937f21a0f627cc07002d9c99b""><code>678cc77</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/478"">#478</a> from codecov/dependabot/npm_and_yarn/typescript-eslin...</li>
<li>Additional commits viewable in <a href=""https://github.com/codecov/codecov-action/compare/v2.0.2...v2.0.3"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=2.0.2&new-version=2.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-08-30T06:04:14Z,2021-08-30T07:57:54Z,2021-08-30T07:32:37Z,2021-08-30T07:32:37Z,8c9c0f6827a38d3833a4d6108a705feb717a3f73,,,0,8e7906487acaa8de7724403445691be23cba469c,588cc62a5dd82b61b835dbac0c247198e5253314,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5747,
737278846,PR_kwDOAMm_X84r8ft-,5800,closed,0,Bump codecov/codecov-action from 2.0.3 to 2.1.0,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2.0.3 to 2.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v2.1.0</h2>
<h2>2.1.0</h2>
<h3>Features</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/515"">#515</a> Allow specifying version of Codecov uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/499"">#499</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.29.0 to 0.30.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/508"">#508</a> build(deps): bump openpgp from 5.0.0-5 to 5.0.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/514"">#514</a> build(deps-dev): bump <code>@​types/node</code> from 16.6.0 to 16.9.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>2.1.0</h2>
<h3>Features</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/515"">#515</a> Allow specifying version of Codecov uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/499"">#499</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.29.0 to 0.30.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/508"">#508</a> build(deps): bump openpgp from 5.0.0-5 to 5.0.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/514"">#514</a> build(deps-dev): bump <code>@​types/node</code> from 16.6.0 to 16.9.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/f32b3a3741e1053eb607407145bc9619351dc93b""><code>f32b3a3</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/515"">#515</a> from codecov/specify-version</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/72dfd4782ebb39e122c34a1c156c26573f9b412e""><code>72dfd47</code></a> Allow specifying version of Codecov uploader</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/46edaeda0ce748dd0d8545e755226bd7d09d57bd""><code>46edaed</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/499"">#499</a> from codecov/dependabot/npm_and_yarn/vercel/ncc-0.30.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/b6fd8cc98b58344afa1069a491dbceae20ea9ed0""><code>b6fd8cc</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/508"">#508</a> from codecov/dependabot/npm_and_yarn/openpgp-5.0.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/07a4e975bb0a7b708fd8c7100cfc330af5857bba""><code>07a4e97</code></a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.29.0 to 0.30.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/c071c7087fd09c2f7de288160514795d076f4e1d""><code>c071c70</code></a> build(deps): bump openpgp from 5.0.0-5 to 5.0.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/f6d4366a4c53a2980bd8577dd75fd2420322c647""><code>f6d4366</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/514"">#514</a> from codecov/dependabot/npm_and_yarn/types/node-16.9.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/2bbefc9105ffc55315a3982cc3c8c0ab019fcace""><code>2bbefc9</code></a> build(deps-dev): bump <code>@​types/node</code> from 16.6.0 to 16.9.0</li>
<li>See full diff in <a href=""https://github.com/codecov/codecov-action/compare/v2.0.3...v2.1.0"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=2.0.3&new-version=2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-09-20T06:04:18Z,2021-09-23T18:26:49Z,2021-09-23T18:26:48Z,2021-09-23T18:26:48Z,836d533f882b032c2812d07c84bd0c8565bf0938,,,0,3a6f0921c43979b043a1a74a02ec7b64b06e65c2,a1635d324753588e353e4e747f6058936fa8cf1e,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5800,
743123831,PR_kwDOAMm_X84sSyt3,5826,closed,0,Bump actions/github-script from 4.1 to 5,49699333,"Bumps [actions/github-script](https://github.com/actions/github-script) from 4.1 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/github-script/releases"">actions/github-script's releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Upgrade to the latest version of Octokit by <a href=""https://github.com/joshmgross""><code>@​joshmgross</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/193"">actions/github-script#193</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/github-script/compare/v4.1.1...v5.0.0"">https://github.com/actions/github-script/compare/v4.1.1...v5.0.0</a></p>
<h2>v4.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update minor versions of dependencies by <a href=""https://github.com/joshmgross""><code>@​joshmgross</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/192"">actions/github-script#192</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/github-script/compare/v4.1.0...v4.1.1"">https://github.com/actions/github-script/compare/v4.1.0...v4.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/github-script/commit/441359b1a30438de65712c2fbca0abe4816fa667""><code>441359b</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/193"">#193</a> from actions/joshmgross/v5</li>
<li><a href=""https://github.com/actions/github-script/commit/4e1175c48335078132afc3f5dc1b7e27219c659a""><code>4e1175c</code></a> Update licenses</li>
<li><a href=""https://github.com/actions/github-script/commit/004e46f649b61c0e1d436150ee9868171180fbe8""><code>004e46f</code></a> Fix breaking change in workflow test</li>
<li><a href=""https://github.com/actions/github-script/commit/5e5d515dc7088569e3d5a2cfecfe542588a1efc6""><code>5e5d515</code></a> Upgrade to the latest version of Octokit</li>
<li>See full diff in <a href=""https://github.com/actions/github-script/compare/v4.1...v5"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=4.1&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2021-09-27T06:05:00Z,2021-11-01T17:12:14Z,2021-11-01T17:12:12Z,2021-11-01T17:12:12Z,e3b689d7a2a36b9fc5e3f8033f6ee9547b1bf650,,,0,daf20b5909b26e23f5ccaa711cbbb4eec21d14fe,13a2695b47bf81390993c448d229446954290ffa,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/5826,
817268425,PR_kwDOAMm_X84wtobJ,6147,closed,0,Bump pypa/gh-action-pypi-publish from 1.4.2 to 1.5.0,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.4.2 to 1.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Added an action input <code>print_hash</code> for showing the hash values of files to be uploaded — by <a href=""https://github.com/meowmeowmeowcat""><code>@​meowmeowmeowcat</code></a> in <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/pull/87"">pypa/gh-action-pypi-publish#87</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/pllim""><code>@​pllim</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/pull/55"">pypa/gh-action-pypi-publish#55</a></li>
<li><a href=""https://github.com/meowmeowmeowcat""><code>@​meowmeowmeowcat</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/pull/87"">pypa/gh-action-pypi-publish#87</a></li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.4.2...v1.5.0"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.4.2...v1.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/717ba43cfbb0387f6ce311b169a825772f54d295""><code>717ba43</code></a> Trim the trailing whitespaces in <code>print-hash.py</code></li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/4992a00fb2ce867ab24eb17e1fe76738cabcc160""><code>4992a00</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/87"">#87</a> from meowmeowmeowcat/show-hash-values</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/977d0675615f6a62b2da99c5d6cd6da339b38bd5""><code>977d067</code></a> Fix a bug</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/5d18baa42c7d858441b701f9f8d1db08ba9be00e""><code>5d18baa</code></a> Drop unnecessary <code>file_iterable</code> var</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/0575dc8eab29bdb32fdc059da3f8ac7a22a26fb7""><code>0575dc8</code></a> Refactor the hash helper script to use pathlib and CLI args</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/8682135dac51a0c6d0b2b03eacc20cdb11f203f2""><code>8682135</code></a> Correct the if-clause for printing the hashes</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c83d37bdf05723c6eca6bd0df3c05e00cacfa961""><code>c83d37b</code></a> Introduce print_hash in README</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/777bfc4346c57a31fdf7ec381ef3e92018960946""><code>777bfc4</code></a> Fix the message</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/ca30c7da983a24caeddb2e73a5f6fe1022d880a2""><code>ca30c7d</code></a> Show a message before printing hash values of files</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/06a2dd66854ee73931657bb8a4e1f261ef938a5f""><code>06a2dd6</code></a> Fix bug</li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.4.2...v1.5.0"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.4.2&new-version=1.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-01-10T06:04:45Z,2022-01-10T08:07:23Z,2022-01-10T08:07:12Z,2022-01-10T08:07:12Z,5b322c9ea18f560e35857edcb78efe4e4f323551,,,0,e377895a9c56d91350ee8f70ab8a5ecea6c50e22,e7285ebc33561360dffe9af4f2db21808529dd17,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6147,
851619919,PR_kwDOAMm_X84ywrBP,6273,closed,0,Bump actions/github-script from 5 to 6,49699333,"Bumps [actions/github-script](https://github.com/actions/github-script) from 5 to 6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/github-script/releases"">actions/github-script's releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update default runtime to node16 by <a href=""https://github.com/thboop""><code>@​thboop</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/235"">actions/github-script#235</a></li>
<li>Update <code>node-fetch</code> by <a href=""https://github.com/joshmgross""><code>@​joshmgross</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/237"">actions/github-script#237</a></li>
<li>Update <code>@actions/core</code> to 1.6.0 by <a href=""https://github.com/joshmgross""><code>@​joshmgross</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/238"">actions/github-script#238</a></li>
</ul>
<h3>Breaking Changes</h3>
<p>With the update to Node 16 in <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/235"">#235</a>, all scripts will now be run with Node 16 rather than Node 12.</p>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/thboop""><code>@​thboop</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/235"">actions/github-script#235</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/github-script/compare/v5...v6.0.0"">https://github.com/actions/github-script/compare/v5...v6.0.0</a></p>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update to latest versions for dev dependencies by <a href=""https://github.com/joshmgross""><code>@​joshmgross</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/204"">actions/github-script#204</a></li>
<li>update plugin dependencies by <a href=""https://github.com/PeterNitscheMI""><code>@​PeterNitscheMI</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/216"">actions/github-script#216</a></li>
<li>Update licenses and use <code>jonabc/setup-licensed</code> in workflow by <a href=""https://github.com/joshmgross""><code>@​joshmgross</code></a> in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/228"">actions/github-script#228</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/johan-lindqvist""><code>@​johan-lindqvist</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/201"">actions/github-script#201</a></li>
<li><a href=""https://github.com/ansgarm""><code>@​ansgarm</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/215"">actions/github-script#215</a></li>
<li><a href=""https://github.com/PeterNitscheMI""><code>@​PeterNitscheMI</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/actions/github-script/pull/216"">actions/github-script#216</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/github-script/compare/v5.0.0...v5.1.0"">https://github.com/actions/github-script/compare/v5.0.0...v5.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/github-script/commit/9ac08808f993958e9de277fe43a64532a609130e""><code>9ac0880</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/240"">#240</a> from actions/joshmgross/document-esm</li>
<li><a href=""https://github.com/actions/github-script/commit/53cdbb4a1b0ce55e0b3c6678c8bcb21dd5342935""><code>53cdbb4</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/239"">#239</a> from actions/joshmgross/v6</li>
<li><a href=""https://github.com/actions/github-script/commit/6b8d8aaad456fb7320b2e478ad6896bee60921c2""><code>6b8d8aa</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/238"">#238</a> from actions/joshmgross/update-actions-core</li>
<li><a href=""https://github.com/actions/github-script/commit/6689be4f99bc9734c4e650a1cbbcb3ef1690f0eb""><code>6689be4</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/237"">#237</a> from actions/joshmgross/audit-fix</li>
<li><a href=""https://github.com/actions/github-script/commit/5541733ecff4b86e4ec217abadab4058fcaea392""><code>5541733</code></a> Add an example using ESM <code>import</code></li>
<li><a href=""https://github.com/actions/github-script/commit/cd8eebf4a552bd70279feb13966ef3520b9968ca""><code>cd8eebf</code></a> Release version 6.0.0</li>
<li><a href=""https://github.com/actions/github-script/commit/72fadf4ee85229843c3fa434b31c6c73af41f503""><code>72fadf4</code></a> Update <code>@actions/core</code> to 1.6.0</li>
<li><a href=""https://github.com/actions/github-script/commit/d526c0463af57e39abe5a0e3deb286a50e6ebb67""><code>d526c04</code></a> Update <code>node-fetch</code> license</li>
<li><a href=""https://github.com/actions/github-script/commit/2c946f132f0939c7dd7ea63af08ba8fb7fd7f670""><code>2c946f1</code></a> Run <code>npm audit fix</code></li>
<li><a href=""https://github.com/actions/github-script/commit/41e1ab4f53305270b2dc2fae1ee2c6cdf842d2b2""><code>41e1ab4</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/github-script/issues/235"">#235</a> from thboop/patch-1</li>
<li>Additional commits viewable in <a href=""https://github.com/actions/github-script/compare/v5...v6"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=5&new-version=6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-02-14T06:04:33Z,2022-02-14T09:05:42Z,2022-02-14T09:05:41Z,2022-02-14T09:05:41Z,8c5c230881d616af32c5a42cca261eb11fce3916,,,0,270671bf82ffaa5b8a60f10c8118336cfecb4dde,472a16e5bcf5bcf375f23e215653631bd326b673,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6273,
872736007,PR_kwDOAMm_X840BOUH,6337,closed,0,Bump actions/checkout from 2 to 3,49699333,"Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/checkout/releases"">actions/checkout's releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<ul>
<li>Update default runtime to node16</li>
</ul>
<h2>v2.4.0</h2>
<ul>
<li>Convert SSH URLs like <code>org-&lt;ORG_ID&gt;@github.com:</code> to <code>https://github.com/</code> - <a href=""https://github-redirect.dependabot.com/actions/checkout/pull/621"">pr</a></li>
</ul>
<h2>v2.3.5</h2>
<p>Update dependencies</p>
<h2>v2.3.4</h2>
<ul>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/379"">Add missing <code>await</code>s</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/360"">Swap to Environment Files</a></li>
</ul>
<h2>v2.3.3</h2>
<ul>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/345"">Remove Unneeded commit information from build logs</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/326"">Add Licensed to verify third party dependencies</a></li>
</ul>
<h2>v2.3.2</h2>
<p><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/320"">Add Third Party License Information to Dist Files</a></p>
<h2>v2.3.1</h2>
<p><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/284"">Fix default branch resolution for .wiki and when using SSH</a></p>
<h2>v2.3.0</h2>
<p><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/278"">Fallback to the default branch</a></p>
<h2>v2.2.0</h2>
<p><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/258"">Fetch all history for all tags and branches when fetch-depth=0</a></p>
<h2>v2.1.1</h2>
<p>Changes to support GHES (<a href=""https://github-redirect.dependabot.com/actions/checkout/pull/236"">here</a> and <a href=""https://github-redirect.dependabot.com/actions/checkout/pull/248"">here</a>)</p>
<h2>v2.1.0</h2>
<ul>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/191"">Group output</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/199"">Changes to support GHES alpha release</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/184"">Persist core.sshCommand for submodules</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/163"">Add support ssh</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/179"">Convert submodule SSH URL to HTTPS, when not using SSH</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/157"">Add submodule support</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/144"">Follow proxy settings</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/141"">Fix ref for pr closed event when a pr is merged</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/128"">Fix issue checking detached when git less than 2.22</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/actions/checkout/blob/main/CHANGELOG.md"">actions/checkout's changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v2.3.1</h2>
<ul>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/284"">Fix default branch resolution for .wiki and when using SSH</a></li>
</ul>
<h2>v2.3.0</h2>
<ul>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/278"">Fallback to the default branch</a></li>
</ul>
<h2>v2.2.0</h2>
<ul>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/258"">Fetch all history for all tags and branches when fetch-depth=0</a></li>
</ul>
<h2>v2.1.1</h2>
<ul>
<li>Changes to support GHES (<a href=""https://github-redirect.dependabot.com/actions/checkout/pull/236"">here</a> and <a href=""https://github-redirect.dependabot.com/actions/checkout/pull/248"">here</a>)</li>
</ul>
<h2>v2.1.0</h2>
<ul>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/191"">Group output</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/199"">Changes to support GHES alpha release</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/184"">Persist core.sshCommand for submodules</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/163"">Add support ssh</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/179"">Convert submodule SSH URL to HTTPS, when not using SSH</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/157"">Add submodule support</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/144"">Follow proxy settings</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/141"">Fix ref for pr closed event when a pr is merged</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/128"">Fix issue checking detached when git less than 2.22</a></li>
</ul>
<h2>v2.0.0</h2>
<ul>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/108"">Do not pass cred on command line</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/107"">Add input persist-credentials</a></li>
<li><a href=""https://github-redirect.dependabot.com/actions/checkout/pull/104"">Fallback to REST API to download repo</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/checkout/commit/a12a3943b4bdde767164f792f33f40b04645d846""><code>a12a394</code></a> update readme for v3 (<a href=""https://github-redirect.dependabot.com/actions/checkout/issues/708"">#708</a>)</li>
<li><a href=""https://github.com/actions/checkout/commit/8f9e05e482293f862823fcca12d9eddfb3723131""><code>8f9e05e</code></a> Update to node 16 (<a href=""https://github-redirect.dependabot.com/actions/checkout/issues/689"">#689</a>)</li>
<li><a href=""https://github.com/actions/checkout/commit/230611dbd0eb52da1e1f4f7bc8bb0c3a339fc8b7""><code>230611d</code></a> Change secret name for PAT to not start with GITHUB_ (<a href=""https://github-redirect.dependabot.com/actions/checkout/issues/623"">#623</a>)</li>
<li>See full diff in <a href=""https://github.com/actions/checkout/compare/v2...v3"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by @andersy005.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-03-07T06:05:40Z,2022-03-08T14:28:16Z,2022-03-08T14:28:15Z,2022-03-08T14:28:15Z,265ec7b4b8f6ee46120f125875685569e4115634,,,0,8f1c0417736e32e07a7489475ac12e4015fe680e,f42ac28629b7b2047f859f291e1d755c36f2e834,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6337,
872736028,PR_kwDOAMm_X840BOUc,6338,closed,0,Bump actions/setup-python from 2 to 3,49699333,"Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/setup-python/releases"">actions/setup-python's releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update default runtime to node16 (<a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/340"">actions/setup-python#340</a>)</li>
<li>Update <code>package-lock.json</code> file version to 2, <code>@types/node</code> to 16.11.25 and <code>typescript</code> to 4.2.3 (<a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/341"">actions/setup-python#341</a>)</li>
<li>Remove legacy <code>pypy2</code> and <code>pypy3</code> keywords (<a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/342"">actions/setup-python#342</a>)</li>
</ul>
<h3>Breaking Changes</h3>
<p>With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.</p>
<p>This new major release removes support of legacy <code>pypy2</code> and <code>pypy3</code> keywords. Please use more specific and flexible syntax to specify a PyPy version:</p>
<pre lang=""yaml""><code>jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version:
        - 'pypy-2.7' # the latest available version of PyPy that supports Python 2.7
        - 'pypy-3.8' # the latest available version of PyPy that supports Python 3.8
        - 'pypy-3.8-v7.3.8' # Python 3.8 and PyPy 7.3.8
    steps:
    - uses: actions/checkout@v2
    - uses: actions/setup-python@v3
      with:
        python-version: ${{ matrix.python-version }}
</code></pre>
<p>See more usage examples in the <a href=""https://github.com/actions/setup-python#specifying-a-pypy-version"">documentation</a></p>
<h2>Update primary and restore keys for pip</h2>
<p>In scope of this release we <a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/303"">include a version of python in restore and primary cache keys for pip</a>. Besides, we add temporary fix for Windows caching <a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/332"">issue</a>, that the <code>pip cache dir</code> command returns non zero exit code or writes to stderr. Moreover we updated <a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/327"">node-fetch dependency</a>.</p>
<h2>Update actions/cache version to 1.0.8</h2>
<p>We have updated <a href=""https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md#108"">actions/cache</a> dependency version to 1.0.8 to support 10GB cache upload</p>
<h2>Support caching dependencies</h2>
<p>This release introduces dependency caching support (<a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/266"">actions/setup-python#266</a>)</p>
<h2>Caching dependencies.</h2>
<p>The action has a built-in functionality for caching and restoring pip/pipenv dependencies. The <code>cache</code> input is optional, and caching is turned off by default.</p>
<p>Besides, this release introduces dependency caching support for mono repos and repositories with complex structure.</p>
<p>By default, the action searches for the dependency file (requirements.txt for pip or Pipfile.lock for pipenv) in the whole repository. Use the <code>cache-dependency-path</code> input for cases when you want to override current behaviour and use different file for hash generation (for example requirements-dev.txt). This input supports wildcards or a list of file names for caching multiple dependencies.</p>
<h3>Caching pip dependencies:</h3>
<pre><code>steps:
- uses: actions/checkout@v2
- uses: actions/setup-python@v2
  with:
    python-version: '3.9'
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/setup-python/commit/0ebf233433c08fb9061af664d501c3f3ff0e9e20""><code>0ebf233</code></a> Remove legacy PyPy input (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/342"">#342</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/665cd78205d9937a51af8cdb754840e2bc95c2d5""><code>665cd78</code></a> Update lockfileversion (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/341"">#341</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/93cb78f17ba30b733a6c17d0f21183bdc0140887""><code>93cb78f</code></a> Update to node16 (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/340"">#340</a>)</li>
<li>See full diff in <a href=""https://github.com/actions/setup-python/compare/v2...v3"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-python&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by @andersy005.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-03-07T06:05:42Z,2022-03-08T14:58:08Z,2022-03-08T14:58:07Z,2022-03-08T14:58:07Z,d293f50f9590251ce09543319d1f0dc760466f1b,,,0,8cd8cba278ccb3f7ddd72eda23695dd2df872212,265ec7b4b8f6ee46120f125875685569e4115634,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6338,
891375703,PR_kwDOAMm_X841IVBX,6417,closed,0,Bump actions/cache from 2 to 3,49699333,"Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/cache/releases"">actions/cache's releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<ul>
<li>
<p>This change adds a minimum runner version(node12 -&gt; node16), which can break users using an out-of-date/fork of the runner. This would be most commonly affecting users on GHES 3.3 or before, as those runners do not support node16 actions and they can use actions from github.com via <a href=""https://docs.github.com/en/enterprise-server@3.0/admin/github-actions/managing-access-to-actions-from-githubcom/enabling-automatic-access-to-githubcom-actions-using-github-connect"">github connect</a> or manually copying the repo to their GHES instance.</p>
</li>
<li>
<p>Few dependencies and cache action usage examples have also been updated.</p>
</li>
</ul>
<h2>v2.1.7</h2>
<p>Support 10GB cache upload using the latest version <code>1.0.8</code> of <a href=""https://www.npmjs.com/package/@actions/cache""><code>@actions/cache</code> </a></p>
<h2>v2.1.6</h2>
<ul>
<li>Catch unhandled &quot;bad file descriptor&quot; errors that sometimes occurs when the cache server returns non-successful response (<a href=""https://github-redirect.dependabot.com/actions/cache/pull/596"">actions/cache#596</a>)</li>
</ul>
<h2>v2.1.5</h2>
<ul>
<li>Fix permissions error seen when extracting caches with GNU tar that were previously created using BSD tar (<a href=""https://github-redirect.dependabot.com/actions/cache/issues/527"">actions/cache#527</a>)</li>
</ul>
<h2>v2.1.4</h2>
<ul>
<li>Make caching more verbose <a href=""https://github-redirect.dependabot.com/actions/toolkit/pull/650"">#650</a></li>
<li>Use GNU tar on macOS if available <a href=""https://github-redirect.dependabot.com/actions/toolkit/pull/701"">#701</a></li>
</ul>
<h2>v2.1.3</h2>
<ul>
<li>Upgrades <code>@actions/core</code> to v1.2.6 for <a href=""https://github.com/advisories/GHSA-mfwh-5m23-j46w"">CVE-2020-15228</a>. This action was not using the affected methods.</li>
<li>Fix error handling in <code>uploadChunk</code> where 400-level errors were not being detected and handled correctly</li>
</ul>
<h2>v2.1.2</h2>
<ul>
<li>Adds input to limit the chunk upload size, useful for self-hosted runners with slower upload speeds</li>
<li>No-op when executing on GHES</li>
</ul>
<h2>v2.1.1</h2>
<ul>
<li>Update <code>@actions/cache</code> package to <code>v1.0.2</code> which allows cache action to use posix format when taring files.</li>
</ul>
<h2>v2.1.0</h2>
<ul>
<li>Replaces the <code>http-client</code> with the Azure Storage SDK for NodeJS when downloading cache content from Azure.  This should help improve download performance and reliability as the SDK downloads files in 4 MB chunks, which can be parallelized and retried independently</li>
<li>Display download progress and speed</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/cache/commit/4b0cf6cc4619e737324ddfcec08fff2413359514""><code>4b0cf6c</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/cache/issues/769"">#769</a> from actions/users/ashwinsangem/bump_major_version</li>
<li><a href=""https://github.com/actions/cache/commit/60c606a2b4c5358e11c2ca7b4694e59049d008d1""><code>60c606a</code></a> Update licensed files</li>
<li><a href=""https://github.com/actions/cache/commit/b6e9a919a7da3606e9b2db756823ee1c39c7b48d""><code>b6e9a91</code></a> Revert &quot;Updated to the latest version.&quot;</li>
<li><a href=""https://github.com/actions/cache/commit/c8425035834f98c304ecf92f5d50f41d433885c1""><code>c842503</code></a> Updated to the latest version.</li>
<li><a href=""https://github.com/actions/cache/commit/2b7da2a62c3af9fa2692cd8d2d117da76faf31ac""><code>2b7da2a</code></a> Bumped up to a major version.</li>
<li><a href=""https://github.com/actions/cache/commit/deae296ab340574da1ec86242984dfc91f0a7b81""><code>deae296</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/cache/issues/651"">#651</a> from magnetikonline/fix-golang-windows-example</li>
<li><a href=""https://github.com/actions/cache/commit/c7c46bcb6db3c571021a3a2dc2d2557b512ecace""><code>c7c46bc</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/cache/issues/707"">#707</a> from duxtland/main</li>
<li><a href=""https://github.com/actions/cache/commit/6535c5fb5fe2870754afba7bd4e514867ac9cb98""><code>6535c5f</code></a> Regenerated <code>examples.md</code> TOC</li>
<li><a href=""https://github.com/actions/cache/commit/3fdafa472e0db16435add384585aa138ffdd16d3""><code>3fdafa4</code></a> Update GitHub Actions status badge markdown in <code>README.md</code></li>
<li><a href=""https://github.com/actions/cache/commit/341e6d75d9826beb2fa659263d862f6aec63a064""><code>341e6d7</code></a> Merge branch 'actions:main' into fix-golang-windows-example</li>
<li>Additional commits viewable in <a href=""https://github.com/actions/cache/compare/v2...v3"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/cache&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-03-28T06:05:22Z,2022-03-31T09:25:22Z,2022-03-31T09:25:21Z,2022-03-31T09:25:21Z,305533d585389f7240ae2383a323337d4761d33a,,,0,9a1d7f3e106f8fc218ef596c1a20ec96877050ff,728b648d5c7c3e22fe3704ba163012840408bf66,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6417,
905560732,PR_kwDOAMm_X841-cKc,6468,closed,0,Bump actions/upload-artifact from 2 to 3,49699333,"Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2 to 3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/upload-artifact/releases"">actions/upload-artifact's releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update default runtime to node16 (<a href=""https://github-redirect.dependabot.com/actions/upload-artifact/issues/293"">#293</a>)</li>
<li>Update package-lock.json file version to 2 (<a href=""https://github-redirect.dependabot.com/actions/upload-artifact/issues/302"">#302</a>)</li>
</ul>
<h3>Breaking Changes</h3>
<p>With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.</p>
<h2>v2.3.1</h2>
<p>Fix for empty fails on Windows failing on upload <a href=""https://github-redirect.dependabot.com/actions/upload-artifact/issues/281"">#281</a></p>
<h2>v2.3.0 Upload Artifact</h2>
<ul>
<li>Optimizations for faster uploads of larger files that are already compressed</li>
<li>Significantly improved logging when there are chunked uploads</li>
<li>Clarifications in logs around the upload size and prohibited characters that aren't allowed in the artifact name or any uploaded files</li>
<li>Various other small bugfixes &amp; optimizations</li>
</ul>
<h2>v2.2.4</h2>
<ul>
<li>Retry on HTTP 500 responses from the service</li>
</ul>
<h2>v2.2.3</h2>
<ul>
<li>Fixes for proxy related issues</li>
</ul>
<h2>v2.2.2</h2>
<ul>
<li>Improved retryability and error handling</li>
</ul>
<h2>v2.2.1</h2>
<ul>
<li>Update used actions/core package to the latest version</li>
</ul>
<h2>v2.2.0</h2>
<ul>
<li>Support for artifact retention</li>
</ul>
<h2>v2.1.4</h2>
<ul>
<li>Add Third Party License Information</li>
</ul>
<h2>v2.1.3</h2>
<ul>
<li>Use updated version of the <code>@action/artifact</code> NPM package</li>
</ul>
<h2>v2.1.2</h2>
<ul>
<li>Increase upload chunk size from 4MB to 8MB</li>
<li>Detect case insensitive file uploads</li>
</ul>
<h2>v2.1.1</h2>
<ul>
<li>Fix for certain symlinks not correctly being identified as directories before starting uploads</li>
</ul>
<h2>v2.1.0</h2>
<ul>
<li>Support for uploading artifacts with multiple paths</li>
<li>Support for using exclude paths</li>
<li>Updates to dependencies</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/upload-artifact/commit/6673cd052c4cd6fcf4b4e6e60ea986c889389535""><code>6673cd0</code></a> Update <code>lockfileVersion</code> in <code>package-lock.json</code> (<a href=""https://github-redirect.dependabot.com/actions/upload-artifact/issues/302"">#302</a>)</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/2244c8200304ec9588bf9399eac622d9fadc28c4""><code>2244c82</code></a> Update to node16 (<a href=""https://github-redirect.dependabot.com/actions/upload-artifact/issues/293"">#293</a>)</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/87348cee5fefa95e42e9b4804b4d68e130304158""><code>87348ce</code></a> Add 503 warning when uploading to the same artifact</li>
<li>See full diff in <a href=""https://github.com/actions/upload-artifact/compare/v2...v3"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-04-11T06:06:08Z,2022-04-11T14:42:24Z,2022-04-11T14:42:23Z,2022-04-11T14:42:23Z,2a6392b645029100de748fd2823f62e70d80f0c8,,,0,f6b705c79759eb90c7f15f940b0643bc5ccc23c1,79f9c7bcc2bbfdc492d24f690e85864e44f6115b,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6468,
905560752,PR_kwDOAMm_X841-cKw,6469,closed,0,Bump actions/download-artifact from 2 to 3,49699333,"Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 2 to 3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/download-artifact/releases"">actions/download-artifact's releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update default runtime to node16 (<a href=""https://github-redirect.dependabot.com/actions/download-artifact/pull/134"">actions/download-artifact#134</a>)</li>
<li>Update package-lock.json file version to 2 (<a href=""https://github-redirect.dependabot.com/actions/download-artifact/pull/136"">actions/download-artifact#136</a>)</li>
</ul>
<h3>Breaking Changes</h3>
<p>With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.</p>
<h2>v2.1.0 Download Artifact</h2>
<ul>
<li>Improved output &amp; logging</li>
<li>Fixed issue where downloading all artifacts could cause display percentages to be over 100%</li>
<li>Various small bug fixes &amp; improvements</li>
</ul>
<h2>v2.0.10</h2>
<ul>
<li>Retry on HTTP 500 responses from the service</li>
</ul>
<h2>v2.0.9</h2>
<ul>
<li>Fixes to proxy related issues</li>
</ul>
<h2>v2.0.8</h2>
<ul>
<li>Improvements to retryability if an error is encountered during artifact download</li>
</ul>
<h2>v2.0.7 download-artifact</h2>
<ul>
<li>Improved download retry-ability if a partial download is encountered</li>
</ul>
<h2>v2.0.6</h2>
<p>Update actions/core NPM package that is used internally</p>
<h2>v2.0.5</h2>
<ul>
<li>Add Third Party License Information</li>
</ul>
<h2>v2.0.4</h2>
<ul>
<li>Use the latest version of the <code>@actions/artifact</code> NPM package</li>
</ul>
<h2>v2.0.3</h2>
<ul>
<li>Misc improvements</li>
</ul>
<h2>v2.0.2</h2>
<ul>
<li>Support for tilde expansion</li>
</ul>
<h2>v2.0.1</h2>
<ul>
<li>Download path output</li>
<li>Improved logging</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/download-artifact/commit/fb598a63ae348fa914e94cd0ff38f362e927b741""><code>fb598a6</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/download-artifact/issues/136"">#136</a> from actions/jtamsut/update-lockfile-version</li>
<li><a href=""https://github.com/actions/download-artifact/commit/a4a09c5d7eb5932e0e6c4e77a434738189a24f1b""><code>a4a09c5</code></a> regenerate index.js</li>
<li><a href=""https://github.com/actions/download-artifact/commit/9acf51df7946118a04918663acc5d955f49de177""><code>9acf51d</code></a> regenerate package lock</li>
<li><a href=""https://github.com/actions/download-artifact/commit/882107232564f8bc8c5083706e009246f11aa871""><code>8821072</code></a> upgrade artifact version</li>
<li><a href=""https://github.com/actions/download-artifact/commit/b8bbd3b64f298f12cfabf7d85ee4e716714eae3b""><code>b8bbd3b</code></a> regenerate lockfile</li>
<li><a href=""https://github.com/actions/download-artifact/commit/6ee3d963e5a7ed7dac02925e126c37e459c36aa6""><code>6ee3d96</code></a> revert artifact version</li>
<li><a href=""https://github.com/actions/download-artifact/commit/d4793f4e27ec52069836c96d310f815ffa48176c""><code>d4793f4</code></a> update docs for v3</li>
<li><a href=""https://github.com/actions/download-artifact/commit/2d338d2145c33c497f1f4f574ca1eb88e1061a8e""><code>2d338d2</code></a> upgrade package to v3</li>
<li><a href=""https://github.com/actions/download-artifact/commit/360d0830b5796c983178d8073e39063e8d32bc46""><code>360d083</code></a> update dependency on artifact lib</li>
<li><a href=""https://github.com/actions/download-artifact/commit/d9b73cccacd09ac21cc34b82578e6cbb1b4e2539""><code>d9b73cc</code></a> update lock file</li>
<li>Additional commits viewable in <a href=""https://github.com/actions/download-artifact/compare/v2...v3"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/download-artifact&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-04-11T06:06:09Z,2022-04-11T14:41:52Z,2022-04-11T14:41:51Z,2022-04-11T14:41:51Z,18039533d85a42939494505d5cf2ae96d3258d79,,,0,c20deb01e33379bdbcf29e06e03c926f45312a3f,79f9c7bcc2bbfdc492d24f690e85864e44f6115b,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6469,
905560810,PR_kwDOAMm_X841-cLq,6470,closed,0,Bump codecov/codecov-action from 2.1.0 to 3.0.0,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2.1.0 to 3.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<h3>Breaking Changes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/689"">#689</a> Bump to node16 and small fixes</li>
</ul>
<h3>Features</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/688"">#688</a> Incorporate <code>gcov</code> arguments for the Codecov uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/548"">#548</a> build(deps-dev): bump jest-junit from 12.2.0 to 13.0.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/603"">#603</a> [Snyk] Upgrade <code>@​actions/core</code> from 1.5.0 to 1.6.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/628"">#628</a> build(deps): bump node-fetch from 2.6.1 to 3.1.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/634"">#634</a> build(deps): bump node-fetch from 3.1.1 to 3.2.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/636"">#636</a> build(deps): bump openpgp from 5.0.1 to 5.1.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/652"">#652</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.30.0 to 0.33.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/653"">#653</a> build(deps-dev): bump <code>@​types/node</code> from 16.11.21 to 17.0.18</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/659"">#659</a> build(deps-dev): bump <code>@​types/jest</code> from 27.4.0 to 27.4.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/667"">#667</a> build(deps): bump actions/checkout from 2 to 3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/673"">#673</a> build(deps): bump node-fetch from 3.2.0 to 3.2.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/683"">#683</a> build(deps): bump minimist from 1.2.5 to 1.2.6</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/685"">#685</a> build(deps): bump <code>@​actions/github</code> from 5.0.0 to 5.0.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/681"">#681</a> build(deps-dev): bump <code>@​types/node</code> from 17.0.18 to 17.0.23</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/682"">#682</a> build(deps-dev): bump typescript from 4.5.5 to 4.6.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/676"">#676</a> build(deps): bump <code>@​actions/exec</code> from 1.1.0 to 1.1.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/675"">#675</a> build(deps): bump openpgp from 5.1.0 to 5.2.1</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>3.0.0</h2>
<h3>Breaking Changes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/689"">#689</a> Bump to node16 and small fixes</li>
</ul>
<h3>Features</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/688"">#688</a> Incorporate <code>gcov</code> arguments for the Codecov uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/548"">#548</a> build(deps-dev): bump jest-junit from 12.2.0 to 13.0.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/603"">#603</a> [Snyk] Upgrade <code>@​actions/core</code> from 1.5.0 to 1.6.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/628"">#628</a> build(deps): bump node-fetch from 2.6.1 to 3.1.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/634"">#634</a> build(deps): bump node-fetch from 3.1.1 to 3.2.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/636"">#636</a> build(deps): bump openpgp from 5.0.1 to 5.1.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/652"">#652</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.30.0 to 0.33.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/653"">#653</a> build(deps-dev): bump <code>@​types/node</code> from 16.11.21 to 17.0.18</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/659"">#659</a> build(deps-dev): bump <code>@​types/jest</code> from 27.4.0 to 27.4.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/667"">#667</a> build(deps): bump actions/checkout from 2 to 3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/673"">#673</a> build(deps): bump node-fetch from 3.2.0 to 3.2.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/683"">#683</a> build(deps): bump minimist from 1.2.5 to 1.2.6</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/685"">#685</a> build(deps): bump <code>@​actions/github</code> from 5.0.0 to 5.0.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/681"">#681</a> build(deps-dev): bump <code>@​types/node</code> from 17.0.18 to 17.0.23</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/682"">#682</a> build(deps-dev): bump typescript from 4.5.5 to 4.6.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/676"">#676</a> build(deps): bump <code>@​actions/exec</code> from 1.1.0 to 1.1.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/675"">#675</a> build(deps): bump openpgp from 5.1.0 to 5.2.1</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/e3c560433a6cc60aec8812599b7844a7b4fa0d71""><code>e3c5604</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/689"">#689</a> from codecov/feat/gcov</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/174efc598490d1245b8d667c6e2631e30eb4b311""><code>174efc5</code></a> Update package-lock.json</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/6243a75ef39b2e25a9bfb867790f1a81ce1c722b""><code>6243a75</code></a> bump to 3.0.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/0d6466ff9c15e01d8fcfb5f5bd91922cf59d0320""><code>0d6466f</code></a> Bump to node16</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/d4729eeb392fd500c2392885a651ae1f45d5ea8a""><code>d4729ee</code></a> fetch.default</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/351baf62fa07c9dec46a75a8b52f76313e7ff25e""><code>351baf6</code></a> fix: bash</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/d8cf6802a833acb75bafac8995c5fbaafa9a5a14""><code>d8cf680</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/675"">#675</a> from codecov/dependabot/npm_and_yarn/openpgp-5.2.1</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/b775e9013c1e00b6331270c897245790ec90e907""><code>b775e90</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/676"">#676</a> from codecov/dependabot/npm_and_yarn/actions/exec-1.1.1</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/2ebc2f0f6fe9275f002dfa6144ed6861a17bf3d6""><code>2ebc2f0</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/682"">#682</a> from codecov/dependabot/npm_and_yarn/typescript-4.6.3</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/8e2ef2bfcc869b428be4066466997e36c6793e8a""><code>8e2ef2b</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/681"">#681</a> from codecov/dependabot/npm_and_yarn/types/node-17.0.23</li>
<li>Additional commits viewable in <a href=""https://github.com/codecov/codecov-action/compare/v2.1.0...v3.0.0"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=2.1.0&new-version=3.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-04-11T06:06:12Z,2022-04-11T14:42:15Z,2022-04-11T14:42:14Z,2022-04-11T14:42:14Z,36a5093bdae405b2550657913a1d1e0ffc92d3ca,,,0,971bc709fdf2d608cd9218d6d9dc582cf84e8121,79f9c7bcc2bbfdc492d24f690e85864e44f6115b,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6470,
917739357,PR_kwDOAMm_X842s5dd,6509,closed,0,Bump codecov/codecov-action from 3.0.0 to 3.1.0,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.0.0 to 3.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v3.1.0</h2>
<h2>3.1.0</h2>
<h3>Features</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/699"">#699</a> Incorporate <code>xcode</code> arguments for the Codecov uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/694"">#694</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.33.3 to 0.33.4</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/696"">#696</a> build(deps-dev): bump <code>@​types/node</code> from 17.0.23 to 17.0.25</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/698"">#698</a> build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>3.1.0</h2>
<h3>Features</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/699"">#699</a> Incorporate <code>xcode</code> arguments for the Codecov uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/694"">#694</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.33.3 to 0.33.4</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/696"">#696</a> build(deps-dev): bump <code>@​types/node</code> from 17.0.23 to 17.0.25</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/698"">#698</a> build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/81cd2dc8148241f03f5839d295e000b8f761e378""><code>81cd2dc</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/699"">#699</a> from codecov/feat-xcode</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/a03184e530bbc4843e9db4dd9ae563daa35f25d6""><code>a03184e</code></a> feat: add xcode support</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/6a6a9ae7b12211d92c625894063bb7994c6d674a""><code>6a6a9ae</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/694"">#694</a> from codecov/dependabot/npm_and_yarn/vercel/ncc-0.33.4</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/92a872a5e728d9d389f8edb836abe7428a7d3033""><code>92a872a</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/696"">#696</a> from codecov/dependabot/npm_and_yarn/types/node-17.0.25</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/43a9c182dd0940dd62fc624e66d669e9ab6c15d7""><code>43a9c18</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/698"">#698</a> from codecov/dependabot/npm_and_yarn/jest-junit-13.2.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/13ce822ccd6d5adcd9c336418bf7a4102a33419f""><code>13ce822</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/690"">#690</a> from codecov/ci-v3</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/4d6dbaaea68115935794d4491ce749e6308e526c""><code>4d6dbaa</code></a> build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/98f0f1930096ecddbe18b424e5cae74d3af90bc4""><code>98f0f19</code></a> build(deps-dev): bump <code>@​types/node</code> from 17.0.23 to 17.0.25</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/d3021d99107987a6310e03989b96d9d96fa037f9""><code>d3021d9</code></a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.33.3 to 0.33.4</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/2c83f35c201827cc1b2a250b2546ca9378d632f9""><code>2c83f35</code></a> Update makefile to v3</li>
<li>See full diff in <a href=""https://github.com/codecov/codecov-action/compare/v3.0.0...v3.1.0"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=3.0.0&new-version=3.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-04-25T06:05:21Z,2022-04-25T15:09:45Z,2022-04-25T15:09:45Z,2022-04-25T15:09:45Z,f2d0eb49b06f216117f048287e0796c1b6fd0a1d,,,0,a762780633ed8d5506481fc2dda4f013bc26a67f,33cdabd261b5725ac357c2823bd0f33684d3a954,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6509,
965304350,PR_kwDOAMm_X845iWAe,6692,closed,0,Bump actions/setup-python from 3 to 4,49699333,"Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/setup-python/releases"">actions/setup-python's releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h3>What's Changed</h3>
<ul>
<li>Support for <code>python-version-file</code> input: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/336"">#336</a></li>
</ul>
<p>Example of usage:</p>
<pre lang=""yaml""><code>- uses: actions/setup-python@v4
  with:
    python-version-file: '.python-version' # Read python version from a file
- run: python my_script.py
</code></pre>
<p>There is no default python version for this <code>setup-python</code> major version, the action requires to specify either <code>python-version</code> input or <code>python-version-file</code> input. If the <code>python-version</code> input is not specified the action will try to read required version from file from <code>python-version-file</code> input.</p>
<ul>
<li>Use pypyX.Y for PyPy <code>python-version</code> input: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/349"">#349</a></li>
</ul>
<p>Example of usage:</p>
<pre lang=""yaml""><code>- uses: actions/setup-python@v4
  with:
    python-version: 'pypy3.9' # pypy-X.Y kept for backward compatibility
- run: python my_script.py
</code></pre>
<ul>
<li>
<p><code>RUNNER_TOOL_CACHE</code> environment variable is equal <code>AGENT_TOOLSDIRECTORY</code>: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/338"">#338</a></p>
</li>
<li>
<p>Bugfix: create missing <code>pypyX.Y</code> symlinks: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/347"">#347</a></p>
</li>
<li>
<p><code>PKG_CONFIG_PATH</code> environment variable: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/400"">#400</a></p>
</li>
<li>
<p>Added <code>python-path</code> output: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/405"">#405</a>
<code>python-path</code> output contains Python executable path.</p>
</li>
<li>
<p>Updated <code>zeit/ncc</code> to <code>vercel/ncc</code> package: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/393"">#393</a></p>
</li>
<li>
<p>Bugfix: fixed output for prerelease version of poetry: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/409"">#409</a></p>
</li>
<li>
<p>Made <code>pythonLocation</code> environment variable consistent for Python and PyPy: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/418"">#418</a></p>
</li>
<li>
<p>Bugfix for <code>3.x-dev</code> syntax: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/417"">#417</a></p>
</li>
<li>
<p>Other improvements: <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/318"">#318</a> <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/396"">#396</a> <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/384"">#384</a> <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/387"">#387</a> <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/388"">#388</a></p>
</li>
</ul>
<h2>Update actions/cache version to 2.0.2</h2>
<p>In scope of this release we updated <code>actions/cache</code> package as the new version contains fixes related to GHES 3.5 (<a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/382"">actions/setup-python#382</a>)</p>
<h2>Add &quot;cache-hit&quot; output and fix &quot;python-version&quot; output for PyPy</h2>
<p>This release introduces new output cache-hit (<a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/373"">actions/setup-python#373</a>) and fix python-version output for PyPy (<a href=""https://github-redirect.dependabot.com/actions/setup-python/pull/365"">actions/setup-python#365</a>)</p>
<p>The cache-hit output contains boolean value indicating that an exact match was found for the key. It shows that the action uses already existing cache or not. The output is available only if cache is enabled.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/setup-python/commit/d09bd5e6005b175076f227b13d9730d56e9dcfcb""><code>d09bd5e</code></a> fix: 3.x-dev can install a 3.y version (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/417"">#417</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/f72db171abf897c3f4cea0427d5af95fa57fb1bc""><code>f72db17</code></a> Made env.var pythonLocation consistent for Python and PyPy (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/418"">#418</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/53e15292cd6a522cb460037b6f031eadbd6f6920""><code>53e1529</code></a> add support for python-version-file (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/336"">#336</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/3f82819745be54edd3bd8a83639605e58826bfe9""><code>3f82819</code></a> Fix output for prerelease version of poetry (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/409"">#409</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/397252c5825684a4ffed92b79e0d840c618c0a93""><code>397252c</code></a> Update zeit/ncc to vercel/ncc (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/393"">#393</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/de977ad1321ff211fd43f0f232a4d8851726d4bb""><code>de977ad</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/412"">#412</a> from vsafonkin/v-vsafonkin/fix-poetry-cache-test</li>
<li><a href=""https://github.com/actions/setup-python/commit/22c6af91ce03997c5925db1f6e9f0b9b2364adcc""><code>22c6af9</code></a> Change PyPy version to rebuild cache</li>
<li><a href=""https://github.com/actions/setup-python/commit/081a3cf1a51ab5fff2ae9d70f0cfacf0686293ea""><code>081a3cf</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/405"">#405</a> from mayeut/interpreter-path</li>
<li><a href=""https://github.com/actions/setup-python/commit/ff706563d754e642609a7008f4568a5386f3e94c""><code>ff70656</code></a> feature: add a <code>python-path</code> output</li>
<li><a href=""https://github.com/actions/setup-python/commit/fff15a21cc8b16191cb1249f621fa3a55b9005b8""><code>fff15a2</code></a> Use pypyX.Y for PyPy python-version input (<a href=""https://github-redirect.dependabot.com/actions/setup-python/issues/349"">#349</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/actions/setup-python/compare/v3...v4"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-python&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-06-13T06:08:01Z,2022-06-13T06:41:19Z,2022-06-13T06:41:18Z,2022-06-13T06:41:18Z,8e9a9fb390f8f0d27a017a7affd8d308d2317959,,,0,ca3286ddf75d5c08fb0eb140fea1d476aa980532,3a320724100ab05531d8d18ca8cb279a8e4f5c7f,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6692,
979615300,PR_kwDOAMm_X846Y75E,6729,closed,0,Bump mamba-org/provision-with-micromamba from de032af7fb3675649f3d4bbdda85178ba412ee41 to 12,49699333,"Bumps [mamba-org/provision-with-micromamba](https://github.com/mamba-org/provision-with-micromamba) from de032af7fb3675649f3d4bbdda85178ba412ee41 to 12. This release includes the previously tagged commit.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/mamba-org/provision-with-micromamba/releases"">mamba-org/provision-with-micromamba's releases</a>.</em></p>
<blockquote>
<h2>v12</h2>
<ul>
<li>Add new options <code>channels</code>, <code>condarc-file</code>, <code>channel-priority</code>, <code>log-level</code>, <code>installer-url</code>, <code>condarc-options</code></li>
<li>Add <a href=""https://github.com/mamba-org/provision-with-micromamba#cache-downloads"">download caching</a> and <a href=""https://github.com/mamba-org/provision-with-micromamba#cache-env"">environment caching</a></li>
<li>Support <code>sel(...)</code> selectors in <code>extra-specs</code></li>
<li>Add support for using inside Docker containers</li>
<li>Allow <code>extra-specs</code> only with no <code>environment-file</code></li>
<li>Fix Bash + Windows</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/34071ca7df4983ccd272ed0d3625818b27b70dcc""><code>34071ca</code></a> Add autoactivate sanity check (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/69"">#69</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/37cc0959d16bdc4aab0e6c97cf92fcfcbc829a70""><code>37cc095</code></a> More options (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/63"">#63</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/d77ce728d731c821d9b20e8bcee5da94786a131d""><code>d77ce72</code></a> Add log-level option (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/67"">#67</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/4aceecbda5b0a035fe6595a1c743fdf85695592d""><code>4aceecb</code></a> Do not ignore PowerShell exit codes (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/66"">#66</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/70349b4364703bbe23d081f860de05f6510afe08""><code>70349b4</code></a> Delete index.js (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/64"">#64</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/4ec73b793d3891348962fc4b98a5e1289fb078d2""><code>4ec73b7</code></a> Fix <a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/60"">#60</a>: <code>channels</code> both in action arguments and environment file (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/62"">#62</a>)</li>
<li>See full diff in <a href=""https://github.com/mamba-org/provision-with-micromamba/compare/de032af7fb3675649f3d4bbdda85178ba412ee41...34071ca7df4983ccd272ed0d3625818b27b70dcc"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-06-27T06:05:47Z,2022-06-27T07:55:26Z,2022-06-27T07:55:25Z,2022-06-27T07:55:25Z,787a96c15161c9025182291b672b3d3c5548a6c7,,,0,820e74a5f9a4aad7aebd09f6d885f820af8306b3,5fcb6f508f5ea2382279d9b369000511997304b9,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6729,
992698539,PR_kwDOAMm_X847K2Cr,6770,closed,0,Bump EnricoMi/publish-unit-test-result-action from 1 to 2,49699333,"Bumps [EnricoMi/publish-unit-test-result-action](https://github.com/EnricoMi/publish-unit-test-result-action) from 1 to 2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/EnricoMi/publish-unit-test-result-action/releases"">EnricoMi/publish-unit-test-result-action's releases</a>.</em></p>
<blockquote>
<h2>v2.0.0-beta.2</h2>
<p>Adds the following features:</p>
<ul>
<li>Support large CDATA in JUnit XML files with ignore_runs</li>
<li>Improved logging of parse errors and tracebacks (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/322"">#322</a>, <a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/324"">#324</a>)</li>
<li>Fix state leakage with ignore_runs (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/323"">#323</a>)</li>
</ul>
<h2>v2.0.0-beta</h2>
<p>Adds the following features:</p>
<ul>
<li>Minor improvements on warnings and logging.</li>
</ul>
<h2>v2.0.0-alpha</h2>
<p>Adds the following features:</p>
<ul>
<li>Add support for TRX files (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/287"">#287</a>)</li>
<li>Add support for NUnit and XUnit XML files (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/288"">#288</a> and <a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/289"">#289</a>)</li>
<li>Move to lxml parsing library (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/286"">#286</a>)</li>
<li>Upgrade junitparser to 2.7.0</li>
</ul>
<p>This release contains the following <strong>breaking changes</strong>:</p>
<ul>
<li>Default value for option <code>check_name</code> changed from <code>&quot;Unit Test Results&quot;</code> to <code>&quot;Test Results&quot;</code>.
If <code>check_name</code> is set in your config, this change is not of your concern.
Add <code>check_name: &quot;Unit Test Results&quot;</code> to your config, if you want to keep the old name.
Otherwise expect comments and checks with old and new name for open pull requests when moving to version 2.</li>
<li>Default value for option <code>comment_title</code> changed from <code>&quot;Unit Test Results&quot;</code> to <code>&quot;Test Results&quot;</code>.
If either <code>check_name</code> or <code>comment_title</code> is set in your config, this change is not of your concern.</li>
<li>Modes <code>create new</code> and <code>update last</code> removed for option <code>comment_mode</code>.
Remove option <code>comment_mode</code> if used with either of these modes.</li>
<li>Option <code>hiding_comments</code> removed. Please remove this option from your config.</li>
<li>Option <code>comment_on_pr</code> removed. Please remove this option from your config.</li>
</ul>
<p>This release deprecates the following features:</p>
<ul>
<li>Option <code>files</code> is deprecated, use <code>junit_files</code> instead (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/285"">#285</a>)</li>
</ul>
<p>See <a href=""https://github.com/EnricoMi/publish-unit-test-result-action/tree/v2.0.0-alpha#what-is-new-in-version-2"">README.md</a> for further details on moving to version 2.</p>
<h2>v1.39</h2>
<p>Adds the following features:</p>
<ul>
<li>Add check-run HTML URL to JSON output (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/310"">#310</a>)</li>
<li>Add thousands separator to progress log</li>
</ul>
<h2>v1.38</h2>
<p>Adds the following features:</p>
<ul>
<li>Allow to only comment on changes, failures, errors, ... (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/248"">#248</a>)</li>
<li>Add new <code>comment_mode</code>s and deprecate <code>create new</code> and <code>update last</code></li>
<li>Log file sizes, free memory, and progress reading files (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/305"">#305</a>)</li>
</ul>
<h2>v1.37</h2>
<p>Adds the following features:</p>
<ul>
<li>Re-arrange layout of PR comments without runs (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/280"">#280</a>)</li>
<li>Add formatted numbers to JSON (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/298"">#298</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/00dc83be2fe226471b499944d6f220a178421ab7""><code>00dc83b</code></a> Releasing v2.0.0-beta.2</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/db33277293987efe3e436d48a673fec6baae7b49""><code>db33277</code></a> Log traceback and related exceptions (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/324"">#324</a>)</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/a0006c87a69838b745d5c2dee4aa71fef1252807""><code>a0006c8</code></a> Remove static state from DropTestCaseBuilder (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/323"">#323</a>)</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/dd6c641112066531480f4fd11a994786f2130b70""><code>dd6c641</code></a> Log the actual exception that caused a ParseError (<a href=""https://github-redirect.dependabot.com/EnricoMi/publish-unit-test-result-action/issues/322"">#322</a>)</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/58debd11316d7f8aa9074ffeac10963a9407ade1""><code>58debd1</code></a> Remove max-parallel from CI</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/9dc979d0f847ff1d88a7be54c874f9244a8950c1""><code>9dc979d</code></a> Support large CDATA in JUnit XML files with ignore_runs</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/7a453e7e81ac3190db44d6a0cf3ab2811b12cf11""><code>7a453e7</code></a> Releasing v2.0.0-beta</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/693d93809b1ee8725658166fe8d7163cc57e41e0""><code>693d938</code></a> Set log level correctly, so invalid values are reported</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/7167dcfd99a6ed65ab6a043ca912f2718c4b4ce8""><code>7167dcf</code></a> Merge branch 'master' into master-2.x</li>
<li><a href=""https://github.com/EnricoMi/publish-unit-test-result-action/commit/62b169599e1a75b37e8e25fa56d22abe39a5d503""><code>62b1695</code></a> Add files back to action.yml, mark as deprected</li>
<li>Additional commits viewable in <a href=""https://github.com/EnricoMi/publish-unit-test-result-action/compare/v1...v2"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=EnricoMi/publish-unit-test-result-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-07-11T06:05:29Z,2022-07-11T06:38:55Z,2022-07-11T06:38:55Z,2022-07-11T06:38:54Z,6771b667baf7a55f01fc1a2a9b7ceb10720dc1db,,,0,82a17ea1af88e5dba8f12bae4ff7c2994e7419da,ae2c3a74f1c2ca7dc41bbf34862b239b7e3c5651,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6770,
1013382086,PR_kwDOAMm_X848ZvvG,6855,closed,0,Bump pypa/gh-action-pypi-publish from 1.5.0 to 1.5.1,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.5.0 to 1.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.5.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Fixed printing out the dist hashes when <code>packages_dir</code> is a wildcard value. — by <a href=""https://github.com/meowmeowmeowcat""><code>@​meowmeowmeowcat</code></a> in <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/pull/91"">pypa/gh-action-pypi-publish#91</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.0...v1.5.1"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.0...v1.5.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/37f50c210e3d2f9450da2cd423303d6a14a6e29f""><code>37f50c2</code></a> Merge PR <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/91"">#91</a></li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/9f0421c6c63e6834c88c90d39708f1e317f4dc82""><code>9f0421c</code></a> Add #StandWithUkraine banner to README</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c3fbd68c153b595e98c34c15ebfd0db1e144863d""><code>c3fbd68</code></a> Remove quotes</li>
<li>See full diff in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.0...v1.5.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.5.0&new-version=1.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-08-01T06:06:02Z,2022-08-01T06:35:33Z,2022-08-01T06:35:32Z,2022-08-01T06:35:32Z,db634ea44f567dce678b8879cc66652fc7f7e70d,,,0,18055ef03ad1a9b01ff1f16e0f20ef5d6bda309c,e07da06da34dba7f5529edfa6cc1b31cd1695779,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6855,
1046475934,PR_kwDOAMm_X84-X_Se,6991,closed,0,Bump mamba-org/provision-with-micromamba from 12 to 13,49699333,"Bumps [mamba-org/provision-with-micromamba](https://github.com/mamba-org/provision-with-micromamba) from 12 to 13.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/mamba-org/provision-with-micromamba/releases"">mamba-org/provision-with-micromamba's releases</a>.</em></p>
<blockquote>
<h2>v13</h2>
<ul>
<li>Fix <code>channels</code> and <code>channel-priority</code> settings</li>
<li>Support linux-aarch64 and osx-arm64 runners</li>
<li>Support <code>sel(unix)</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/a319a818023c3a5a448a60bd72e0c633408fbccc""><code>a319a81</code></a> Readme updates (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/88"">#88</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/28fa1058b29e6ecf42f276aab152f929dafefb7d""><code>28fa105</code></a> add unix for condaArch linux or osx (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/85"">#85</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/bc8e4cc2f1ff923a42ae27a637c08d4623ebb31b""><code>bc8e4cc</code></a> Fix channel priority (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/84"">#84</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/52dc9e6f05a3e489dd053f4e236f731c92452990""><code>52dc9e6</code></a> Delete dist/post.js directory (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/83"">#83</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/87a13a65db0322a1cd04f8ef7bae69aec1a1f0be""><code>87a13a6</code></a> use &quot;channels&quot; and not extraChannels (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/82"">#82</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/e1989692eaa9957cd589cc8b52e3349402a8e277""><code>e198969</code></a> Fix await (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/78"">#78</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/d90963f7287675ddeaf031a66759263f8e3b7e73""><code>d90963f</code></a> Refactoring (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/73"">#73</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/431e55afebbb57257eb685eee1352a4a34000b1b""><code>431e55a</code></a> Add timeouts to GHA workflows (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/74"">#74</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/21e0d20ea1682d8d7ad0f7085ce4c1eb981a4461""><code>21e0d20</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/71"">#71</a> from mamba-org/aarch64</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/23fc0a3d23bce1e5b6e554e915161f48c55e6048""><code>23fc0a3</code></a> Fix mac</li>
<li>Additional commits viewable in <a href=""https://github.com/mamba-org/provision-with-micromamba/compare/34071ca7df4983ccd272ed0d3625818b27b70dcc...a319a818023c3a5a448a60bd72e0c633408fbccc"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mamba-org/provision-with-micromamba&package-manager=github_actions&previous-version=12&new-version=13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by @andersy005.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-09-05T14:08:41Z,2022-10-31T06:05:21Z,2022-10-31T06:05:19Z,,589f65195acde14cb7194809e047436a79863efa,,,0,9e019ef6e843d3d7287743c80b8da804f7db36dc,bda0a2faac5b870b39251da6ab4a0113377e32f7,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/6991,
1066637371,PR_kwDOAMm_X84_k5g7,7081,closed,0,Bump codecov/codecov-action from 3.1.0 to 3.1.1,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.0 to 3.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>3.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update deprecation warning by <a href=""https://github.com/slifty""><code>@​slifty</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/661"">codecov/codecov-action#661</a></li>
<li>Create codeql-analysis.yml by <a href=""https://github.com/mitchell-codecov""><code>@​mitchell-codecov</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/593"">codecov/codecov-action#593</a></li>
<li>build(deps): bump node-fetch from 3.2.3 to 3.2.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/714"">codecov/codecov-action#714</a></li>
<li>build(deps-dev): bump typescript from 4.6.3 to 4.6.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/713"">codecov/codecov-action#713</a></li>
<li>README: fix typo by <a href=""https://github.com/Evalir""><code>@​Evalir</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/712"">codecov/codecov-action#712</a></li>
<li>build(deps): bump github/codeql-action from 1 to 2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/724"">codecov/codecov-action#724</a></li>
<li>build(deps-dev): bump <code>@​types/jest</code> from 27.4.1 to 27.5.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/717"">codecov/codecov-action#717</a></li>
<li>fix: Remove a blank row by <a href=""https://github.com/johnmanjiro13""><code>@​johnmanjiro13</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/725"">codecov/codecov-action#725</a></li>
<li>Update README.md with correct badge version by <a href=""https://github.com/gsheni""><code>@​gsheni</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/726"">codecov/codecov-action#726</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 17.0.25 to 17.0.33 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/729"">codecov/codecov-action#729</a></li>
<li>build(deps-dev): downgrade <code>@​types/node</code> to 16.11.35 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/734"">codecov/codecov-action#734</a></li>
<li>build(deps): bump actions/checkout from 2 to 3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/723"">codecov/codecov-action#723</a></li>
<li>build(deps): bump <code>@​actions/github</code> from 5.0.1 to 5.0.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/733"">codecov/codecov-action#733</a></li>
<li>build(deps): bump <code>@​actions/core</code> from 1.6.0 to 1.8.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/732"">codecov/codecov-action#732</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 16.11.35 to 16.11.36 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/737"">codecov/codecov-action#737</a></li>
<li>Create scorecards-analysis.yml by <a href=""https://github.com/mitchell-codecov""><code>@​mitchell-codecov</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/633"">codecov/codecov-action#633</a></li>
<li>build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/749"">codecov/codecov-action#749</a></li>
<li>fix: add more verbosity to validation by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/747"">codecov/codecov-action#747</a></li>
<li>build(deps-dev): bump typescript from 4.6.4 to 4.7.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/755"">codecov/codecov-action#755</a></li>
<li>Regenerate scorecards-analysis.yml by <a href=""https://github.com/mitchell-codecov""><code>@​mitchell-codecov</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/750"">codecov/codecov-action#750</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 16.11.36 to 16.11.39 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/759"">codecov/codecov-action#759</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 16.11.39 to 16.11.40 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/762"">codecov/codecov-action#762</a></li>
<li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.33.4 to 0.34.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/746"">codecov/codecov-action#746</a></li>
<li>build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/757"">codecov/codecov-action#757</a></li>
<li>build(deps): bump openpgp from 5.2.1 to 5.3.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/760"">codecov/codecov-action#760</a></li>
<li>build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/748"">codecov/codecov-action#748</a></li>
<li>build(deps-dev): bump typescript from 4.7.3 to 4.7.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/766"">codecov/codecov-action#766</a></li>
<li>Switch to v3 by <a href=""https://github.com/thomasrockhu""><code>@​thomasrockhu</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/774"">codecov/codecov-action#774</a></li>
<li>Fix <code>network</code> entry in table by <a href=""https://github.com/kevmoo""><code>@​kevmoo</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/783"">codecov/codecov-action#783</a></li>
<li>Trim arguments after splitting them by <a href=""https://github.com/mitchell-codecov""><code>@​mitchell-codecov</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/791"">codecov/codecov-action#791</a></li>
<li>build(deps): bump openpgp from 5.3.0 to 5.4.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/799"">codecov/codecov-action#799</a></li>
<li>build(deps): bump <code>@​actions/core</code> from 1.8.2 to 1.9.1 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/798"">codecov/codecov-action#798</a></li>
<li>Plumb failCi into verification function. by <a href=""https://github.com/RobbieMcKinstry""><code>@​RobbieMcKinstry</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/769"">codecov/codecov-action#769</a></li>
<li>release: update changelog and version to 3.1.1 by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/828"">codecov/codecov-action#828</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/slifty""><code>@​slifty</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/661"">codecov/codecov-action#661</a></li>
<li><a href=""https://github.com/Evalir""><code>@​Evalir</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/712"">codecov/codecov-action#712</a></li>
<li><a href=""https://github.com/johnmanjiro13""><code>@​johnmanjiro13</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/725"">codecov/codecov-action#725</a></li>
<li><a href=""https://github.com/gsheni""><code>@​gsheni</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/726"">codecov/codecov-action#726</a></li>
<li><a href=""https://github.com/kevmoo""><code>@​kevmoo</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/783"">codecov/codecov-action#783</a></li>
<li><a href=""https://github.com/RobbieMcKinstry""><code>@​RobbieMcKinstry</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/codecov/codecov-action/pull/769"">codecov/codecov-action#769</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v3.1.0...v3.1.1"">https://github.com/codecov/codecov-action/compare/v3.1.0...v3.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>3.1.1</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/661"">#661</a> Update deprecation warning</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/593"">#593</a> Create codeql-analysis.yml</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/712"">#712</a> README: fix typo</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/725"">#725</a> fix: Remove a blank row</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/726"">#726</a> Update README.md with correct badge version</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/633"">#633</a> Create scorecards-analysis.yml</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/747"">#747</a> fix: add more verbosity to validation</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/750"">#750</a> Regenerate scorecards-analysis.yml</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/774"">#774</a> Switch to v3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/783"">#783</a> Fix network entry in table</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/791"">#791</a> Trim arguments after splitting them</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/769"">#769</a> Plumb failCi into verification function.</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/713"">#713</a> build(deps-dev): bump typescript from 4.6.3 to 4.6.4</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/714"">#714</a> build(deps): bump node-fetch from 3.2.3 to 3.2.4</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/724"">#724</a> build(deps): bump github/codeql-action from 1 to 2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/717"">#717</a> build(deps-dev): bump <code>@​types/jest</code> from 27.4.1 to 27.5.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/729"">#729</a> build(deps-dev): bump <code>@​types/node</code> from 17.0.25 to 17.0.33</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/734"">#734</a> build(deps-dev): downgrade <code>@​types/node</code> to 16.11.35</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/723"">#723</a> build(deps): bump actions/checkout from 2 to 3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/733"">#733</a> build(deps): bump <code>@​actions/github</code> from 5.0.1 to 5.0.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/732"">#732</a> build(deps): bump <code>@​actions/core</code> from 1.6.0 to 1.8.2</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/737"">#737</a> build(deps-dev): bump <code>@​types/node</code> from 16.11.35 to 16.11.36</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/749"">#749</a> build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/755"">#755</a> build(deps-dev): bump typescript from 4.6.4 to 4.7.3</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/759"">#759</a> build(deps-dev): bump <code>@​types/node</code> from 16.11.36 to 16.11.39</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/762"">#762</a> build(deps-dev): bump <code>@​types/node</code> from 16.11.39 to 16.11.40</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/746"">#746</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.33.4 to 0.34.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/757"">#757</a> build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/760"">#760</a> build(deps): bump openpgp from 5.2.1 to 5.3.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/748"">#748</a> build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/766"">#766</a> build(deps-dev): bump typescript from 4.7.3 to 4.7.4</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/799"">#799</a> build(deps): bump openpgp from 5.3.0 to 5.4.0</li>
<li><a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/798"">#798</a> build(deps): bump <code>@​actions/core</code> from 1.8.2 to 1.9.1</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70""><code>d9f34f8</code></a> release: update changelog and version to 3.1.1 (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/828"">#828</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/0e9e7b4e8a4cbde89b1d36ffe91a812536089d02""><code>0e9e7b4</code></a> Plumb failCi into verification function. (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/769"">#769</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/7f20bd4c4151750a1d013be0901b7e35a46c2aad""><code>7f20bd4</code></a> build(deps): bump <code>@​actions/core</code> from 1.8.2 to 1.9.1 (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/798"">#798</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/13bc2536ab285b021e72dfb3cd53e56f5c1f4e26""><code>13bc253</code></a> build(deps): bump openpgp from 5.3.0 to 5.4.0 (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/799"">#799</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/5c0da1b28f1c589bf17db0088d610ae638f4ccb7""><code>5c0da1b</code></a> Trim arguments after splitting them (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/791"">#791</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/68d5f6d0be32fb7f92b47e97218cf01690e6e3b5""><code>68d5f6d</code></a> Fix <code>network</code> entry in table (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/783"">#783</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/2a829b95deaeea2d11d127cc0358005714ff35ea""><code>2a829b9</code></a> Switch to v3 (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/774"">#774</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/8e09eaf1b47fbb5da0e32a27bf08cd11929a1b4a""><code>8e09eaf</code></a> build(deps-dev): bump typescript from 4.7.3 to 4.7.4 (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/766"">#766</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/39e222921fd6f8ff1aae5c56948ff1599a2b57d1""><code>39e2229</code></a> build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/748"">#748</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/b2b77034732e1f073c09521d4f31f4db18b099e2""><code>b2b7703</code></a> build(deps): bump openpgp from 5.2.1 to 5.3.0 (<a href=""https://github-redirect.dependabot.com/codecov/codecov-action/issues/760"">#760</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/codecov/codecov-action/compare/v3.1.0...v3.1.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=3.1.0&new-version=3.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-09-26T06:04:53Z,2022-09-26T18:54:02Z,2022-09-26T18:54:01Z,2022-09-26T18:54:01Z,3977bc2ab702085f383933f92c771a1e0d533872,,,0,9b88dcf7a3991ebb55e38d77a7780b0684211032,212a5d7909e8dd54446b08574a0683e2477f2b40,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7081,
1104877077,PR_kwDOAMm_X85B2xYV,7240,closed,0,Bump xarray-contrib/issue-from-pytest-log from 0.1 to 1.1,49699333,"Bumps [xarray-contrib/issue-from-pytest-log](https://github.com/xarray-contrib/issue-from-pytest-log) from 0.1 to 1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/xarray-contrib/issue-from-pytest-log/releases"">xarray-contrib/issue-from-pytest-log's releases</a>.</em></p>
<blockquote>
<h2>v1.0</h2>
<p>Initial release.</p>
<p>This is the same release as <code>v0.1</code>, but using the version <code>v1.0</code> allows creating a moving tag named <code>v1</code>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/xarray-contrib/issue-from-pytest-log/commit/89ca5895ebd99c09f8222234a0976e7ff8b823a7""><code>89ca589</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/xarray-contrib/issue-from-pytest-log/issues/1"">#1</a> from jrbourbeau/add-more-options</li>
<li><a href=""https://github.com/xarray-contrib/issue-from-pytest-log/commit/9460ec99ac27369344fd7199710054b3cbdd3f13""><code>9460ec9</code></a> Stringify</li>
<li><a href=""https://github.com/xarray-contrib/issue-from-pytest-log/commit/63bd7a46438f5c3e8dcec2855310ca6d62552aa4""><code>63bd7a4</code></a> Make issue title and label configurable</li>
<li>See full diff in <a href=""https://github.com/xarray-contrib/issue-from-pytest-log/compare/v0.1...v1.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=xarray-contrib/issue-from-pytest-log&package-manager=github_actions&previous-version=0.1&new-version=1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-10-31T06:05:10Z,2022-10-31T09:58:28Z,2022-10-31T09:58:27Z,2022-10-31T09:58:27Z,8df5d220f7f441575cdb5943a21dba38a61815cb,,,0,0805dc32b42dcf19f49e97a7400fcc09a4a66689,2608c407d73551e0d6055d4b81060e321e905d95,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7240,
1104877137,PR_kwDOAMm_X85B2xZR,7241,closed,0,Bump mamba-org/provision-with-micromamba from 12 to 14,49699333,"Bumps [mamba-org/provision-with-micromamba](https://github.com/mamba-org/provision-with-micromamba) from 12 to 14.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/mamba-org/provision-with-micromamba/releases"">mamba-org/provision-with-micromamba's releases</a>.</em></p>
<blockquote>
<h2>v14</h2>
<h2>What's Changed</h2>
<ul>
<li>Add micromamba deinit in <code>post.js</code> by <a href=""https://github.com/pavelzw""><code>@​pavelzw</code></a> in <a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/pull/89"">mamba-org/provision-with-micromamba#89</a></li>
<li>Fix duplicate options by <a href=""https://github.com/jonashaag""><code>@​jonashaag</code></a> in <a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/pull/98"">mamba-org/provision-with-micromamba#98</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/pavelzw""><code>@​pavelzw</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/pull/89"">mamba-org/provision-with-micromamba#89</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/mamba-org/provision-with-micromamba/compare/v13...v14"">https://github.com/mamba-org/provision-with-micromamba/compare/v13...v14</a></p>
<h2>v13</h2>
<ul>
<li>Fix <code>channels</code> and <code>channel-priority</code> settings</li>
<li>Support linux-aarch64 and osx-arm64 runners</li>
<li>Support <code>sel(unix)</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/f347426e5745fe3dfc13ec5baf20496990d0281f""><code>f347426</code></a> Remove unnecessary options (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/98"">#98</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/e542c7a77b43dbb6919f9cc997a9881abcfe3ddb""><code>e542c7a</code></a> Update deps (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/93"">#93</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/8aa0e580d32a0e2ad13a86bf107f7e871c741f8b""><code>8aa0e58</code></a> Update actions/checkout (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/91"">#91</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/b54d7bb204a75ee10d2f069bfb55a1c0389e46a2""><code>b54d7bb</code></a> Add micromamba deinit in <code>post.js</code> (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/89"">#89</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/a319a818023c3a5a448a60bd72e0c633408fbccc""><code>a319a81</code></a> Readme updates (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/88"">#88</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/28fa1058b29e6ecf42f276aab152f929dafefb7d""><code>28fa105</code></a> add unix for condaArch linux or osx (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/85"">#85</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/bc8e4cc2f1ff923a42ae27a637c08d4623ebb31b""><code>bc8e4cc</code></a> Fix channel priority (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/84"">#84</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/52dc9e6f05a3e489dd053f4e236f731c92452990""><code>52dc9e6</code></a> Delete dist/post.js directory (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/83"">#83</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/87a13a65db0322a1cd04f8ef7bae69aec1a1f0be""><code>87a13a6</code></a> use &quot;channels&quot; and not extraChannels (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/82"">#82</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/e1989692eaa9957cd589cc8b52e3349402a8e277""><code>e198969</code></a> Fix await (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/78"">#78</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/mamba-org/provision-with-micromamba/compare/v12...v14"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mamba-org/provision-with-micromamba&package-manager=github_actions&previous-version=12&new-version=14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-10-31T06:05:14Z,2022-10-31T20:29:05Z,2022-10-31T15:46:14Z,2022-10-31T15:46:14Z,12ca0dc6f9a22d94c1732c87dddf4ec5bf9813ff,,,0,0737a6409013b5a60d94ea081b70909c254ffa1c,93d1eabca4392eeab6a7cbe34e583a7195520dc8,CONTRIBUTOR,"{""enabled_by"": {""login"": ""keewis"", ""id"": 14808389, ""node_id"": ""MDQ6VXNlcjE0ODA4Mzg5"", ""avatar_url"": ""https://avatars.githubusercontent.com/u/14808389?v=4"", ""gravatar_id"": """", ""url"": ""https://api.github.com/users/keewis"", ""html_url"": ""https://github.com/keewis"", ""followers_url"": ""https://api.github.com/users/keewis/followers"", ""following_url"": ""https://api.github.com/users/keewis/following{/other_user}"", ""gists_url"": ""https://api.github.com/users/keewis/gists{/gist_id}"", ""starred_url"": ""https://api.github.com/users/keewis/starred{/owner}{/repo}"", ""subscriptions_url"": ""https://api.github.com/users/keewis/subscriptions"", ""organizations_url"": ""https://api.github.com/users/keewis/orgs"", ""repos_url"": ""https://api.github.com/users/keewis/repos"", ""events_url"": ""https://api.github.com/users/keewis/events{/privacy}"", ""received_events_url"": ""https://api.github.com/users/keewis/received_events"", ""type"": ""User"", ""site_admin"": false}, ""merge_method"": ""squash"", ""commit_title"": ""Bump mamba-org/provision-with-micromamba from 12 to 14 (#7241)"", ""commit_message"": ""* Bump mamba-org/provision-with-micromamba from 12 to 14\r\n\r\nBumps [mamba-org/provision-with-micromamba](https://github.com/mamba-org/provision-with-micromamba) from 12 to 14.\r\n- [Release notes](https://github.com/mamba-org/provision-with-micromamba/releases)\r\n- [Commits](https://github.com/mamba-org/provision-with-micromamba/compare/v12...v14)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: mamba-org/provision-with-micromamba\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\n\r\n* try installing `conda` explicitly\r\n\r\n* explicitly install `conda` everywhere else as well\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\r\nCo-authored-by: Justus Magin <keewis@posteo.de>""}",13221727,https://github.com/pydata/xarray/pull/7241,
1145866926,PR_kwDOAMm_X85ETIqu,7357,closed,0,Bump pypa/gh-action-pypi-publish from 1.5.1 to 1.6.1,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.5.1 to 1.6.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.6.1</h2>
<h2>What's happened?!</h2>
<p>There was a sneaky bug in v1.6.0 which caused Twine to be outside the import path in the Python runtime. It is fixed in v1.6.1 by updating <code>$PYTHONPATH</code> to point to a correct location of the user-global <code>site-packages/</code> directory.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1</a></p>
<h2>v1.6.0</h2>
<h2>Anything's changed?</h2>
<p>The only update is that the Python runtime has been upgraded from 3.9 to 3.11. There are no functional changes in this release.</p>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0</a></p>
<h2>v1.5.2</h2>
<h2>What's Improved</h2>
<ul>
<li>Implemented the Twine transitive dependency tree pinning using pip-tools-generated constraint files. See <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/107"">pypa/gh-action-pypi-publish#107</a> and <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/101"">pypa/gh-action-pypi-publish#101</a> for details.</li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/5d1679fa6b895587c6eb10c3fe82205b440a580e""><code>5d1679f</code></a> Use py3.11 user-global site-packages in PYTHONPATH</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/d2a2496a01f8b4b773ccd9cae8f2151589de5b62""><code>d2a2496</code></a> Switch the runtime from Python 3.9 to Python 3.11</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/d7edd4c95736a5bc1260d38b5523f5d24338bc25""><code>d7edd4c</code></a> Add user-global site-packages to <code>$PYTHONPATH</code></li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/8d5f27cca4a50790668fae0c4211d3f380213dad""><code>8d5f27c</code></a> Install Twine in the user-global site-packages</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/b0dc178d8e9955153bdd91f7aeaca24951330289""><code>b0dc178</code></a> Disable pip cache dir with an env var</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/bbf6e0b2f09b6ddd8a439374509c868678be1630""><code>bbf6e0b</code></a> Copy requirements to corresponding dir @ container</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/0b69a8c2dfa166206a4007a228ec3306ac63d1d0""><code>0b69a8c</code></a> Document broken <code>pkginfo==1.9.0</code> transitive dep</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c54db9c2b7aa2a20b80134f0f154359c73bbdf0b""><code>c54db9c</code></a> Integrate pip-tools-generated constraint files</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/480ec4ed586e715b06c3d3a5fcdfa4834246d7e2""><code>480ec4e</code></a> Inherit <code>yamllint</code> config from the default preset</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/5fb2f047e26679d7846a8370de1642ff160b9025""><code>5fb2f04</code></a> Drop <code>__token__</code> from README code usage snippets</li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.6.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.5.1&new-version=1.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-12-05T06:01:28Z,2022-12-12T06:01:14Z,2022-12-12T06:01:12Z,,63350597755779fee3f86b90afd53fc447c9dbad,,,0,42ca2a303472468e82bef0721cce3b03970f83e4,ed60c6ccd3d6725cd91190b8796af4355f3085c2,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7357,
1160091126,PR_kwDOAMm_X85FJZX2,7375,closed,0,Bump pypa/gh-action-pypi-publish from 1.5.1 to 1.6.4,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.5.1 to 1.6.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.6.4</h2>
<h2>oh, boi! again?</h2>
<p>This is the last one tonight, promise! It fixes this embarrassing bug that was actually caught by the CI but got overlooked due to the lack of sleep.
TL;DR GH passed <code>$HOME</code> from the external env into the container and that tricked the Python's <code>site</code> module to think that the home directory is elsewhere, adding non-existent paths to the env vars. See <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/115"">#115</a>.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.3...v1.6.4"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.3...v1.6.4</a></p>
<h2>v1.6.3</h2>
<h1>Another Release!? Why?</h1>
<p>In <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/112#issuecomment-1340133013"">pypa/gh-action-pypi-publish#112</a>, it was discovered that passing a <code>$PATH</code> variable even breaks the shebang. So this version adds more safeguards to make sure it keeps working with a fully broken <code>$PATH</code>.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.2...v1.6.3"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.2...v1.6.3</a></p>
<h2>v1.6.2</h2>
<h2>What's Fixed</h2>
<ul>
<li>Made the <code>$PATH</code> and <code>$PYTHONPATH</code> environment variables resilient to broken values passed from the host runner environment, which previously allowed the users to accidentally break the container's internal runtime as reported in <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/112"">pypa/gh-action-pypi-publish#112</a></li>
</ul>
<h2>Internal Maintenance Improvements</h2>
<ul>
<li>Added a devpi-based smoke-test GitHub Actions CI/CD workflow by <a href=""https://github.com/sesdaile-varmour""><code>@​sesdaile-varmour</code></a> in <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/pull/111"">pypa/gh-action-pypi-publish#111</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/sesdaile-varmour""><code>@​sesdaile-varmour</code></a> made their first contribution in <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/pull/111"">pypa/gh-action-pypi-publish#111</a></li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.1...v1.6.2"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.1...v1.6.2</a></p>
<h2>v1.6.1</h2>
<h2>What's happened?!</h2>
<p>There was a sneaky bug in v1.6.0 which caused Twine to be outside the import path in the Python runtime. It is fixed in v1.6.1 by updating <code>$PYTHONPATH</code> to point to a correct location of the user-global <code>site-packages/</code> directory.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.0...v1.6.1</a></p>
<h2>v1.6.0</h2>
<h2>Anything's changed?</h2>
<p>The only update is that the Python runtime has been upgraded from 3.9 to 3.11. There are no functional changes in this release.</p>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.2...v1.6.0</a></p>
<h2>v1.5.2</h2>
<h2>What's Improved</h2>
<ul>
<li>Implemented the Twine transitive dependency tree pinning using pip-tools-generated constraint files. See <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/107"">pypa/gh-action-pypi-publish#107</a> and <a href=""https://github-redirect.dependabot.com/pypa/gh-action-pypi-publish/issues/101"">pypa/gh-action-pypi-publish#101</a> for details.</li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.5.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c7f29f7adef1a245bd91520e94867e5c6eedddcc""><code>c7f29f7</code></a> 🐛 Override <code>$HOME</code> in the container with <code>/root</code></li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/644926c9722664f88c9f456a1c367031ffb065f8""><code>644926c</code></a> 🧪 Always run smoke testing in debug mode</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/e71a4a4c1d3837e77d0353f9229be9217526a2c4""><code>e71a4a4</code></a> Add support for verbose bash execusion w/ <code>$DEBUG</code></li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/e56e8212f48a2dd7d76d426d4bcab2f5ce15277d""><code>e56e821</code></a> 🐛 Make <code>id</code> always available in <code>twine-upload</code></li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c879b84594122637ac80295111bfd478444c7983""><code>c879b84</code></a> 🐛 Use full path to <code>bash</code> in shebang</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/57e7d53102237d3c8f3e745ed8be27cc0e543819""><code>57e7d53</code></a> 🐛Ensure the default <code>$PATH</code> value is pre-loaded</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/ce291dce5b39b74daf2a1a0dcb652314e3263edb""><code>ce291dc</code></a> 🎨🐛Fix the branch @ pre-commit.ci badge links</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/102d8ab13f40a06246caac2b1008617a8d4673cc""><code>102d8ab</code></a> 🐛 Rehardcode devpi port for GHA srv container</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/3a9eaef3ef4ec31b99bda836b8b667475e6ee532""><code>3a9eaef</code></a> 🐛Use different ports in/out of GHA containers</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/a01fa7442e281f2856175aee1545561a54c01d6c""><code>a01fa74</code></a> 🐛 Use <code>localhost</code> @ GHA outside the containers</li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.5.1...v1.6.4"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.5.1&new-version=1.6.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2022-12-12T06:01:07Z,2022-12-12T11:01:12Z,2022-12-12T11:01:11Z,2022-12-12T11:01:11Z,b610956e46873912e258488b6b1932cf27aeb6dc,,,0,eb59dcb1298990f83ebee67bd3dd54d776ddf3f2,3b6cd2a2e44e9777f865a2bc1be958ae313f66da,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7375,
1212970238,PR_kwDOAMm_X85ITHT-,7466,closed,0,Bump mamba-org/provision-with-micromamba from 14 to 15,49699333,"Bumps [mamba-org/provision-with-micromamba](https://github.com/mamba-org/provision-with-micromamba) from 14 to 15.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/mamba-org/provision-with-micromamba/releases"">mamba-org/provision-with-micromamba's releases</a>.</em></p>
<blockquote>
<h2>v15</h2>
<ul>
<li>Fix <a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/112"">#112</a> (channels overridden even if empty)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/e2b397b12d0a38069451664382b769c9456e3d6d""><code>e2b397b</code></a> Fix <a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/112"">#112</a> (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/113"">#113</a>)</li>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/160ff6b6ef034a61d4459ed3bb69383a2f137ed6""><code>160ff6b</code></a> Bump checkout GHA version in readme example (<a href=""https://github-redirect.dependabot.com/mamba-org/provision-with-micromamba/issues/105"">#105</a>)</li>
<li>See full diff in <a href=""https://github.com/mamba-org/provision-with-micromamba/compare/v14...v15"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mamba-org/provision-with-micromamba&package-manager=github_actions&previous-version=14&new-version=15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-01-23T06:01:09Z,2023-01-23T11:26:03Z,2023-01-23T11:26:02Z,2023-01-23T11:26:02Z,02e6933b33a750d62205abaeadc701de2d23dd63,,,0,63a5be2c865efd9f3df1e495163e3c67715f2f18,19838dce11faeea8dc629cea1607a646ee7be86e,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7466,
1272738016,PR_kwDOAMm_X85L3HDg,7618,closed,0,Bump pypa/gh-action-pypi-publish from 1.6.4 to 1.7.1,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.6.4 to 1.7.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.7.1</h2>
<h2>Regression?</h2>
<p>There was a small setback with v1.7.0 — the snake_case fallbacks didn't work because the check for the kebab-case env vars with default values set was always truthy. This bugfix release promptly fixes that.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.7.0...v1.7.1"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.7.0...v1.7.1</a></p>
<h2>v1.7.0</h2>
<h2>What should I care about?</h2>
<p>TL;DR The action input names have been converted to use kebab-case and marked deprecated. But the old names still work.</p>
<p>This is made to align the public API with the de-facto conventions in the ecosystem. We've used snake_case names, which the maintainer considers a historical mistake. New kebab-case inputs will make the end-users' workflows look more consistent and and visually distinguishable from other identifiers one may encounter in YAML.</p>
<p>There is no timeline for removing the old names, but it will happen in v3 or later versions of the action. <em>If the maintainer doesn't forget to do this, that is.</em></p>
<p>The patch is here: <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/125"">pypa/gh-action-pypi-publish#125</a>.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.5...v1.7.0"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.5...v1.7.0</a></p>
<h2>v1.6.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Added an explicit warning when the password passed into the action is empty — thanks <a href=""https://github.com/colindean""><code>@​colindean</code></a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/colindean""><code>@​colindean</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/122"">pypa/gh-action-pypi-publish#122</a></li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.4...v1.6.5"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.4...v1.6.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/22b4d1f12511f2696162c08546dafbaa903448a2""><code>22b4d1f</code></a> 🐛 Make kebab options fall back for snake_case</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/7104b6e981edc64651f8fc454998a67914173bdb""><code>7104b6e</code></a> Merge branch 'maintenance/kebab-case-inputs' into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/f131721e84cbe1025d966f15e3a9c65be89d9396""><code>f131721</code></a> 🎨 Convert action inputs to use kebab-case</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/32b5e9370928566935e085a9154f23bd662ef41c""><code>32b5e93</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/122"">#122</a> from colindean/empty-token</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/efcb9babc8c755fa5eaf7e581749c61995268ba7""><code>efcb9ba</code></a> 🎨 Warn about empty password/token action input</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/d2ce3ec872b8e7e5190b4b094dd0b7a447c0b266""><code>d2ce3ec</code></a> ⇪ Bump isort to v5.12.0</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/0eaf3a11fdca4a989056b00eda351a21c1b0426e""><code>0eaf3a1</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/121"">#121</a> from pypa/dependabot/pip/requirements/cryptography-39...</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/6a2da9bc3b4a932e2daeabc60613200d38c902f9""><code>6a2da9b</code></a> Bump cryptography from 38.0.4 to 39.0.1 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/7eb3b701d11256e583f5b49899c5e7203deab573""><code>7eb3b70</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/119"">#119</a> from pypa/pre-commit-ci-update-config</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/91e612128c6eb36bfa9bd31ddcae03eceb63616c""><code>91e6121</code></a> Revert WPS flake8 hook version to 4.0.1</li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.6.4...v1.7.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.6.4&new-version=1.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-03-13T06:57:02Z,2023-03-14T03:13:57Z,2023-03-14T03:13:55Z,2023-03-14T03:13:55Z,5043223ca7942c6eb582798aafa843d2efc0895b,,,0,098a7628886df078e23cbe6668818d2bbfdba796,485f801d4bbfc8b2b8c20a390a859ae6cd71ba16,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7618,
1282097323,PR_kwDOAMm_X85Ma0Cr,7648,closed,0,Bump pypa/gh-action-pypi-publish from 1.7.1 to 1.8.1,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.7.1 to 1.8.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.1</h2>
<h2>🐛 What's Fixed</h2>
<p>💔 Unfortunately, a tiny mistake in v1.8.0 caused a far-reaching regression for the most used code path.
❗ But don't worry, it's fixed now thanks to <a href=""https://github.com/njzjz""><code>@​njzjz</code></a> who promptly spotted it and <a href=""https://github.com/zhongjiajie""><code>@​zhongjiajie</code></a> who sent a bugfix.</p>
<h2>🙌 New Contributors</h2>
<ul>
<li><a href=""https://github.com/zhongjiajie""><code>@​zhongjiajie</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/131"">pypa/gh-action-pypi-publish#131</a></li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.0...v1.8.1"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.0...v1.8.1</a></p>
<h2>v1.8.0</h2>
<h2>The Coolest Release Ever!</h2>
<p>In this release, <a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> implemented support for secretless OIDC-based publishing to PyPI-like package indexes. The OIDC flow is activated when neither username nor password action inputs are set.</p>
<p>The OIDC “token exchange”, is an authentication technique that PyPI (and TestPyPI, and hopefully some future others) supports as an alternative to long-lived username/password combinations or long-lived API tokens.</p>
<blockquote>
<p><strong>IMPORTANT:</strong> The PyPI-side configuration is only available to participants of the private beta test. Please, only try out the zero-config mode if you are a beta test participant having followed the PyPI configuration instructions.</p>
</blockquote>
<p>Setup prerequisites: <a href=""https://github.com/marketplace/actions/pypi-publish#publishing-with-openid-connect"">https://github.com/marketplace/actions/pypi-publish#publishing-with-openid-connect</a>
PyPI's documentation: <a href=""https://pypi.org/help/#openid-connect"">https://pypi.org/help/#openid-connect</a>
Beta test enrollment: <a href=""https://redirect.github.com/pypi/warehouse/issues/12965"">pypi/warehouse#12965</a></p>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/123"">pypa/gh-action-pypi-publish#123</a></li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.7.1...v1.8.0"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.7.1...v1.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/a3a3bafbb3e5a75a854ae1bc53ae128cf22c4af4""><code>a3a3baf</code></a> 🐛 Merge PR <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/131"">#131</a> from into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/d5417dc8be8a412b7bf487b09ad3997ad92f859b""><code>d5417dc</code></a> 🐛Correct default upload URL</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/8ef2b3d46c9ecba901fb2ae21d98e322c4089c4e""><code>8ef2b3d</code></a> Merge PR <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/123"">#123</a> into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/2b46bad8cbe9efe518cd7dd98a1610b22721a469""><code>2b46bad</code></a> OIDC beta support</li>
<li>See full diff in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.7.1...v1.8.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.7.1&new-version=1.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-03-20T06:57:22Z,2023-03-20T15:57:22Z,2023-03-20T15:57:20Z,2023-03-20T15:57:20Z,85af8aadf1eda84f1b2eee41d3fb896a37dc27dc,,,0,533ac3a42cd5c50f7fabe0d897ddbd6db16fcf8e,d07362244026597ea9983699c912b7d6309b6d6a,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7648,
1290847294,PR_kwDOAMm_X85M8MQ-,7682,closed,0,Bump pypa/gh-action-pypi-publish from 1.8.1 to 1.8.3,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.1 to 1.8.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.3</h2>
<h2>What's New</h2>
<p>This release improves the logging detalization of which authentication mode is selected when the action runs. It surfaces this detail to the workflow run summary page as annotations. The change was contributed by <a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/136"">pypa/gh-action-pypi-publish#136</a>.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.2...v1.8.3"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.2...v1.8.3</a></p>
<h2>v1.8.2</h2>
<h2>What's Changed</h2>
<p>This release started printing out full OIDC error messages to console, instead of just one line -- by <a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/134"">pypa/gh-action-pypi-publish#134</a>.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.1...v1.8.2"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.1...v1.8.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/48b317d84d5f59668bb13be49d1697e36b3ad009""><code>48b317d</code></a> Merge PR <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/136"">#136</a> into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/ae295504b3468d3952767fa0d25a4a2996a5578f""><code>ae29550</code></a> twine-upload: increase detail on console notices</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/f3ce18f69986f83a044b6e618425238f6c1bb8ef""><code>f3ce18f</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/134"">#134</a> from trail-of-forks/tob-better-errors</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/ea29ccc08c5128e49d7b7744d6fe4fcac05e93de""><code>ea29ccc</code></a> oidc-exchange: avoid splitting the error message</li>
<li>See full diff in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.1...v1.8.3"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.1&new-version=1.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-03-27T06:57:15Z,2023-03-27T07:48:25Z,2023-03-27T07:48:23Z,2023-03-27T07:48:23Z,39caafae4452f5327a7cd671b18d4bb3eb3785ba,,,0,3bbc655cc1176f7c57a89099db415faf5e6faa89,86f3f21ab3d0dff6fdb4a0bccd27c62f9e4a3238,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7682,
1299524930,PR_kwDOAMm_X85NdS1C,7709,closed,0,Bump pypa/gh-action-pypi-publish from 1.8.3 to 1.8.4,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.3 to 1.8.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.4</h2>
<h2>What's Improved</h2>
<ul>
<li><a href=""https://github.com/hugovk""><code>@​hugovk</code></a> cleaned up the double whitespaces in the OIDC flow logging in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/140"">pypa/gh-action-pypi-publish#140</a></li>
<li><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> added a title and a docs link to the OIDC error output in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/139"">pypa/gh-action-pypi-publish#139</a></li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.3...v1.8.4"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.3...v1.8.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/29930c9cf57955dc1b98162d0d8bc3ec80d9e75c""><code>29930c9</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/139"">#139</a> from trail-of-forks/tob-improve-errors</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/9c859e9a775e2122ff3da8f3f5bdfc6ca175f996""><code>9c859e9</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/140"">#140</a> from hugovk/oidc-whitespace</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/65bf8a81decf5c0966c65c2a2e4400e507008232""><code>65bf8a8</code></a> Remove double spaces</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/486ec8dd234caaf3824a0662ee75bc66a778cab7""><code>486ec8d</code></a> oidc-exchange: improve errors</li>
<li>See full diff in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.3...v1.8.4"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.3&new-version=1.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-04-03T06:56:57Z,2023-04-03T18:08:17Z,2023-04-03T18:08:16Z,2023-04-03T18:08:15Z,cd692a6ca2f8755ea8766b8ab9ce854a14f0f55c,,,0,d362100c3a8719f56a1f7204022b8d5ec2078159,84607c3b1d61e3bc2d4b07b4f12f41a40b027f6f,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7709,
1307128769,PR_kwDOAMm_X85N6TPB,7743,closed,0,Bump pypa/gh-action-pypi-publish from 1.8.4 to 1.8.5,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.4 to 1.8.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.5</h2>
<h2>What's Improved</h2>
<p><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> improved the user-facing documentation and logging to make use of the Trusted Publishing flow terminology cohesive with PyPI in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/143"">pypa/gh-action-pypi-publish#143</a>. Trusted Publishing used to be referred to as OpenID Connect (OIDC) — the underlying technology that is being used to make it work. He also made the action display the cause of the Trusted Publishing flow being selected by the action via <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/142"">pypa/gh-action-pypi-publish#142</a>.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.4...v1.8.5"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.4...v1.8.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/0bf742be3ebe032c25dd15117957dc15d0cfc38d""><code>0bf742b</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/143"">#143</a> from trail-of-forks/tob-rewrite-oidc-refs</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/30c382209e2edb18e26e0cd15ea4ddbb62e4d249""><code>30c3822</code></a> oidc-exchange: another link</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/89ddbeae048cf21191cb26cde13abd949438b484""><code>89ddbea</code></a> README: retitle, add note</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/a0f29a5690c3e59076bbc8d1349b7f872249ac83""><code>a0f29a5</code></a> Apply suggestions from code review</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/0b567d5b015a5db43765f0ae2b3a215ea9d0150b""><code>0b567d5</code></a> oidc-exchange, twine-upload: remove more OIDC refs</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/4372cb558524908cb34fcd57d7bc50d397daa875""><code>4372cb5</code></a> README: replace OIDC with &quot;trusted publishing&quot;</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/69efb8cbfb5ff087b7145d695b90bba0c4a53029""><code>69efb8c</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/142"">#142</a> from trail-of-forks/tob-indicate-oidc</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/dfde872acc38fce52eaf13748aaaa11845c89228""><code>dfde872</code></a> Apply suggestions from code review</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/3d567f44ce3fb3bbcf9248d05726c6c9f811b67f""><code>3d567f4</code></a> twine-upload: expound</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/67b747a9c83c5d2526d31259d1479f46210ffd0e""><code>67b747a</code></a> oidc-exchange: more explanation</li>
<li>See full diff in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.4...v1.8.5"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.4&new-version=1.8.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-04-10T06:56:58Z,2023-04-10T14:40:29Z,2023-04-10T14:40:28Z,2023-04-10T14:40:28Z,c94e2dae6dee12761232ca7c299cbcef440c0c0f,,,0,f00fd7faefaaab4c99fa038d2704f52eedf23816,8e899adcd72295a138228056643a78cac6e2de57,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7743,
1316065944,PR_kwDOAMm_X85OcZKY,7760,closed,0,Bump codecov/codecov-action from 3.1.1 to 3.1.2,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.1 to 3.1.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>3.1.2</h2>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump node-fetch from 3.2.4 to 3.2.10 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/835"">codecov/codecov-action#835</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 16.11.40 to 18.13.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/911"">codecov/codecov-action#911</a></li>
<li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.34.0 to 0.36.1 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/900"">codecov/codecov-action#900</a></li>
<li>build(deps-dev): bump typescript from 4.7.4 to 4.9.5 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/905"">codecov/codecov-action#905</a></li>
<li>Update README.md by <a href=""https://github.com/stefanomunarini""><code>@​stefanomunarini</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/718"">codecov/codecov-action#718</a></li>
<li>build(deps): bump openpgp from 5.4.0 to 5.5.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/819"">codecov/codecov-action#819</a></li>
<li>build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/840"">codecov/codecov-action#840</a></li>
<li>build(deps): bump <code>@​actions/core</code> from 1.9.1 to 1.10.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/841"">codecov/codecov-action#841</a></li>
<li>build(deps): bump <code>@​actions/github</code> from 5.0.3 to 5.1.1 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/843"">codecov/codecov-action#843</a></li>
<li>build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/896"">codecov/codecov-action#896</a></li>
<li>build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/872"">codecov/codecov-action#872</a></li>
<li>build(deps): bump node-fetch from 3.2.10 to 3.3.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/869"">codecov/codecov-action#869</a></li>
<li>build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/879"">codecov/codecov-action#879</a></li>
<li>build(deps): bump json5 from 2.2.1 to 2.2.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/895"">codecov/codecov-action#895</a></li>
<li>codeql-analysis.yml by <a href=""https://github.com/minumulasri""><code>@​minumulasri</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/898"">codecov/codecov-action#898</a></li>
<li>build(deps): bump ossf/scorecard-action from 1.1.1 to 2.1.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/889"">codecov/codecov-action#889</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.13.0 to 18.14.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/922"">codecov/codecov-action#922</a></li>
<li>build(deps): bump openpgp from 5.5.0 to 5.7.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/924"">codecov/codecov-action#924</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.14.0 to 18.14.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/927"">codecov/codecov-action#927</a></li>
<li>Remove unsupported path_to_write_report argument by <a href=""https://github.com/jsoref""><code>@​jsoref</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/851"">codecov/codecov-action#851</a></li>
<li>Update README to contain correct information - inputs and negate feature by <a href=""https://github.com/moshe-azaria-sage""><code>@​moshe-azaria-sage</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/901"">codecov/codecov-action#901</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.14.2 to 18.14.6 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/933"">codecov/codecov-action#933</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.14.6 to 18.15.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/937"">codecov/codecov-action#937</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.15.0 to 18.15.5 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/945"">codecov/codecov-action#945</a></li>
<li>build(deps): bump node-fetch from 3.3.0 to 3.3.1 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/938"">codecov/codecov-action#938</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.15.5 to 18.15.6 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/946"">codecov/codecov-action#946</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.15.6 to 18.15.10 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/947"">codecov/codecov-action#947</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/951"">codecov/codecov-action#951</a></li>
<li>fix: add in all the extra arguments for uploader by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/955"">codecov/codecov-action#955</a></li>
<li>chore(release): bump to 3.1.2 by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/956"">codecov/codecov-action#956</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/stefanomunarini""><code>@​stefanomunarini</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/718"">codecov/codecov-action#718</a></li>
<li><a href=""https://github.com/minumulasri""><code>@​minumulasri</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/898"">codecov/codecov-action#898</a></li>
<li><a href=""https://github.com/jsoref""><code>@​jsoref</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/851"">codecov/codecov-action#851</a></li>
<li><a href=""https://github.com/moshe-azaria-sage""><code>@​moshe-azaria-sage</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/901"">codecov/codecov-action#901</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v3.1.1...v3.1.2"">https://github.com/codecov/codecov-action/compare/v3.1.1...v3.1.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>3.1.2</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/718"">#718</a> Update README.md</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/851"">#851</a> Remove unsupported path_to_write_report argument</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/898"">#898</a> codeql-analysis.yml</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/901"">#901</a> Update README to contain correct information - inputs and negate feature</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/955"">#955</a> fix: add in all the extra arguments for uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/819"">#819</a> build(deps): bump openpgp from 5.4.0 to 5.5.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/835"">#835</a> build(deps): bump node-fetch from 3.2.4 to 3.2.10</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/840"">#840</a> build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/841"">#841</a> build(deps): bump <code>@​actions/core</code> from 1.9.1 to 1.10.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/843"">#843</a> build(deps): bump <code>@​actions/github</code> from 5.0.3 to 5.1.1</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/869"">#869</a> build(deps): bump node-fetch from 3.2.10 to 3.3.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/872"">#872</a> build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/879"">#879</a> build(deps): bump decode-uri-component from 0.2.0 to 0.2.2</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/889"">#889</a> build(deps): bump ossf/scorecard-action from 1.1.1 to 2.1.2</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/895"">#895</a> build(deps): bump json5 from 2.2.1 to 2.2.3</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/896"">#896</a> build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/900"">#900</a> build(deps-dev): bump <code>@​vercel/ncc</code> from 0.34.0 to 0.36.1</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/905"">#905</a> build(deps-dev): bump typescript from 4.7.4 to 4.9.5</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/911"">#911</a> build(deps-dev): bump <code>@​types/node</code> from 16.11.40 to 18.13.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/922"">#922</a> build(deps-dev): bump <code>@​types/node</code> from 18.13.0 to 18.14.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/924"">#924</a> build(deps): bump openpgp from 5.5.0 to 5.7.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/927"">#927</a> build(deps-dev): bump <code>@​types/node</code> from 18.14.0 to 18.14.2</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/933"">#933</a> build(deps-dev): bump <code>@​types/node</code> from 18.14.2 to 18.14.6</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/937"">#937</a> build(deps-dev): bump <code>@​types/node</code> from 18.14.6 to 18.15.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/938"">#938</a> build(deps): bump node-fetch from 3.3.0 to 3.3.1</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/945"">#945</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.0 to 18.15.5</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/946"">#946</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.5 to 18.15.6</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/947"">#947</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.6 to 18.15.10</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/951"">#951</a> build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/40a12dcee2df644d47232dde008099a3e9e4f865""><code>40a12dc</code></a> chore(release): bump to 3.1.2 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/956"">#956</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/030a000ec6eeef2b34acd3dbd50def6ec6989c82""><code>030a000</code></a> fix: add in all the extra arguments for uploader (<a href=""https://redirect.github.com/codecov/codecov-action/issues/955"">#955</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/91e184765dad936fb6df80d5af0decb809a33dac""><code>91e1847</code></a> build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/951"">#951</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/cc7fb3f71c712c470a895ac29f8a1fd0fcb52c8a""><code>cc7fb3f</code></a> build(deps-dev): bump <code>@​types/node</code> from 18.15.6 to 18.15.10 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/947"">#947</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/fee48966e2ce725aedb2174d5cee5841f4c364b3""><code>fee4896</code></a> build(deps-dev): bump <code>@​types/node</code> from 18.15.5 to 18.15.6 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/946"">#946</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/ddd8c1b461b46aee6f6da1fda652cd08c78188db""><code>ddd8c1b</code></a> build(deps): bump node-fetch from 3.3.0 to 3.3.1 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/938"">#938</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/76e2f5265ebebd231c48f4ba34e4b4c1cb64265d""><code>76e2f52</code></a> build(deps-dev): bump <code>@​types/node</code> from 18.15.0 to 18.15.5 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/945"">#945</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/9b87723d6ac0be351efc7242ba5ec28fa641c77c""><code>9b87723</code></a> build(deps-dev): bump <code>@​types/node</code> from 18.14.6 to 18.15.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/937"">#937</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/13d8b070d5c4da65fc2f3ccf6afe68f202f09cdc""><code>13d8b07</code></a> build(deps-dev): bump <code>@​types/node</code> from 18.14.2 to 18.14.6 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/933"">#933</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/4b062cb89c1fe1fd7da7e013d554a088ea14178a""><code>4b062cb</code></a> Update README to contain correct information - inputs and negate feature (<a href=""https://redirect.github.com/codecov/codecov-action/issues/901"">#901</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/codecov/codecov-action/compare/v3.1.1...v3.1.2"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=3.1.1&new-version=3.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-04-17T06:57:09Z,2023-04-17T10:22:42Z,2023-04-17T10:22:40Z,2023-04-17T10:22:40Z,68bae08874d05e448eb5c9f522afb62e39146f33,,,0,c6c628906ef15c428014652a65d744aee593a1f3,6b7515c20efb9a280370eb755d2410958e893a96,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7760,
1324841214,PR_kwDOAMm_X85O93j-,7781,closed,0,Bump codecov/codecov-action from 3.1.2 to 3.1.3,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.2 to 3.1.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>3.1.3</h2>
<h2>What's Changed</h2>
<ul>
<li>build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/957"">codecov/codecov-action#957</a></li>
<li>build(deps): bump openpgp from 5.7.0 to 5.8.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/958"">codecov/codecov-action#958</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.15.10 to 18.15.12 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/959"">codecov/codecov-action#959</a></li>
<li>fix: allow for aarch64 build by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/960"">codecov/codecov-action#960</a></li>
<li>chore(release): bump to 3.1.3 by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/961"">codecov/codecov-action#961</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v3.1.2...v3.1.3"">https://github.com/codecov/codecov-action/compare/v3.1.2...v3.1.3</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>3.1.3</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/960"">#960</a> fix: allow for aarch64 build</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/957"">#957</a> build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/958"">#958</a> build(deps): bump openpgp from 5.7.0 to 5.8.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/959"">#959</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.10 to 18.15.12</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/894ff025c7b54547a9a2a1e9f228beae737ad3c2""><code>894ff02</code></a> chore(release): bump to 3.1.3 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/961"">#961</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/f539f977d5cdbb5a53de48bb2c00ae0dbf703e69""><code>f539f97</code></a> fix: allow for aarch64 build (<a href=""https://redirect.github.com/codecov/codecov-action/issues/960"">#960</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/6757614f24a05cb3f8641137b1ed46ed44d19fbc""><code>6757614</code></a> build(deps-dev): bump <code>@​types/node</code> from 18.15.10 to 18.15.12 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/959"">#959</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/cdee249da5411c0de7550d8f03ba0ca2902f3de7""><code>cdee249</code></a> build(deps): bump openpgp from 5.7.0 to 5.8.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/958"">#958</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/ce548e935a76bfa6d8d3d8ed7c23270a154efc82""><code>ce548e9</code></a> build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/957"">#957</a>)</li>
<li>See full diff in <a href=""https://github.com/codecov/codecov-action/compare/v3.1.2...v3.1.3"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=3.1.2&new-version=3.1.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-04-24T06:57:05Z,2023-04-24T10:16:54Z,2023-04-24T10:16:52Z,2023-04-24T10:16:52Z,2657787f76fffe4395288702403a68212e69234b,,,0,8c4beb511278959f28e2a3bafbf5df53f96eef99,a54d5b3fe2dac8a77a4952a33d443e09e77587bf,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7781,
1341641607,PR_kwDOAMm_X85P99OH,7826,closed,0,Bump pypa/gh-action-pypi-publish from 1.8.5 to 1.8.6,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.5 to 1.8.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.6</h2>
<h2>What's Updated</h2>
<ul>
<li><a href=""https://github.com/sponsors/woodruffw""><code>@​woodruffw</code></a> dropped the references to a “private beta” from the project docs and runtime in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/147"">pypa/gh-action-pypi-publish#147</a>. He also clarified that the API tokens are still more secure than passwords in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/150"">pypa/gh-action-pypi-publish#150</a>.</li>
<li><a href=""https://github.com/sponsors/asherf""><code>@​asherf</code></a> noticed that the action metadata incorrectly marked the <code>password</code> field as required and contributed a correction in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/151"">pypa/gh-action-pypi-publish#151</a></li>
<li><a href=""https://github.com/sponsors/webknjaz""><code>@​webknjaz</code></a> moved the Trusted Publishing example to the top of the README in hopes that new users would default to using it via <a href=""https://github.com/pypa/gh-action-pypi-publish/commit/f47b34707fd264d5ddb1ef322ca74cf8e4cf351b"">https://github.com/pypa/gh-action-pypi-publish/commit/f47b34707fd264d5ddb1ef322ca74cf8e4cf351b</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/sponsors/asherf""><code>@​asherf</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/151"">pypa/gh-action-pypi-publish#151</a></li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.5...v1.8.6"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.5...v1.8.6</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/a56da0b891b3dc519c7ee3284aff1fad93cc8598""><code>a56da0b</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/151"">#151</a> from asherf/trusted</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/e4b903174144ed1ae155796f72e117b95cf30c3f""><code>e4b9031</code></a> password input is no longer required, since not specifying it implies trusted...</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/5a085bf49e449ba94cc551efdc03b14b2be3788c""><code>5a085bf</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/150"">#150</a> from trail-of-forks/tob-doc-tweaks</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/0811f991bd3b72bc79a131736a1966d9df922f60""><code>0811f99</code></a> README: small doc tweaks</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/f47b34707fd264d5ddb1ef322ca74cf8e4cf351b""><code>f47b347</code></a> 📝🎨 Put OIDC on pedestal @ README</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/7a1a355fb5ad6afb4e8f748ad036708c1c61c396""><code>7a1a355</code></a> 🎨 Show GH environments use in README examples</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/3b6670b0bd04d54039641fb3b2ac878aad9d70fc""><code>3b6670b</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/147"">#147</a> from trail-of-forks/tob-stabilize-oidc</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c008c2f40abc7b85467b393f3b78e67391ffa7f8""><code>c008c2f</code></a> README: re-add OIDC note</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/fe431ff9ad22d027a59d866e45c4e40d93d8ce57""><code>fe431ff</code></a> README, oidc-exchange: remove beta references</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c542b72dc68d2280248f2d864ba901e0c31a3ee7""><code>c542b72</code></a> Bump WPS flake8 plugin set to v0.17.0</li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.5...v1.8.6"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.5&new-version=1.8.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-05-08T06:56:59Z,2023-05-08T21:24:30Z,2023-05-08T21:24:29Z,2023-05-08T21:24:29Z,306310050f6278f4d8107159c9c3649fbd6b5dea,,,0,6abfa81bc39df65d267eccd15715e6fedda757f6,2cce9f6539a02a7bdc37a722b6965a51be29a8dd,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7826,
1358655166,PR_kwDOAMm_X85Q-26-,7859,closed,0,Bump codecov/codecov-action from 3.1.3 to 3.1.4,49699333,"Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.3 to 3.1.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>3.1.4</h2>
<h2>What's Changed</h2>
<ul>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.15.12 to 18.16.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/970"">codecov/codecov-action#970</a></li>
<li>Fix typo in README.md by <a href=""https://github.com/hisaac""><code>@​hisaac</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/967"">codecov/codecov-action#967</a></li>
<li>fix: add back in working dir by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/971"">codecov/codecov-action#971</a></li>
<li>fix: CLI option names for uploader by <a href=""https://github.com/kleisauke""><code>@​kleisauke</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/969"">codecov/codecov-action#969</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.16.3 to 20.1.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/975"">codecov/codecov-action#975</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 20.1.0 to 20.1.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/979"">codecov/codecov-action#979</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 20.1.2 to 20.1.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/981"">codecov/codecov-action#981</a></li>
<li>release: 3.1.4 by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/983"">codecov/codecov-action#983</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/hisaac""><code>@​hisaac</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/967"">codecov/codecov-action#967</a></li>
<li><a href=""https://github.com/kleisauke""><code>@​kleisauke</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/969"">codecov/codecov-action#969</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v3.1.3...v3.1.4"">https://github.com/codecov/codecov-action/compare/v3.1.3...v3.1.4</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>3.1.4</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/967"">#967</a> Fix typo in README.md</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/971"">#971</a> fix: add back in working dir</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/969"">#969</a> fix: CLI option names for uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/970"">#970</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.12 to 18.16.3</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/979"">#979</a> build(deps-dev): bump <code>@​types/node</code> from 20.1.0 to 20.1.2</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/981"">#981</a> build(deps-dev): bump <code>@​types/node</code> from 20.1.2 to 20.1.4</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/eaaf4bedf32dbdc6b720b63067d99c4d77d6047d""><code>eaaf4be</code></a> release: 3.1.4 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/983"">#983</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/c2ab9ab2e177cef69bda1961b1e66eaf868c790b""><code>c2ab9ab</code></a> build(deps-dev): bump <code>@​types/node</code> from 20.1.2 to 20.1.4 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/981"">#981</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/49c20db375a254995f6d63d5dc03aa04e04a42ea""><code>49c20db</code></a> build(deps-dev): bump <code>@​types/node</code> from 20.1.0 to 20.1.2 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/979"">#979</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/cf8e3e4262e63ac53fdbc0ea1b6dd69cb03c974b""><code>cf8e3e4</code></a> build(deps-dev): bump <code>@​types/node</code> from 18.16.3 to 20.1.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/975"">#975</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/1c34415a066a16afff4060670e36707eba85ccbd""><code>1c34415</code></a> fix: CLI option names for uploader (<a href=""https://redirect.github.com/codecov/codecov-action/issues/969"">#969</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/b4dfea724ff5d8e51bb4dffdc668c0d964df6103""><code>b4dfea7</code></a> fix: add back in working dir (<a href=""https://redirect.github.com/codecov/codecov-action/issues/971"">#971</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/5bf250470ea3e4bf9456e73127015eb78ce4c280""><code>5bf2504</code></a> Fix typo in README.md (<a href=""https://redirect.github.com/codecov/codecov-action/issues/967"">#967</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/1dd0ce34be62fac4f3b714f860c0b0c520acd35d""><code>1dd0ce3</code></a> build(deps-dev): bump <code>@​types/node</code> from 18.15.12 to 18.16.3 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/970"">#970</a>)</li>
<li>See full diff in <a href=""https://github.com/codecov/codecov-action/compare/v3.1.3...v3.1.4"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=3.1.3&new-version=3.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-05-22T06:57:15Z,2023-05-22T19:49:21Z,2023-05-22T19:49:20Z,2023-05-22T19:49:19Z,b9456f371bdae38fe9726a80159740d36eece90f,,,0,415491611e3f117aec6ba5dc9d135d585dba646a,d8ec3a3f6b02a8b941b484b3d254537af84b5fde,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7859,
1368620221,PR_kwDOAMm_X85Rk3y9,7877,closed,0,Bump mamba-org/provision-with-micromamba from 15 to 16,49699333,"Bumps [mamba-org/provision-with-micromamba](https://github.com/mamba-org/provision-with-micromamba) from 15 to 16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/mamba-org/provision-with-micromamba/releases"">mamba-org/provision-with-micromamba's releases</a>.</em></p>
<blockquote>
<h2>v16</h2>
<p>⛔️ With this release, we are deprecating this project.</p>
<p>Please use the <a href=""https://github.com/mamba-org/setup-micromamba"">mamba-org/setup-micromamba</a> action instead.</p>
<p>See the <a href=""https://github.com/mamba-org/provision-with-micromamba#migration-to-setup-micromamba"">migration guide</a> for instructions how to migrate from <code>provision-with-micromamba</code> to <code>setup-micromamba</code>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/mamba-org/provision-with-micromamba/commit/3c96c0c27676490c63c18bc81f5c51895ac3e0e6""><code>3c96c0c</code></a> Add deprecation warning (<a href=""https://redirect.github.com/mamba-org/provision-with-micromamba/issues/122"">#122</a>)</li>
<li>See full diff in <a href=""https://github.com/mamba-org/provision-with-micromamba/compare/v15...v16"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mamba-org/provision-with-micromamba&package-manager=github_actions&previous-version=15&new-version=16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-05-29T06:57:09Z,2023-06-01T16:22:07Z,2023-06-01T16:21:57Z,,f121e5e39bb131b7e478617da46d7c9a832903e2,,,0,55293fa6ecc61c9d3e0cf9efee1d8d264e88142c,b319d8671b178407927b5878ed878ffab22b6352,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7877,
1417423781,PR_kwDOAMm_X85UfCul,7956,closed,0,Bump pypa/gh-action-pypi-publish from 1.8.6 to 1.8.7,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.6 to 1.8.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.7</h2>
<h2>:nail_care: Cosmetic output impovements</h2>
<ul>
<li><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> fixed OIDC the multiline annotations by escaping LF through urlencoding it in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/156"">pypa/gh-action-pypi-publish#156</a>.</li>
<li><a href=""https://github.com/jaap3""><code>@​jaap3</code></a> noticed and promptly removed extraneous <code>}</code> from a non-OIDC log annotation in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/161"">pypa/gh-action-pypi-publish#161</a>.</li>
<li><a href=""https://github.com/hugovk""><code>@​hugovk</code></a> made pip ignore that it runs under the root user and suppress its warning output in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/159"">pypa/gh-action-pypi-publish#159</a>.</li>
</ul>
<h2>:hammer_and_wrench: Internal dependencies</h2>
<ul>
<li>Cryptography was bumped from 39.0.1 to 41.0.0 @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/160"">pypa/gh-action-pypi-publish#160</a></li>
<li>Requests was bumped from 2.28.1 to 2.31.0 @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/157"">pypa/gh-action-pypi-publish#157</a></li>
</ul>
<h2>:muscle: New Contributors</h2>
<ul>
<li><a href=""https://github.com/jaap3""><code>@​jaap3</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/161"">pypa/gh-action-pypi-publish#161</a></li>
</ul>
<p><strong>:mirror: Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.6...v1.8.7"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.6...v1.8.7</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/f5622bde02b04381239da3573277701ceca8f6a0""><code>f5622bd</code></a> Merge PRs <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/159"">#159</a> and <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/160"">#160</a> into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/3be882c473b35162143effc2be2455999c59fc06""><code>3be882c</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/161"">#161</a> from jaap3/jaap3-patch-1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/775be49481ba30cf6003c8fdc32d3b3acf48c6a3""><code>775be49</code></a> Remove extraneous }</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/5684530096325b74c64f5c67ddf81806eb6507cb""><code>5684530</code></a> Bump cryptography from 39.0.1 to 41.0.0 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/135d0d53531a9cf16b81e1b7eaa4992247060d83""><code>135d0d5</code></a> Ignore pip's root user warning</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/110f54a3871763056757c3e203635d4c5711439f""><code>110f54a</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/157"">#157</a> from pypa/dependabot/pip/requirements/requests-2.31.0</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c803c91ef00ddbdb881fa5726ed11f611f0a0edf""><code>c803c91</code></a> Bump requests from 2.28.1 to 2.31.0 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/f9ed8ba9ad06d20b1ebb6002ffb93050ed9a1951""><code>f9ed8ba</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/156"">#156</a> from trail-of-forks/tob-fix-annotation</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/30639668ca11564ee2c0fda77e7e080e3a03c9ed""><code>3063966</code></a> oidc-exchange: &quot;fix&quot; multiline annotations</li>
<li>See full diff in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.6...v1.8.7"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.6&new-version=1.8.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-07-03T06:07:52Z,2023-07-03T15:43:38Z,2023-07-03T15:43:37Z,2023-07-03T15:43:37Z,77e2db5aa1d8828bc7310062680ad9fe15a65d8a,,,0,52fbb17d7f3f809d0d09f154047e775f5801c2dc,4b544211b42a66744893a80c3ddc45dd9f9479de,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7956,
1436672730,PR_kwDOAMm_X85VoeLa,7994,closed,0,Bump pypa/gh-action-pypi-publish from 1.8.7 to 1.8.8,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.7 to 1.8.8.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.8</h2>
<h2>:nail_care: Cosmetic output improvements</h2>
<ul>
<li>
<p>In <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/167"">pypa/gh-action-pypi-publish#167</a>, <a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> introduced a nudge-warning encouraging people to start using secretless publishing to PyPI, as suggested by <a href=""https://github.com/sponsors/sethmlarson""><code>@​sethmlarson</code></a> in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/164"">pypa/gh-action-pypi-publish#164</a>, collaborating with <a href=""https://github.com/di""><code>@​di</code></a>.</p>
<p><em>:bulb: Tip:</em> The OIDC-based trusted publishing integration details can be found in the action README at <a href=""https://github.com/marketplace/actions/pypi-publish#trusted-publishing"">https://github.com/marketplace/actions/pypi-publish#trusted-publishing</a> and on the PyPI docs page at <a href=""https://docs.pypi.org/trusted-publishers/"">https://docs.pypi.org/trusted-publishers/</a>. It's gone GA on April 20, 2023, during PyCon: <a href=""https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/"">https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/</a>. And the Trail Of Bits blog post has some deeper explanation here: <a href=""https://blog.trailofbits.com/2023/05/23/trusted-publishing-a-new-benchmark-for-packaging-security/"">https://blog.trailofbits.com/2023/05/23/trusted-publishing-a-new-benchmark-for-packaging-security/</a>.</p>
</li>
</ul>
<h2>:hammer_and_wrench: Internal dependencies</h2>
<ul>
<li><a href=""https://github.com/sponsors/pquentin""><code>@​pquentin</code></a> bumped the runtime dependency pins to the recent versions @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/168"">pypa/gh-action-pypi-publish#168</a>.</li>
</ul>
<h2>:muscle: New Contributors</h2>
<ul>
<li><a href=""https://github.com/pquentin""><code>@​pquentin</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/168"">pypa/gh-action-pypi-publish#168</a></li>
</ul>
<p><strong>:mirror: Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.7...v1.8.8"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.7...v1.8.8</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/f8c70e705ffc13c3b4d1221169b84f12a75d6ca8""><code>f8c70e7</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/168"">#168</a> from pquentin/bump-dependencies</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/68276eb3e42606c933a7e904e2a08d51c25f5f5b""><code>68276eb</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/167"">#167</a> from trail-of-forks/tob-nudge</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/a5d57af63cad4af35241aa8833c74cf45dac20fa""><code>a5d57af</code></a> Bump runtime dependencies</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/e90e853e89d14ff8ad42240b7e16f7a7f0159fd6""><code>e90e853</code></a> twine-upload: only nudge on PyPI-looking domains</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/be695966b092c743f840d8cdab3f8a9bddc88f7e""><code>be69596</code></a> twine-upload: add a nudge for trusted publishing</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/54d67ed3c50a769c633f7db8063c9e634709c1b0""><code>54d67ed</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/165"">#165</a> from pypa/pre-commit-ci-update-config</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/d32e2fab322ed7f929ae799c1e6518f903577add""><code>d32e2fa</code></a> Revert flake8 to v4.0.1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/a8d92e9876e847b9d2375b0d8c0e677d1a5122ba""><code>a8d92e9</code></a> [pre-commit.ci] pre-commit autoupdate</li>
<li>See full diff in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.7...v1.8.8"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.7&new-version=1.8.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-07-17T06:07:36Z,2023-07-17T13:27:28Z,2023-07-17T13:27:27Z,2023-07-17T13:27:27Z,3cdf40daefda2533905f6dda4a27395d051e37e1,,,0,a437197401dec4412982afdec2bc900a119c63f3,69236b8cfae9cf38682d79b766e92d6eba215c3c,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/7994,
1473815931,PR_kwDOAMm_X85X2KV7,8068,closed,0,Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.8 to 1.8.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.10</h2>
<h2>:bug: What's Fixed</h2>
<p><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> fixed decoding OIDC claims in debug output on failure by applying correct padding to the encoded payload via <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/177"">pypa/gh-action-pypi-publish#177</a>.</p>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.9...v1.8.10"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.9...v1.8.10</a></p>
<h2>v1.8.9</h2>
<h2>:nail_care: Cosmetic output improvements</h2>
<ul>
<li><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> added debug output to the trusted publishing OIDC exchange on failures in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/174"">pypa/gh-action-pypi-publish#174</a></li>
<li><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> implemented Markdown semantic callouts in README via <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/175"">pypa/gh-action-pypi-publish#175</a></li>
</ul>
<h2>:hammer_and_wrench: Internal dependencies</h2>
<ul>
<li>Certifi was bumped from 2023.5.7 to 2023.7.22 @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/171"">pypa/gh-action-pypi-publish#171</a></li>
<li>Cryptography was bumped from 41.0.2 to 41.0.3 @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/172"">pypa/gh-action-pypi-publish#172</a></li>
</ul>
<p><strong>Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.8...v1.8.9"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.8...v1.8.9</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/b7f401de30cb6434a1e19f805ff006643653240e""><code>b7f401d</code></a> Merge PR <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/177"">#177</a> into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/ba3ecc93555ab33f1172cebde7585a78eca00335""><code>ba3ecc9</code></a> oidc-exchange: fix padding</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/ade57f54dcc56d4858ca681c80269c26dc7b9149""><code>ade57f5</code></a> Merge PRs <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/174"">#174</a> <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/175"">#175</a> and <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/172"">#172</a> into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/637917e5f201407b3d6e3be9df6af349083d0a79""><code>637917e</code></a> README: re-add &quot;pro tip&quot; language</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/4864f13c38a29318fc09dca6b0258644d80b8e07""><code>4864f13</code></a> README: use semantic callouts</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/326f9ad1e131f526357a666f008015a0ee96fbcf""><code>326f9ad</code></a> oidc-exchange: add-trailing-comma</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/e5f0690e9195178c6f53954b1f9059b3d9b11116""><code>e5f0690</code></a> oidc-exchange: ignore a nested function</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/8bdd0cc2a0ec4a8773b96ddd5bdc4a2dd849cf81""><code>8bdd0cc</code></a> oidc-exchange: lintage</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/71a0032909f17bb44704d5fc46876cdaee124ca0""><code>71a0032</code></a> oidc-exchange: render claims if exchange fails</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/adef75a5a62cc4473182a78754a310e4a73d3511""><code>adef75a</code></a> Bump cryptography from 41.0.2 to 41.0.3 in /requirements</li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.8...v1.8.10"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.8&new-version=1.8.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-08-14T06:36:51Z,2023-08-17T10:32:20Z,2023-08-17T10:32:19Z,2023-08-17T10:32:18Z,67835eea3a1763a3241ca67cf3338536021bb949,,,0,9b9465b944b10b64e7d25fb293a1627ebd9b0ee2,eceec5f7bbbe93b2f24f49af6361a135ae72e2e4,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8068,
1509660494,PR_kwDOAMm_X85Z-5dO,8169,closed,0,Bump actions/checkout from 3 to 4,49699333,"Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/checkout/releases"">actions/checkout's releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update default runtime to node20 by <a href=""https://github.com/takost""><code>@​takost</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1436"">actions/checkout#1436</a></li>
<li>Support fetching without the --progress option by <a href=""https://github.com/simonbaird""><code>@​simonbaird</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1067"">actions/checkout#1067</a></li>
<li>Release 4.0.0 by <a href=""https://github.com/takost""><code>@​takost</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1447"">actions/checkout#1447</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/takost""><code>@​takost</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/checkout/pull/1436"">actions/checkout#1436</a></li>
<li><a href=""https://github.com/simonbaird""><code>@​simonbaird</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/checkout/pull/1067"">actions/checkout#1067</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/checkout/compare/v3...v4.0.0"">https://github.com/actions/checkout/compare/v3...v4.0.0</a></p>
<h2>v3.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Mark test scripts with Bash'isms to be run via Bash by <a href=""https://github.com/dscho""><code>@​dscho</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1377"">actions/checkout#1377</a></li>
<li>Add option to fetch tags even if fetch-depth &gt; 0 by <a href=""https://github.com/RobertWieczoreck""><code>@​RobertWieczoreck</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/579"">actions/checkout#579</a></li>
<li>Release 3.6.0 by <a href=""https://github.com/luketomlinson""><code>@​luketomlinson</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1437"">actions/checkout#1437</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/RobertWieczoreck""><code>@​RobertWieczoreck</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/checkout/pull/579"">actions/checkout#579</a></li>
<li><a href=""https://github.com/luketomlinson""><code>@​luketomlinson</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/checkout/pull/1437"">actions/checkout#1437</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/checkout/compare/v3.5.3...v3.6.0"">https://github.com/actions/checkout/compare/v3.5.3...v3.6.0</a></p>
<h2>v3.5.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by <a href=""https://github.com/megamanics""><code>@​megamanics</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1196"">actions/checkout#1196</a></li>
<li>Fix typos found by codespell by <a href=""https://github.com/DimitriPapadopoulos""><code>@​DimitriPapadopoulos</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1287"">actions/checkout#1287</a></li>
<li>Add support for sparse checkouts by <a href=""https://github.com/dscho""><code>@​dscho</code></a> and <a href=""https://github.com/dfdez""><code>@​dfdez</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1369"">actions/checkout#1369</a></li>
<li>Release v3.5.3 by <a href=""https://github.com/TingluoHuang""><code>@​TingluoHuang</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1376"">actions/checkout#1376</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/megamanics""><code>@​megamanics</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/checkout/pull/1196"">actions/checkout#1196</a></li>
<li><a href=""https://github.com/DimitriPapadopoulos""><code>@​DimitriPapadopoulos</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/checkout/pull/1287"">actions/checkout#1287</a></li>
<li><a href=""https://github.com/dfdez""><code>@​dfdez</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/checkout/pull/1369"">actions/checkout#1369</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/checkout/compare/v3...v3.5.3"">https://github.com/actions/checkout/compare/v3...v3.5.3</a></p>
<h2>v3.5.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix: Use correct API url / endpoint in GHES by <a href=""https://github.com/fhammerl""><code>@​fhammerl</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1289"">actions/checkout#1289</a> based on <a href=""https://redirect.github.com/actions/checkout/issues/1286"">#1286</a> by <a href=""https://github.com/1newsr""><code>@​1newsr</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/checkout/compare/v3.5.1...v3.5.2"">https://github.com/actions/checkout/compare/v3.5.1...v3.5.2</a></p>
<h2>v3.5.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Improve checkout performance on Windows runners by upgrading <code>@​actions/github</code> dependency by <a href=""https://github.com/BrettDong""><code>@​BrettDong</code></a> in <a href=""https://redirect.github.com/actions/checkout/pull/1246"">actions/checkout#1246</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/BrettDong""><code>@​BrettDong</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/checkout/pull/1246"">actions/checkout#1246</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/actions/checkout/blob/main/CHANGELOG.md"">actions/checkout's changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v4.0.0</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1067"">Support fetching without the --progress option</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1436"">Update to node20</a></li>
</ul>
<h2>v3.6.0</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1377"">Fix: Mark test scripts with Bash'isms to be run via Bash</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/579"">Add option to fetch tags even if fetch-depth &gt; 0</a></li>
</ul>
<h2>v3.5.3</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1196"">Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1287"">Fix typos found by codespell</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1369"">Add support for sparse checkouts</a></li>
</ul>
<h2>v3.5.2</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1289"">Fix api endpoint for GHES</a></li>
</ul>
<h2>v3.5.1</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1246"">Fix slow checkout on Windows</a></li>
</ul>
<h2>v3.5.0</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1237"">Add new public key for known_hosts</a></li>
</ul>
<h2>v3.4.0</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1209"">Upgrade codeql actions to v2</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1210"">Upgrade dependencies</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1225"">Upgrade <code>@​actions/io</code></a></li>
</ul>
<h2>v3.3.0</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1045"">Implement branch list using callbacks from exec function</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1050"">Add in explicit reference to private checkout options</a></li>
<li>[Fix comment typos (that got added in <a href=""https://redirect.github.com/actions/checkout/issues/770"">#770</a>)](<a href=""https://redirect.github.com/actions/checkout/pull/1057"">actions/checkout#1057</a>)</li>
</ul>
<h2>v3.2.0</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/942"">Add GitHub Action to perform release</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/967"">Fix status badge</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1002"">Replace datadog/squid with ubuntu/squid Docker image</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/964"">Wrap pipeline commands for submoduleForeach in quotes</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1029"">Update <code>@​actions/io</code> to 1.1.2</a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/1039"">Upgrading version to 3.2.0</a></li>
</ul>
<h2>v3.1.0</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/939"">Use <code>@​actions/core</code> <code>saveState</code> and <code>getState</code></a></li>
<li><a href=""https://redirect.github.com/actions/checkout/pull/922"">Add <code>github-server-url</code> input</a></li>
</ul>
<h2>v3.0.2</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/checkout/pull/770"">Add input <code>set-safe-directory</code></a></li>
</ul>
<h2>v3.0.1</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/checkout/commit/3df4ab11eba7bda6032a0b82a6bb43b11571feac""><code>3df4ab1</code></a> Release 4.0.0 (<a href=""https://redirect.github.com/actions/checkout/issues/1447"">#1447</a>)</li>
<li><a href=""https://github.com/actions/checkout/commit/8b5e8b768746b50394015010d25e690bfab9dfbc""><code>8b5e8b7</code></a> Support fetching without the --progress option (<a href=""https://redirect.github.com/actions/checkout/issues/1067"">#1067</a>)</li>
<li><a href=""https://github.com/actions/checkout/commit/97a652b80035363df47baee5031ec8670b8878ac""><code>97a652b</code></a> Update default runtime to node20 (<a href=""https://redirect.github.com/actions/checkout/issues/1436"">#1436</a>)</li>
<li>See full diff in <a href=""https://github.com/actions/checkout/compare/v3...v4"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-09-11T06:19:29Z,2023-09-11T12:32:05Z,2023-09-11T12:32:04Z,2023-09-11T12:32:04Z,cd6ba930a64a5129439606e7aae5f9c819f6c88c,,,0,1843f7a9c5bbefd7e84b1bc35c6fc931a39cf915,2951ce0215f14a8a79ecd0b5fc73a02a34b9b86b,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8169,
1627625556,PR_kwDOAMm_X85hA5hU,8514,closed,0,Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11,49699333,"Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.10 to 1.8.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.11</h2>
<h2>:nail_care: Cosmetic output improvements</h2>
<p><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> added a nudge suggesting the users storing passwords in a GitHub Actions repository secrets to switch to using secretless publishing in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/190"">pypa/gh-action-pypi-publish#190</a>. This also reminds people that PyPI will start mandating two-factor authentication to perform uploads in 2024.</p>
<h2>:memo: What's Documented</h2>
<p><a href=""https://github.com/di""><code>@​di</code></a> linked the configuration docs for Trusted Publishing in README via <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/179"">pypa/gh-action-pypi-publish#179</a>.</p>
<h2>:hammer_and_wrench: Internal dependencies</h2>
<ul>
<li>Cryptography was bumped from 41.0.3 to 41.0.6 @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/194"">pypa/gh-action-pypi-publish#194</a></li>
<li>Pip was bumped from 22.3.1 to 23.3 @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/189"">pypa/gh-action-pypi-publish#189</a></li>
<li>pre-commit linters got autoupdated @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/184"">pypa/gh-action-pypi-publish#184</a></li>
<li>Urllib3 was bumped from 2.0.3 to 2.0.7 @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/183"">pypa/gh-action-pypi-publish#183</a> and <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/185"">pypa/gh-action-pypi-publish#185</a></li>
</ul>
<h2>:muscle: New Contributors</h2>
<ul>
<li><a href=""https://github.com/di""><code>@​di</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/179"">pypa/gh-action-pypi-publish#179</a></li>
</ul>
<p><strong>:mirror: Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.10...v1.8.11"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.10...v1.8.11</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf""><code>2f6f737</code></a> Merge commit PR <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/184"">#184</a> into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/2fa448ab0cb5d361fc9e7faa3d0046366bd2db64""><code>2fa448a</code></a> Merge PRs <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/190"">#190</a>, <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/184"">#184</a>, <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/185"">#185</a>, <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/189"">#189</a> and <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/194"">#194</a> into unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/824ad317867cf757fa348a46a1a430cd9bd7ef28""><code>824ad31</code></a> Revert flake8 to v4.0.1 for WPS</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/41f3f53c7540cba18712b77660518afd98e0b65a""><code>41f3f53</code></a> Bump cryptography from 41.0.3 to 41.0.6 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/2319287e0a60524271d7d771003e897075162148""><code>2319287</code></a> twine-upload: ::error, switch nudge order</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/254a0d4ec4eacf3fd4c21bdd327fdd72c45213d9""><code>254a0d4</code></a> twine-upload: add a nudge for password auth</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/70a33caeb93cb7e19240fbec59f10b44df0c20ce""><code>70a33ca</code></a> Bump pip from 22.3.1 to 23.3 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/102f507b758434b11f3a302e53c72ebad30ebef8""><code>102f507</code></a> Bump urllib3 from 2.0.6 to 2.0.7 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/79739dc2f2bf6bcfd21ecf9af9f06bd643dbeeae""><code>79739dc</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/183"">#183</a> from pypa/dependabot/pip/requirements/urllib3-2.0.6</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/9a3f9ad5bc96111f11d014e047f1ac7dc644ff56""><code>9a3f9ad</code></a> [pre-commit.ci] pre-commit autoupdate</li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.10...v1.8.11"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.10&new-version=1.8.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-12-04T06:14:27Z,2023-12-04T21:10:15Z,2023-12-04T21:10:14Z,2023-12-04T21:10:14Z,704de5506cc0dba25692bafa36b6ca421fbab031,,,0,c5672b7918cdf91985562aa4d2f8172a484de711,62a4d0f45a4d275c32387522051bbe493414e090,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8514,
1638180396,PR_kwDOAMm_X85hpKYs,8540,closed,0,Bump actions/setup-python from 4 to 5,49699333,"Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/setup-python/releases"">actions/setup-python's releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<p>In scope of this release, we update node version runtime from node16 to node20 (<a href=""https://redirect.github.com/actions/setup-python/pull/772"">actions/setup-python#772</a>). Besides, we update dependencies to the latest versions.</p>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/setup-python/compare/v4.8.0...v5.0.0"">https://github.com/actions/setup-python/compare/v4.8.0...v5.0.0</a></p>
<h2>v4.8.0</h2>
<h2>What's Changed</h2>
<p>In scope of this release we added support for GraalPy (<a href=""https://redirect.github.com/actions/setup-python/pull/694"">actions/setup-python#694</a>). You can use this snippet to set up GraalPy:</p>
<pre lang=""yaml""><code>steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py
</code></pre>
<p>Besides, the release contains such changes as:</p>
<ul>
<li>Trim python version when reading from file by <a href=""https://github.com/FerranPares""><code>@​FerranPares</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/628"">actions/setup-python#628</a></li>
<li>Use non-deprecated versions in examples by <a href=""https://github.com/jeffwidman""><code>@​jeffwidman</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/724"">actions/setup-python#724</a></li>
<li>Change deprecation comment to past tense by <a href=""https://github.com/jeffwidman""><code>@​jeffwidman</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/723"">actions/setup-python#723</a></li>
<li>Bump <code>@​babel/traverse</code> from 7.9.0 to 7.23.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/743"">actions/setup-python#743</a></li>
<li>advanced-usage.md: Encourage the use actions/checkout@v4 by <a href=""https://github.com/cclauss""><code>@​cclauss</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/729"">actions/setup-python#729</a></li>
<li>Examples now use checkout@v4 by <a href=""https://github.com/simonw""><code>@​simonw</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/738"">actions/setup-python#738</a></li>
<li>Update actions/checkout to v4 by <a href=""https://github.com/dmitry-shibanov""><code>@​dmitry-shibanov</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/761"">actions/setup-python#761</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/FerranPares""><code>@​FerranPares</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/setup-python/pull/628"">actions/setup-python#628</a></li>
<li><a href=""https://github.com/timfel""><code>@​timfel</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/setup-python/pull/694"">actions/setup-python#694</a></li>
<li><a href=""https://github.com/jeffwidman""><code>@​jeffwidman</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/setup-python/pull/724"">actions/setup-python#724</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/setup-python/compare/v4...v4.8.0"">https://github.com/actions/setup-python/compare/v4...v4.8.0</a></p>
<h2>v4.7.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump word-wrap from 1.2.3 to 1.2.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/702"">actions/setup-python#702</a></li>
<li>Add range validation for toml files by <a href=""https://github.com/dmitry-shibanov""><code>@​dmitry-shibanov</code></a> in <a href=""https://redirect.github.com/actions/setup-python/pull/726"">actions/setup-python#726</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/setup-python/compare/v4...v4.7.1"">https://github.com/actions/setup-python/compare/v4...v4.7.1</a></p>
<h2>v4.7.0</h2>
<p>In scope of this release, the support for reading python version from pyproject.toml was added (<a href=""https://redirect.github.com/actions/setup-python/pull/669"">actions/setup-python#669</a>).</p>
<pre lang=""yaml""><code>      - name: Setup Python
        uses: actions/setup-python@v4
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/setup-python/commit/0a5c61591373683505ea898e09a3ea4f39ef2b9c""><code>0a5c615</code></a> Update action to node20 (<a href=""https://redirect.github.com/actions/setup-python/issues/772"">#772</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/0ae58361cdfd39e2950bed97a1e26aa20c3d8955""><code>0ae5836</code></a> Add example of GraalPy to docs (<a href=""https://redirect.github.com/actions/setup-python/issues/773"">#773</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/b64ffcaf5b410884ad320a9cfac8866006a109aa""><code>b64ffca</code></a> update actions/checkout to v4 (<a href=""https://redirect.github.com/actions/setup-python/issues/761"">#761</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/8d2896179abf658742de432b3f203d2c2d86a587""><code>8d28961</code></a> Examples now use checkout@v4 (<a href=""https://redirect.github.com/actions/setup-python/issues/738"">#738</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/7bc6abb01e0555719edc2dbca70a2fde309e5e56""><code>7bc6abb</code></a> advanced-usage.md: Encourage the use actions/checkout@v4 (<a href=""https://redirect.github.com/actions/setup-python/issues/729"">#729</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/e8111cec9d3dc15220d8a3b638f08419f57b906a""><code>e8111ce</code></a> Bump <code>@​babel/traverse</code> from 7.9.0 to 7.23.2 (<a href=""https://redirect.github.com/actions/setup-python/issues/743"">#743</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/a00ea43da65e7c04d2bdae58b3afecd77057eb9e""><code>a00ea43</code></a> add fix for graalpy ci (<a href=""https://redirect.github.com/actions/setup-python/issues/741"">#741</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/8635b1ccc5934e73ed3510980fd2e7790b85839b""><code>8635b1c</code></a> Change deprecation comment to past tense (<a href=""https://redirect.github.com/actions/setup-python/issues/723"">#723</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/f6cc428f535856f9c23558d01765a42a4d6cf758""><code>f6cc428</code></a> Use non-deprecated versions in examples (<a href=""https://redirect.github.com/actions/setup-python/issues/724"">#724</a>)</li>
<li><a href=""https://github.com/actions/setup-python/commit/5f2af211d616f86005883b44826180b21abb4060""><code>5f2af21</code></a> Add GraalPy support (<a href=""https://redirect.github.com/actions/setup-python/issues/694"">#694</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/actions/setup-python/compare/v4...v5"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-python&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-12-11T06:50:24Z,2023-12-11T07:56:07Z,2023-12-11T07:56:06Z,2023-12-11T07:56:06Z,967ef91c4b983e5a99980fbe118a9323d3b1792d,,,0,288543df719025eb2e8f0f51561b89d3bce45a71,8d168db533715767042676d0dfd1b4563ed0fb61,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8540,
1647836112,PR_kwDOAMm_X85iN_vQ,8556,closed,0,Bump actions/download-artifact from 3 to 4,49699333,"Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/download-artifact/releases"">actions/download-artifact's releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.</p>
<p>For more information, see the <a href=""https://github.com/actions/toolkit/tree/main/packages/artifact""><code>@​actions/artifact</code></a> documentation.</p>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/bflad""><code>@​bflad</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/download-artifact/pull/194"">actions/download-artifact#194</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/download-artifact/compare/v3...v4.0.0"">https://github.com/actions/download-artifact/compare/v3...v4.0.0</a></p>
<h2>v3.0.2</h2>
<ul>
<li>Bump <code>@actions/artifact</code> to v1.1.1 - <a href=""https://redirect.github.com/actions/download-artifact/pull/195"">actions/download-artifact#195</a></li>
<li>Fixed a bug in Node16 where if an HTTP download finished too quickly (&lt;1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet <a href=""hhttps://redirect.github.com/actions/toolkit/pull/1278"">actions/toolkit#1278</a></li>
</ul>
<h2>v3.0.1</h2>
<ul>
<li><a href=""https://redirect.github.com/actions/download-artifact/pull/178"">Bump <code>@​actions/core</code> to 1.10.0</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/download-artifact/commit/7a1cd3216ca9260cd8022db641d960b1db4d1be4""><code>7a1cd32</code></a> Merge pull request <a href=""https://redirect.github.com/actions/download-artifact/issues/246"">#246</a> from actions/v4-beta</li>
<li><a href=""https://github.com/actions/download-artifact/commit/8f32874a49903ea488c5e7d476a9173e8706f409""><code>8f32874</code></a> licensed cache</li>
<li><a href=""https://github.com/actions/download-artifact/commit/b5ff8444b1c4fcec8131f3cb1ddade813ddfacb1""><code>b5ff844</code></a> Merge pull request <a href=""https://redirect.github.com/actions/download-artifact/issues/245"">#245</a> from actions/robherley/v4-documentation</li>
<li><a href=""https://github.com/actions/download-artifact/commit/f07a0f73f51b3f1d41667c782c821b9667da9d19""><code>f07a0f7</code></a> Update README.md</li>
<li><a href=""https://github.com/actions/download-artifact/commit/7226129829bb686fdff47bd63bbd0d1373993a84""><code>7226129</code></a> update test workflow to use different artifact names for matrix</li>
<li><a href=""https://github.com/actions/download-artifact/commit/ada9446619b84dd8a557aaaec3b79b58c4986cdf""><code>ada9446</code></a> update docs and bump <code>@​actions/artifact</code></li>
<li><a href=""https://github.com/actions/download-artifact/commit/7eafc8b729ba790ce8f2cee54be8ad6257af4c7c""><code>7eafc8b</code></a> Merge pull request <a href=""https://redirect.github.com/actions/download-artifact/issues/244"">#244</a> from actions/robherley/bump-toolkit</li>
<li><a href=""https://github.com/actions/download-artifact/commit/3132d12662b5915f20cdbf449465896962101abf""><code>3132d12</code></a> consume latest toolkit</li>
<li><a href=""https://github.com/actions/download-artifact/commit/5be1d3867182a382bc59f2775e002595f487aa88""><code>5be1d38</code></a> Merge pull request <a href=""https://redirect.github.com/actions/download-artifact/issues/243"">#243</a> from actions/robherley/v4-beta-updates</li>
<li><a href=""https://github.com/actions/download-artifact/commit/465b526e63559575a64716cdbb755bc78dfb263b""><code>465b526</code></a> consume latest <code>@​actions/toolkit</code></li>
<li>Additional commits viewable in <a href=""https://github.com/actions/download-artifact/compare/v3...v4"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/download-artifact&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-12-18T06:08:46Z,2024-01-03T21:57:18Z,2024-01-03T21:57:17Z,2024-01-03T21:57:17Z,1ebd3dd0bbc692fa4b1182d2ad3219cc5428806a,,,0,3646d2b130f8912acdfe9d68c68a1634a697ce6a,41d33f52f709a765fb0dbfb5b9b4f5ea55173053,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8556,
1647836163,PR_kwDOAMm_X85iN_wD,8557,closed,0,Bump actions/upload-artifact from 3 to 4,49699333,"Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/actions/upload-artifact/releases"">actions/upload-artifact's releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.</p>
<p>For more information, see the <a href=""https://github.com/actions/toolkit/tree/main/packages/artifact""><code>@​actions/artifact</code></a> documentation.</p>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/vmjoseph""><code>@​vmjoseph</code></a> made their first contribution in <a href=""https://redirect.github.com/actions/upload-artifact/pull/464"">actions/upload-artifact#464</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/upload-artifact/compare/v3...v4.0.0"">https://github.com/actions/upload-artifact/compare/v3...v4.0.0</a></p>
<h2>v3.1.3</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(github): remove trailing whitespaces by <a href=""https://github.com/ljmf00""><code>@​ljmf00</code></a> in <a href=""https://redirect.github.com/actions/upload-artifact/pull/313"">actions/upload-artifact#313</a></li>
<li>Bump <code>@​actions/artifact</code> version to v1.1.2 by <a href=""https://github.com/bethanyj28""><code>@​bethanyj28</code></a> in <a href=""https://redirect.github.com/actions/upload-artifact/pull/436"">actions/upload-artifact#436</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/actions/upload-artifact/compare/v3...v3.1.3"">https://github.com/actions/upload-artifact/compare/v3...v3.1.3</a></p>
<h2>v3.1.2</h2>
<ul>
<li>Update all <code>@actions/*</code> NPM packages to their latest versions- <a href=""https://redirect.github.com/actions/upload-artifact/issues/374"">#374</a></li>
<li>Update all dev dependencies to their most recent versions - <a href=""https://redirect.github.com/actions/upload-artifact/issues/375"">#375</a></li>
</ul>
<h2>v3.1.1</h2>
<ul>
<li>Update actions/core package to latest version to remove <code>set-output</code> deprecation warning <a href=""https://redirect.github.com/actions/upload-artifact/issues/351"">#351</a></li>
</ul>
<h2>v3.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/artifact</code> to v1.1.0 (<a href=""https://redirect.github.com/actions/upload-artifact/pull/327"">actions/upload-artifact#327</a>)
<ul>
<li>Adds checksum headers on artifact upload (<a href=""https://redirect.github.com/actions/toolkit/pull/1095"">actions/toolkit#1095</a>) (<a href=""https://redirect.github.com/actions/toolkit/pull/1063"">actions/toolkit#1063</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/actions/upload-artifact/commit/c7d193f32edcb7bfad88892161225aeda64e9392""><code>c7d193f</code></a> Merge pull request <a href=""https://redirect.github.com/actions/upload-artifact/issues/466"">#466</a> from actions/v4-beta</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/13131bb095770b4070a7477c3cd2d96e1c16d9f4""><code>13131bb</code></a> licensed cache</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/4a6c273b9834f66a1d05c170dc3f80f9cdb9def1""><code>4a6c273</code></a> Merge branch 'main' into v4-beta</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/f391bb91a3d3118aeca171c365bb319ece276b37""><code>f391bb9</code></a> Merge pull request <a href=""https://redirect.github.com/actions/upload-artifact/issues/465"">#465</a> from actions/robherley/v4-documentation</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/9653d03c4b74c32144e02dae644fea70e079d4b3""><code>9653d03</code></a> Apply suggestions from code review</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/875b63076402f25ef9d52c294c86ba4f97810575""><code>875b630</code></a> add limitations section</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/ecb21463e93740a6be75c3116242169bfdbcb15a""><code>ecb2146</code></a> add compression example</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/5e7604f84a055838f64ed68bb9904751523081ae""><code>5e7604f</code></a> trim some repeated info</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/d6437d07581fe318a364512e6cf6b1dca6b4f92c""><code>d6437d0</code></a> naming</li>
<li><a href=""https://github.com/actions/upload-artifact/commit/1b561557037b4957d7d184e9aac02bec86c771eb""><code>1b56155</code></a> s/v4-beta/v4/g</li>
<li>Additional commits viewable in <a href=""https://github.com/actions/upload-artifact/compare/v3...v4"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>",2023-12-18T06:08:49Z,2024-01-04T22:40:26Z,2024-01-04T22:40:25Z,2024-01-04T22:40:25Z,4336b2eacbc9f8060ac86a57e4087709aec11bd5,,,0,bca5cdf20d5ee886fd5bacaf463ff7543e44dd0b,5f1f78fc3f3348dc1b85a6fff3c9ff3c25d5fa25,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8557,
1699305451,PR_kwDOAMm_X85lSVfr,8678,closed,0,Bump the actions group with 1 update,49699333,"Bumps the actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).

Updates `codecov/codecov-action` from 3.1.4 to 3.1.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v3.1.5</h2>
<h2>What's Changed</h2>
<ul>
<li>action.yml: Update to Node.js 20 by <a href=""https://github.com/hallabro""><code>@​hallabro</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1228"">codecov/codecov-action#1228</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/hallabro""><code>@​hallabro</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1228"">codecov/codecov-action#1228</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v3.1.4...v3.1.5"">https://github.com/codecov/codecov-action/compare/v3.1.4...v3.1.5</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>4.0.0-beta.2</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/1085"">#1085</a> not adding -n if empty to do-upload command</li>
</ul>
<h2>4.0.0-beta.1</h2>
<p><code>v4</code> represents a move from the <a href=""https://github.com/codecov/uploader"">universal uploader</a> to the <a href=""https://github.com/codecov/codecov-cli"">Codecov CLI</a>. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.</p>
<h3>Breaking Changes</h3>
<ul>
<li>No current support for <code>aarch64</code> and <code>alpine</code> architectures.</li>
<li>Tokenless uploading is unsuported</li>
<li>Various arguments to the Action have been removed</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0""><code>4fe8c5f</code></a> chore(release): bump to 3.1.5</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/9140fdcf549f069e1ad6cc2bf17ee0251b024bfb""><code>9140fdc</code></a> action.yml: Update to Node.js 20 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1228"">#1228</a>)</li>
<li>See full diff in <a href=""https://github.com/codecov/codecov-action/compare/v3.1.4...v3.1.5"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=3.1.4&new-version=3.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>",2024-01-29T06:37:28Z,2024-01-29T19:27:12Z,2024-01-29T19:27:11Z,2024-01-29T19:27:11Z,ee68a940d9e72e98aa118d3db3a82e139217ec6c,,,0,ad75fe18565158692954a71dccc0a15275b3daee,e22b47511f4188e2203c5753de4a0a36094c2e83,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8678,
1710949008,PR_kwDOAMm_X85l-wKQ,8706,closed,0,Bump the actions group with 1 update,49699333,"Bumps the actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).

Updates `codecov/codecov-action` from 3.1.5 to 4.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v4.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update README.md by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1243"">codecov/codecov-action#1243</a></li>
<li>Add all args by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1245"">codecov/codecov-action#1245</a></li>
<li>fix: show both token uses in readme by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1250"">codecov/codecov-action#1250</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v4.0.0...v4.0.1"">https://github.com/codecov/codecov-action/compare/v4.0.0...v4.0.1</a></p>
<h2>v4.0.0</h2>
<p>v4 of the Codecov Action uses the <a href=""https://docs.codecov.com/docs/the-codecov-cli"">CLI</a> as the underlying upload. The CLI has helped to power new features including local upload, the global upload token, and new upcoming features.</p>
<h2>Breaking Changes</h2>
<ul>
<li>The Codecov Action runs as a <code>node20</code> action due to <code>node16</code> deprecation. See <a href=""https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/"">this post from GitHub</a> on how to migrate.</li>
<li>Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This <a href=""https://docs.codecov.com/docs/adding-the-codecov-token#github-actions"">doc</a> shows instructions on how to add the Codecov token.</li>
<li>OS platforms have been added, though some may not be automatically detected. To see a list of platforms, see our <a href=""https://cli.codecov.io"">CLI download page</a></li>
<li>Various arguments to the Action have been changed. Please be aware that the arguments match with the CLI's needs</li>
</ul>
<p><code>v3</code> versions and below will not have access to CLI features (e.g. global upload token, ATS).</p>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump openpgp from 5.8.0 to 5.9.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/985"">codecov/codecov-action#985</a></li>
<li>build(deps): bump actions/checkout from 3.0.0 to 3.5.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1000"">codecov/codecov-action#1000</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1006"">codecov/codecov-action#1006</a></li>
<li>build(deps): bump tough-cookie from 4.0.0 to 4.1.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1013"">codecov/codecov-action#1013</a></li>
<li>build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1024"">codecov/codecov-action#1024</a></li>
<li>build(deps): bump node-fetch from 3.3.1 to 3.3.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1031"">codecov/codecov-action#1031</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 20.1.4 to 20.4.5 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1032"">codecov/codecov-action#1032</a></li>
<li>build(deps): bump github/codeql-action from 1.0.26 to 2.21.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1033"">codecov/codecov-action#1033</a></li>
<li>build commit,report and upload args based on codecovcli by <a href=""https://github.com/dana-yaish""><code>@​dana-yaish</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/943"">codecov/codecov-action#943</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 20.4.5 to 20.5.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1055"">codecov/codecov-action#1055</a></li>
<li>build(deps): bump github/codeql-action from 2.21.2 to 2.21.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1051"">codecov/codecov-action#1051</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 20.5.3 to 20.5.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1058"">codecov/codecov-action#1058</a></li>
<li>chore(deps): update outdated deps by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1059"">codecov/codecov-action#1059</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 20.5.4 to 20.5.6 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1060"">codecov/codecov-action#1060</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 6.4.1 to 6.5.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1065"">codecov/codecov-action#1065</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 6.4.1 to 6.5.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1064"">codecov/codecov-action#1064</a></li>
<li>build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1063"">codecov/codecov-action#1063</a></li>
<li>build(deps-dev): bump eslint from 8.47.0 to 8.48.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1061"">codecov/codecov-action#1061</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 20.5.6 to 20.5.7 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1062"">codecov/codecov-action#1062</a></li>
<li>build(deps): bump openpgp from 5.9.0 to 5.10.1 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1066"">codecov/codecov-action#1066</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 20.5.7 to 20.5.9 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1070"">codecov/codecov-action#1070</a></li>
<li>build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1069"">codecov/codecov-action#1069</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 6.5.0 to 6.6.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1072"">codecov/codecov-action#1072</a></li>
<li>Update README.md by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1073"">codecov/codecov-action#1073</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 6.5.0 to 6.6.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1071"">codecov/codecov-action#1071</a></li>
<li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.36.1 to 0.38.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1074"">codecov/codecov-action#1074</a></li>
<li>build(deps): bump <code>@​actions/core</code> from 1.10.0 to 1.10.1 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1081"">codecov/codecov-action#1081</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 6.6.0 to 6.7.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1080"">codecov/codecov-action#1080</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>4.0.0-beta.2</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/1085"">#1085</a> not adding -n if empty to do-upload command</li>
</ul>
<h2>4.0.0-beta.1</h2>
<p><code>v4</code> represents a move from the <a href=""https://github.com/codecov/uploader"">universal uploader</a> to the <a href=""https://github.com/codecov/codecov-cli"">Codecov CLI</a>. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.</p>
<h3>Breaking Changes</h3>
<ul>
<li>No current support for <code>aarch64</code> and <code>alpine</code> architectures.</li>
<li>Tokenless uploading is unsuported</li>
<li>Various arguments to the Action have been removed</li>
</ul>
<h2>3.1.4</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/967"">#967</a> Fix typo in README.md</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/971"">#971</a> fix: add back in working dir</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/969"">#969</a> fix: CLI option names for uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/970"">#970</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.12 to 18.16.3</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/979"">#979</a> build(deps-dev): bump <code>@​types/node</code> from 20.1.0 to 20.1.2</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/981"">#981</a> build(deps-dev): bump <code>@​types/node</code> from 20.1.2 to 20.1.4</li>
</ul>
<h2>3.1.3</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/960"">#960</a> fix: allow for aarch64 build</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/957"">#957</a> build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/958"">#958</a> build(deps): bump openpgp from 5.7.0 to 5.8.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/959"">#959</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.10 to 18.15.12</li>
</ul>
<h2>3.1.2</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/718"">#718</a> Update README.md</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/851"">#851</a> Remove unsupported path_to_write_report argument</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/898"">#898</a> codeql-analysis.yml</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/901"">#901</a> Update README to contain correct information - inputs and negate feature</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/955"">#955</a> fix: add in all the extra arguments for uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/819"">#819</a> build(deps): bump openpgp from 5.4.0 to 5.5.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/835"">#835</a> build(deps): bump node-fetch from 3.2.4 to 3.2.10</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/840"">#840</a> build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/841"">#841</a> build(deps): bump <code>@​actions/core</code> from 1.9.1 to 1.10.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/843"">#843</a> build(deps): bump <code>@​actions/github</code> from 5.0.3 to 5.1.1</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/869"">#869</a> build(deps): bump node-fetch from 3.2.10 to 3.3.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/872"">#872</a> build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/879"">#879</a> build(deps): bump decode-uri-component from 0.2.0 to 0.2.2</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/e0b68c6749509c5f83f984dd99a76a1c1a231044""><code>e0b68c6</code></a> fix: show both token uses in readme (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1250"">#1250</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/1f9f5573d12d0967fe14551018a4b25610226551""><code>1f9f557</code></a> Add all args (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1245"">#1245</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/09686fcfcb6453414a5acd7f3a939670a7a77826""><code>09686fc</code></a> Update README.md (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1243"">#1243</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/f30e4959ba63075080d4f7f90cacc18d9f3fafd7""><code>f30e495</code></a> fix: update action.yml (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1240"">#1240</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/a7b945cea47ad44d8340fae2b004cb982191264f""><code>a7b945c</code></a> fix: allow for other archs (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1239"">#1239</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/98ab2c591b94478f4c3606d68ff73601df85ec43""><code>98ab2c5</code></a> Update package.json (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1238"">#1238</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/43235cc5aeeafd8aeb836fe7d647599acead161c""><code>43235cc</code></a> Update README.md (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1237"">#1237</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/0cf8684c821546a4e0c8c9a4cf4f21a7a0c5014b""><code>0cf8684</code></a> chore(ci): bump to node20 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1236"">#1236</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/8e1e730371bf82c744e8ca9aa469e2b7011542ce""><code>8e1e730</code></a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 6.19.1 to 6.20.0 ...</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/61293af0e8288c75266030376a088c781ec81c18""><code>61293af</code></a> build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 6.19.1 to 6.20.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1235"">#1235</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/codecov/codecov-action/compare/v3.1.5...v4.0.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=3.1.5&new-version=4.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>",2024-02-05T06:04:43Z,2024-02-06T16:02:56Z,2024-02-06T16:02:55Z,2024-02-06T16:02:55Z,f33a632bf87ec29dd9346f9b01ad4eec2194f72a,,,0,b37982b404d83f31599c7ee53a51363158388813,618015293f6b58eabc586da02a69de846fcbafd5,CONTRIBUTOR,"{""enabled_by"": {""login"": ""max-sixty"", ""id"": 5635139, ""node_id"": ""MDQ6VXNlcjU2MzUxMzk="", ""avatar_url"": ""https://avatars.githubusercontent.com/u/5635139?v=4"", ""gravatar_id"": """", ""url"": ""https://api.github.com/users/max-sixty"", ""html_url"": ""https://github.com/max-sixty"", ""followers_url"": ""https://api.github.com/users/max-sixty/followers"", ""following_url"": ""https://api.github.com/users/max-sixty/following{/other_user}"", ""gists_url"": ""https://api.github.com/users/max-sixty/gists{/gist_id}"", ""starred_url"": ""https://api.github.com/users/max-sixty/starred{/owner}{/repo}"", ""subscriptions_url"": ""https://api.github.com/users/max-sixty/subscriptions"", ""organizations_url"": ""https://api.github.com/users/max-sixty/orgs"", ""repos_url"": ""https://api.github.com/users/max-sixty/repos"", ""events_url"": ""https://api.github.com/users/max-sixty/events{/privacy}"", ""received_events_url"": ""https://api.github.com/users/max-sixty/received_events"", ""type"": ""User"", ""site_admin"": false}, ""merge_method"": ""squash"", ""commit_title"": ""Bump the actions group with 1 update (#8706)"", ""commit_message"": ""Bumps the actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).\r\n\r\n\r\nUpdates `codecov/codecov-action` from 3.1.5 to 4.0.1\r\n- [Release notes](https://github.com/codecov/codecov-action/releases)\r\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/codecov/codecov-action/compare/v3.1.5...v4.0.1)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: codecov/codecov-action\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-major\r\n  dependency-group: actions\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>""}",13221727,https://github.com/pydata/xarray/pull/8706,
1742677391,PR_kwDOAMm_X85n3yWP,8785,closed,0,Bump the actions group with 2 updates,49699333,"Bumps the actions group with 2 updates: [codecov/codecov-action](https://github.com/codecov/codecov-action) and [scientific-python/upload-nightly-action](https://github.com/scientific-python/upload-nightly-action).

Updates `codecov/codecov-action` from 4.0.1 to 4.0.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v4.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Update README.md by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1251"">codecov/codecov-action#1251</a></li>
<li>build(deps-dev): bump <code>@​types/jest</code> from 29.5.11 to 29.5.12 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1257"">codecov/codecov-action#1257</a></li>
<li>build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1266"">codecov/codecov-action#1266</a></li>
<li>Escape pipes in table of arguments by <a href=""https://github.com/jwodder""><code>@​jwodder</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1265"">codecov/codecov-action#1265</a></li>
<li>Add link to docs on Dependabot secrets by <a href=""https://github.com/ianlewis""><code>@​ianlewis</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1260"">codecov/codecov-action#1260</a></li>
<li>fix: working-directory input for all stages by <a href=""https://github.com/Bo98""><code>@​Bo98</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1272"">codecov/codecov-action#1272</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 6.20.0 to 6.21.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1271"">codecov/codecov-action#1271</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 6.20.0 to 6.21.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1269"">codecov/codecov-action#1269</a></li>
<li>build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1298"">codecov/codecov-action#1298</a></li>
<li>Use updated syntax for GitHub Markdown notes by <a href=""https://github.com/jamacku""><code>@​jamacku</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1300"">codecov/codecov-action#1300</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 6.21.0 to 7.0.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1290"">codecov/codecov-action#1290</a></li>
<li>build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1286"">codecov/codecov-action#1286</a></li>
<li>chore(release): bump to 4.0.2 by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1302"">codecov/codecov-action#1302</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/jwodder""><code>@​jwodder</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1265"">codecov/codecov-action#1265</a></li>
<li><a href=""https://github.com/ianlewis""><code>@​ianlewis</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1260"">codecov/codecov-action#1260</a></li>
<li><a href=""https://github.com/Bo98""><code>@​Bo98</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1272"">codecov/codecov-action#1272</a></li>
<li><a href=""https://github.com/jamacku""><code>@​jamacku</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1300"">codecov/codecov-action#1300</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v4.0.1...v4.0.2"">https://github.com/codecov/codecov-action/compare/v4.0.1...v4.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/0cfda1dd0a4ad9efc75517f399d859cd1ea4ced1""><code>0cfda1d</code></a> chore(release): bump to 4.0.2 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1302"">#1302</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/7d3a55eb5ecdfe4abc7d47043c527908f5f9ae09""><code>7d3a55e</code></a> build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1286"">#1286</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/fe84a0b3c07e94ba49e9c87299d78d0116594782""><code>fe84a0b</code></a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 6.21.0 to 7.0.0 (...</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/e12c9402c4274f2ab3fd378ebbd6d68109363a55""><code>e12c940</code></a> Use updated syntax for GitHub Markdown notes (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1300"">#1300</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/ef7f8a5d3c2b37427f931fd83cab3237e2b4958a""><code>ef7f8a5</code></a> build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1298"">#1298</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/b8a1d6a4243f1ff280a5533872c4d80179cc5b4a""><code>b8a1d6a</code></a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 6.20.0 to 6.21.0 ...</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/6ef7ea4c746b6a6025ef6fbb8dfeaa546bc46794""><code>6ef7ea4</code></a> build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 6.20.0 to 6.21.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1271"">#1271</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/f62c5eebfe9df5cfe9d56fd86ec925442fe3c214""><code>f62c5ee</code></a> fix: working-directory input for all stages (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1272"">#1272</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/fdbfa4b8899ee1f727543c9079e8ca54d1133a0f""><code>fdbfa4b</code></a> Add link to docs on Dependabot secrets (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1260"">#1260</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/9855cf7bd15a633568e00a5c51e9e8aee7e40529""><code>9855cf7</code></a> Escape pipes in table of arguments (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1265"">#1265</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/codecov/codecov-action/compare/v4.0.1...v4.0.2"">compare view</a></li>
</ul>
</details>
<br />

Updates `scientific-python/upload-nightly-action` from 0.3.0 to 0.5.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/scientific-python/upload-nightly-action/releases"">scientific-python/upload-nightly-action's releases</a>.</em></p>
<blockquote>
<h2>0.5.0</h2>
<p><code>0.5.0</code> has the same features as <a href=""https://github.com/scientific-python/upload-nightly-action/releases/tag/0.4.0"">release <code>0.4.0</code></a> but achieves them with fewer dependencies by updating <code>anaconda-client</code> to <a href=""https://github.com/Anaconda-Platform/anaconda-client/releases/tag/1.12.3""><code>v1.12.3</code></a> to take advantage of upstream fixes that <a href=""https://github.com/scientific-python/upload-nightly-action/releases/tag/0.4.0"">release <code>0.4.0</code></a> provided locally in the GitHub Action. The version of CPython used is also updated to <code>3.12</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>DOC: Update action commit SHA to the 0.4.0 tag by <a href=""https://github.com/matthewfeickert""><code>@​matthewfeickert</code></a> in <a href=""https://redirect.github.com/scientific-python/upload-nightly-action/pull/66"">scientific-python/upload-nightly-action#66</a></li>
<li>ENH: Update to anaconda-client v1.12.3 and simplify dependencies by <a href=""https://github.com/matthewfeickert""><code>@​matthewfeickert</code></a> in <a href=""https://redirect.github.com/scientific-python/upload-nightly-action/pull/67"">scientific-python/upload-nightly-action#67</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/scientific-python/upload-nightly-action/compare/0.4.0...0.5.0"">https://github.com/scientific-python/upload-nightly-action/compare/0.4.0...0.5.0</a></p>
<h2>0.4.0</h2>
<p><code>0.4.0</code> adds an additional guard to ensure that projects that:</p>
<ul>
<li>Already have the package name exist on the target index</li>
<li>Only have one version of the package on the target index</li>
<li>Only have one distribution file for that package</li>
</ul>
<p>won't remove the project from the index while trying to upload to it. This most commonly guards no arch wheels that don't include version control system information in the filename that are overriding the same wheel filename in place. c.f. <a href=""https://redirect.github.com/Anaconda-Platform/anaconda-client/issues/702"">Anaconda-Platform/anaconda-client#702</a> for more informaiton.</p>
<p>No API changes are required to move from <a href=""https://github.com/scientific-python/upload-nightly-action/releases/tag/0.3.0""><code>0.3.0</code></a> to <code>0.4.0</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>DOC: Update action commit SHA to the 0.3.0 tag by <a href=""https://github.com/matthewfeickert""><code>@​matthewfeickert</code></a> in <a href=""https://redirect.github.com/scientific-python/upload-nightly-action/pull/56"">scientific-python/upload-nightly-action#56</a></li>
<li>CI: Group dependabot updates by <a href=""https://github.com/matthewfeickert""><code>@​matthewfeickert</code></a> in <a href=""https://redirect.github.com/scientific-python/upload-nightly-action/pull/59"">scientific-python/upload-nightly-action#59</a></li>
<li>fix: Guard against removing package while uploading to it by <a href=""https://github.com/matthewfeickert""><code>@​matthewfeickert</code></a> in <a href=""https://redirect.github.com/scientific-python/upload-nightly-action/pull/64"">scientific-python/upload-nightly-action#64</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/scientific-python/upload-nightly-action/compare/0.3.0...0.4.0"">https://github.com/scientific-python/upload-nightly-action/compare/0.3.0...0.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/scientific-python/upload-nightly-action/commit/b67d7fcc0396e1128a474d1ab2b48aa94680f9fc""><code>b67d7fc</code></a> ENH: Update to anaconda-client v1.12.3 and simplify dependencies (<a href=""https://redirect.github.com/scientific-python/upload-nightly-action/issues/67"">#67</a>)</li>
<li><a href=""https://github.com/scientific-python/upload-nightly-action/commit/2c7042c3f27f5e3b8626afb090bb73ece46b485f""><code>2c7042c</code></a> DOC: Update action commit SHA to the 0.4.0 tag (<a href=""https://redirect.github.com/scientific-python/upload-nightly-action/issues/66"">#66</a>)</li>
<li><a href=""https://github.com/scientific-python/upload-nightly-action/commit/95f7bf6a22281b8072fae929429dd0408f09ea63""><code>95f7bf6</code></a> fix: Guard against removing package while uploading to it (<a href=""https://redirect.github.com/scientific-python/upload-nightly-action/issues/64"">#64</a>)</li>
<li><a href=""https://github.com/scientific-python/upload-nightly-action/commit/66bc1b6beedff9619cdff8f3361a06802c8f5874""><code>66bc1b6</code></a> CI: Group dependabot updates (<a href=""https://redirect.github.com/scientific-python/upload-nightly-action/issues/59"">#59</a>)</li>
<li><a href=""https://github.com/scientific-python/upload-nightly-action/commit/6f1e2b99c3148480df25d296c27ae58c446ad5d0""><code>6f1e2b9</code></a> DOC: Update action commit SHA to the 0.3.0 tag (<a href=""https://redirect.github.com/scientific-python/upload-nightly-action/issues/56"">#56</a>)</li>
<li>See full diff in <a href=""https://github.com/scientific-python/upload-nightly-action/compare/6e9304f7a3a5501c6f98351537493ec898728299...b67d7fcc0396e1128a474d1ab2b48aa94680f9fc"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>",2024-02-26T06:29:23Z,2024-02-26T07:00:03Z,2024-02-26T07:00:02Z,2024-02-26T07:00:02Z,0ec19123dffb4e4fbd83be21de9bbc57159e2d55,,,0,91fcb26ed25c64748f51b84a3578c6e46104300e,f63ec87476db065a58d423670b8829abc8d1e746,CONTRIBUTOR,"{""enabled_by"": {""login"": ""max-sixty"", ""id"": 5635139, ""node_id"": ""MDQ6VXNlcjU2MzUxMzk="", ""avatar_url"": ""https://avatars.githubusercontent.com/u/5635139?v=4"", ""gravatar_id"": """", ""url"": ""https://api.github.com/users/max-sixty"", ""html_url"": ""https://github.com/max-sixty"", ""followers_url"": ""https://api.github.com/users/max-sixty/followers"", ""following_url"": ""https://api.github.com/users/max-sixty/following{/other_user}"", ""gists_url"": ""https://api.github.com/users/max-sixty/gists{/gist_id}"", ""starred_url"": ""https://api.github.com/users/max-sixty/starred{/owner}{/repo}"", ""subscriptions_url"": ""https://api.github.com/users/max-sixty/subscriptions"", ""organizations_url"": ""https://api.github.com/users/max-sixty/orgs"", ""repos_url"": ""https://api.github.com/users/max-sixty/repos"", ""events_url"": ""https://api.github.com/users/max-sixty/events{/privacy}"", ""received_events_url"": ""https://api.github.com/users/max-sixty/received_events"", ""type"": ""User"", ""site_admin"": false}, ""merge_method"": ""squash"", ""commit_title"": ""Bump the actions group with 2 updates (#8785)"", ""commit_message"": ""Bumps the actions group with 2 updates: [codecov/codecov-action](https://github.com/codecov/codecov-action) and [scientific-python/upload-nightly-action](https://github.com/scientific-python/upload-nightly-action).\r\n\r\n\r\nUpdates `codecov/codecov-action` from 4.0.1 to 4.0.2\r\n- [Release notes](https://github.com/codecov/codecov-action/releases)\r\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/codecov/codecov-action/compare/v4.0.1...v4.0.2)\r\n\r\nUpdates `scientific-python/upload-nightly-action` from 0.3.0 to 0.5.0\r\n- [Release notes](https://github.com/scientific-python/upload-nightly-action/releases)\r\n- [Commits](https://github.com/scientific-python/upload-nightly-action/compare/6e9304f7a3a5501c6f98351537493ec898728299...b67d7fcc0396e1128a474d1ab2b48aa94680f9fc)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: codecov/codecov-action\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: actions\r\n- dependency-name: scientific-python/upload-nightly-action\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: actions\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>""}",13221727,https://github.com/pydata/xarray/pull/8785,
1753987201,PR_kwDOAMm_X85oi7iB,8804,closed,0,Bump the actions group with 2 updates,49699333,"Bumps the actions group with 2 updates: [codecov/codecov-action](https://github.com/codecov/codecov-action) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish).

Updates `codecov/codecov-action` from 4.0.2 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: set safe directory by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1304"">codecov/codecov-action#1304</a></li>
<li>build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1306"">codecov/codecov-action#1306</a></li>
<li>build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1305"">codecov/codecov-action#1305</a></li>
<li>chore(release): v4.1.0 by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1307"">codecov/codecov-action#1307</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v4.0.2...v4.1.0"">https://github.com/codecov/codecov-action/compare/v4.0.2...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/54bcd8715eee62d40e33596ef5e8f0f48dbbccab""><code>54bcd87</code></a> chore(release): v4.1.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1307"">#1307</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/8ba77ef8d7b55bda0f69297c841058adf8459f89""><code>8ba77ef</code></a> build(deps-dev): bump eslint from 8.56.0 to 8.57.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1305"">#1305</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/c60aa801e394788e00c8c837b5e250085fbe5df8""><code>c60aa80</code></a> build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1306"">#1306</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/2fc4847d3f22c2ca7f5bab5504f530b55d4a9768""><code>2fc4847</code></a> fix: set safe directory (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1304"">#1304</a>)</li>
<li>See full diff in <a href=""https://github.com/codecov/codecov-action/compare/v4.0.2...v4.1.0"">compare view</a></li>
</ul>
</details>
<br />

Updates `pypa/gh-action-pypi-publish` from 1.8.11 to 1.8.12
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.12</h2>
<h2>💅 Cosmetic Output Improvements</h2>
<p><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a><a href=""https://github.com/sponsors/woodruffw"">💰</a> replaced the notice annotations with simplified debug messages related to authentication methanism selection via <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/196"">#196</a>. The also improved the error clarity during OIDC exchange on PRs from forks via  <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/203"">#203</a>.</p>
<h2>📝 What's Documented</h2>
<p><a href=""https://github.com/virtuald""><code>@​virtuald</code></a><a href=""https://github.com/sponsors/virtuald"">💰</a> updated the docs and pointer messages were updated to mention that reusable workflows aren't supported right now in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/186"">#186</a> and <a href=""https://github.com/xuanzhi33""><code>@​xuanzhi33</code></a><a href=""https://github.com/sponsors/xuanzhi33"">💰</a> later corrected the markdown syntax there via <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/216"">#216</a>.</p>
<h2>🛠️ Internal Dependencies</h2>
<ul>
<li>pre-commit linters got autoupdated @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/204"">#204</a></li>
<li>Cryptography was bumped from 41.0.6 to 42.0.4 @ <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/210"">#210</a>, <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/213"">#213</a> and <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/214"">#214</a></li>
</ul>
<h2>⚙️  Secret Stuff</h2>
<p><a href=""https://github.com/woodruffw""><code>@​woodruffw</code></a> proactively updated the OIDC minting API endpoint used during the exchange via <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/206"">#206</a>. Nothing you should be too concerned about, promise!</p>
<h2>💪 New Contributors</h2>
<ul>
<li><a href=""https://github.com/virtuald""><code>@​virtuald</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/186"">pypa/gh-action-pypi-publish#186</a></li>
<li><a href=""https://github.com/xuanzhi33""><code>@​xuanzhi33</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/216"">pypa/gh-action-pypi-publish#216</a></li>
</ul>
<p><strong>🪞 Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.11...v1.8.12"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.11...v1.8.12</a></p>
<p><strong>:man_beard: Release Manager:</strong> <a href=""https://github.com/sponsors/webknjaz""><code>@​webknjaz 🇺🇦</code></a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/e53eb8b103ffcb59469888563dc324e3c8ba6f06""><code>e53eb8b</code></a> Clarify the error during OIDC exchange on PRs from forks</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/edfa8f355b2652764330cc56a770050d4c0f96a4""><code>edfa8f3</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/216"">#216</a> from xuanzhi33/unstable/v1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/aeff019ac8445052e1ddbb5d3ec20a9296254d89""><code>aeff019</code></a> docs(fix): Fix a markdown alert</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/24c5d5ca4a35300bc01ffd365bcf1d71e2cf084e""><code>24c5d5c</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/214"">#214</a> from pypa/dependabot/pip/requirements/cryptography-42...</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/c13b4aa8c56a0e901a36c594bd62f0f192dda463""><code>c13b4aa</code></a> build(deps): bump cryptography from 42.0.2 to 42.0.4 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/72a79c870ceb3710e9cf97bde6192141ff9e6b13""><code>72a79c8</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/213"">#213</a> from pypa/dependabot/pip/requirements/cryptography-42...</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/751e5b80a462e94c03a00e7805fc137bb8fea5db""><code>751e5b8</code></a> build(deps): bump cryptography from 42.0.0 to 42.0.2 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/0580fcbb84c80ef2e629d60092942af2de59e8a7""><code>0580fcb</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/210"">#210</a> from pypa/dependabot/pip/requirements/cryptography-42...</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/a524841e7b6cddfac007bdab4ddfd1ef4d48c4c4""><code>a524841</code></a> build(deps): bump cryptography from 41.0.6 to 42.0.0 in /requirements</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/3f824c73d94f6ad4925913f56d31c29caba41990""><code>3f824c7</code></a> Merge pull request <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/204"">#204</a> from pypa/pre-commit-ci-update-config</li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.11...v1.8.12"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>",2024-03-04T06:14:58Z,2024-03-04T18:42:55Z,2024-03-04T18:42:54Z,2024-03-04T18:42:54Z,160fbf8e7752921301a30c3b54b18a5de46fcf6d,,,0,35b06af851b9ac188ff3aa68fb0eeb22246b3776,604bb6d08b942f774a3ba2a2900061959d2e091d,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8804,
1764961870,PR_kwDOAMm_X85pMy5O,8818,closed,0,Bump the actions group with 1 update,49699333,"Bumps the actions group with 1 update: [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish).

Updates `pypa/gh-action-pypi-publish` from 1.8.12 to 1.8.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pypa/gh-action-pypi-publish/releases"">pypa/gh-action-pypi-publish's releases</a>.</em></p>
<blockquote>
<h2>v1.8.14</h2>
<h2>🛠️ Internal Dependencies</h2>
<p>Nothing changed feature-wise. The only notable update is that the underlying container runtime now uses Python 3.12 and pip has been updated to v24.0 there.
This is should go unnoticed in terms of behavior. It's just a bit of maintenance burden to be done occasionally by <a href=""https://github.com/webknjaz""><code>@​webknjaz</code></a><a href=""https://github.com/sponsors/webknjaz"">💰</a>.
<em>Enjoy!</em></p>
<p><strong>🪞 Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.13...v1.8.14"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.13...v1.8.14</a></p>
<p><strong>🧔‍♂️ Release Manager:</strong> <a href=""https://github.com/sponsors/webknjaz""><code>@​webknjaz 🇺🇦</code></a></p>
<h2>v1.8.13</h2>
<h2>🐛 What's Fixed</h2>
<p>This action is now able to consume and publish distribution packages with <code>Metadata-Version: 2.3</code> embedded.</p>
<h2>🛠️ Internal Dependencies</h2>
<p><a href=""https://github.com/SigureMo""><code>@​SigureMo</code></a><a href=""https://github.com/sponsors/SigureMo"">💰</a> sent us a bump of <code>pkginfo</code> version to version 1.10.0 in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/issues/219"">#219</a>. It's a transitive dependency for us and is not an API-level change but upgrading it has a side effect of letting Twine recognize distribution packages <a href=""https://packaging.python.org/en/latest/specifications/core-metadata/"">declaring <code>Metadata-Version: 2.3</code></a>. In particular, it is known to affect distributions built with <code>Maturin &gt;= 1.5.0</code>.</p>
<p>Following that, <a href=""https://github.com/webknjaz""><code>@​webknjaz</code></a><a href=""https://github.com/sponsors/webknjaz"">💰</a> upgraded other transitive and direct dependency pins, including, among others, the following notable bumps:</p>
<ul>
<li><code>cryptography == 42.0.5</code></li>
<li><code>id == 1.3.0</code></li>
<li><code>readme-renderer == 43.0</code></li>
<li><code>Twine == 5.0.0</code></li>
</ul>
<h2>💪 New Contributors</h2>
<p><a href=""https://github.com/SigureMo""><code>@​SigureMo</code></a> made their first contribution in <a href=""https://redirect.github.com/pypa/gh-action-pypi-publish/pull/219"">pypa/gh-action-pypi-publish#219</a></p>
<p><strong>🪞 Full Diff</strong>: <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.12...v1.8.13"">https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.12...v1.8.13</a></p>
<p><strong>🧔‍♂️ Release Manager:</strong> <a href=""https://github.com/sponsors/webknjaz""><code>@​webknjaz 🇺🇦</code></a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/81e9d935c883d0b210363ab89cf05f3894778450""><code>81e9d93</code></a> Bump <code>pip</code> to v24.0 in runtime prerequisites lock</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/91527c458390474c5819b35ab7abcb3022765f53""><code>91527c4</code></a> Regenerate lockfiles with pip-tools v7.4.1</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/3a817c6dce8e9186e7899e6157645f4fa1ef3ff7""><code>3a817c6</code></a> Bump action runtime to CPython 3.12</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/741947b9cadc96c98b60dd2f32f89a5ef7fb113c""><code>741947b</code></a> Add a config file for <code>pip-tools</code></li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/d7af439579d0985b19d873ba4ab5240de757fb62""><code>d7af439</code></a> Mass-bump transitive dependencies of runtime</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/e90ddca975a62d08c9029e5f71135ef7928a0116""><code>e90ddca</code></a> Bump <code>readme-renderer</code> to v43.0</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/dae7fa3e8d90ecdafb12bea86ead2a16d6503035""><code>dae7fa3</code></a> Bump Twine to v5.0.0</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/0fe04ae7d9a3e6f37a4b756a0000a91d3ffd28a9""><code>0fe04ae</code></a> Bump <code>id</code> to v1.3.0</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/444e17980bb9fc7eb981c1e8ecd3da06b2e90a9a""><code>444e179</code></a> Bump cryptography to v42.0.5</li>
<li><a href=""https://github.com/pypa/gh-action-pypi-publish/commit/820be4e5e3485ab854b2a2a39be37d4d3a30d811""><code>820be4e</code></a> Normalize pip-tools' header comment @ <code>runtime.txt</code></li>
<li>Additional commits viewable in <a href=""https://github.com/pypa/gh-action-pypi-publish/compare/v1.8.12...v1.8.14"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/gh-action-pypi-publish&package-manager=github_actions&previous-version=1.8.12&new-version=1.8.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>",2024-03-11T06:21:39Z,2024-03-11T07:00:10Z,2024-03-11T07:00:10Z,2024-03-11T07:00:09Z,90e00f0022c8d1871f441470d08c79bb3b03c164,,,0,b754a024e5f390f982cac8342a0e4f42d4cd3feb,c919739fe6b2cdd46887dda90dcc50cb22996fe5,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8818,
1799926450,PR_kwDOAMm_X85rSLKy,8896,closed,0,Bump the actions group with 1 update,49699333,"Bumps the actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).

Updates `codecov/codecov-action` from 4.1.0 to 4.1.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v4.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1315"">codecov/codecov-action#1315</a></li>
<li>build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1319"">codecov/codecov-action#1319</a></li>
<li>Removed mention of Mercurial by <a href=""https://github.com/drazisil-codecov""><code>@​drazisil-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1325"">codecov/codecov-action#1325</a></li>
<li>build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1332"">codecov/codecov-action#1332</a></li>
<li>build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1331"">codecov/codecov-action#1331</a></li>
<li>fix: force version by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1329"">codecov/codecov-action#1329</a></li>
<li>build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1334"">codecov/codecov-action#1334</a></li>
<li>build(deps): bump undici from 5.28.2 to 5.28.3 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1338"">codecov/codecov-action#1338</a></li>
<li>build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1341"">codecov/codecov-action#1341</a></li>
<li>fix: typo in disable_safe_directory by <a href=""https://github.com/mkroening""><code>@​mkroening</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1343"">codecov/codecov-action#1343</a></li>
<li>chore(release): 4.1.1 by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1344"">codecov/codecov-action#1344</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""https://github.com/mkroening""><code>@​mkroening</code></a> made their first contribution in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1343"">codecov/codecov-action#1343</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v4.1.0...v4.1.1"">https://github.com/codecov/codecov-action/compare/v4.1.0...v4.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md"">codecov/codecov-action's changelog</a>.</em></p>
<blockquote>
<h2>4.0.0-beta.2</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/1085"">#1085</a> not adding -n if empty to do-upload command</li>
</ul>
<h2>4.0.0-beta.1</h2>
<p><code>v4</code> represents a move from the <a href=""https://github.com/codecov/uploader"">universal uploader</a> to the <a href=""https://github.com/codecov/codecov-cli"">Codecov CLI</a>. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.</p>
<h3>Breaking Changes</h3>
<ul>
<li>No current support for <code>aarch64</code> and <code>alpine</code> architectures.</li>
<li>Tokenless uploading is unsuported</li>
<li>Various arguments to the Action have been removed</li>
</ul>
<h2>3.1.4</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/967"">#967</a> Fix typo in README.md</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/971"">#971</a> fix: add back in working dir</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/969"">#969</a> fix: CLI option names for uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/970"">#970</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.12 to 18.16.3</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/979"">#979</a> build(deps-dev): bump <code>@​types/node</code> from 20.1.0 to 20.1.2</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/981"">#981</a> build(deps-dev): bump <code>@​types/node</code> from 20.1.2 to 20.1.4</li>
</ul>
<h2>3.1.3</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/960"">#960</a> fix: allow for aarch64 build</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/957"">#957</a> build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/958"">#958</a> build(deps): bump openpgp from 5.7.0 to 5.8.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/959"">#959</a> build(deps-dev): bump <code>@​types/node</code> from 18.15.10 to 18.15.12</li>
</ul>
<h2>3.1.2</h2>
<h3>Fixes</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/718"">#718</a> Update README.md</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/851"">#851</a> Remove unsupported path_to_write_report argument</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/898"">#898</a> codeql-analysis.yml</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/901"">#901</a> Update README to contain correct information - inputs and negate feature</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/955"">#955</a> fix: add in all the extra arguments for uploader</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/819"">#819</a> build(deps): bump openpgp from 5.4.0 to 5.5.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/835"">#835</a> build(deps): bump node-fetch from 3.2.4 to 3.2.10</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/840"">#840</a> build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/841"">#841</a> build(deps): bump <code>@​actions/core</code> from 1.9.1 to 1.10.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/843"">#843</a> build(deps): bump <code>@​actions/github</code> from 5.0.3 to 5.1.1</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/869"">#869</a> build(deps): bump node-fetch from 3.2.10 to 3.3.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/872"">#872</a> build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0</li>
<li><a href=""https://redirect.github.com/codecov/codecov-action/issues/879"">#879</a> build(deps): bump decode-uri-component from 0.2.0 to 0.2.2</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/c16abc29c95fcf9174b58eb7e1abf4c866893bc8""><code>c16abc2</code></a> chore(release): 4.1.1 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1344"">#1344</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/3e33441c198bf1d61f10a04bae1fd822380d0c6d""><code>3e33441</code></a> fix: typo in disable_safe_directory (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1343"">#1343</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/85aacc96543a61394c25e4172e3b041a7893d249""><code>85aacc9</code></a> build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1341"">#1341</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/4ea9be0fa3b51aaaf28171c3ebd384138e1fbd8b""><code>4ea9be0</code></a> build(deps): bump undici from 5.28.2 to 5.28.3 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1338"">#1338</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/164fadeaa7c9c2f7ff8ed535672bfab80abdf570""><code>164fade</code></a> build(deps-dev): bump typescript from 5.4.2 to 5.4.3 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1334"">#1334</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/4621ecce093438b398d3d338ab5fe3b038f8e593""><code>4621ecc</code></a> fix: force version (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1329"">#1329</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/251ba34669580cb1cba13b602ce56b27a7bd1a33""><code>251ba34</code></a> build(deps): bump actions/checkout from 4.1.1 to 4.1.2 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1331"">#1331</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/5a593a5341d231c229d4b555e2ec7ed967bc9208""><code>5a593a5</code></a> build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1332"">#1332</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/a15c0e43ca6bf783765f61cb1c13ca6a2152644e""><code>a15c0e4</code></a> Removed mention of Mercurial (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1325"">#1325</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/8be6ba57821f458c7d51e7f82129ac29316c2ea1""><code>8be6ba5</code></a> build(deps-dev): bump typescript from 5.3.3 to 5.4.2 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1319"">#1319</a>)</li>
<li>Additional commits viewable in <a href=""https://github.com/codecov/codecov-action/compare/v4.1.0...v4.1.1"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=4.1.0&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>",2024-04-01T06:50:24Z,2024-04-01T18:02:56Z,2024-04-01T18:02:56Z,2024-04-01T18:02:56Z,7e2415012226fe50ed8e1cdefbc073a78b592418,,,0,cfbb8905c58e424e7a4cf9e221e247ed3029c653,b80260781ee19bddee01ef09ac0da31ec12c5152,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8896,
1811351701,PR_kwDOAMm_X85r9wiV,8918,closed,0,Bump codecov/codecov-action from 4.1.1 to 4.2.0 in the actions group,49699333,"Bumps the actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).

Updates `codecov/codecov-action` from 4.1.1 to 4.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v4.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update deps by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1351"">codecov/codecov-action#1351</a></li>
<li>feat: allow for authentication via OIDC token by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1330"">codecov/codecov-action#1330</a></li>
<li>fix: use_oidc shoudl be required false by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1353"">codecov/codecov-action#1353</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v4.1.1...v4.2.0"">https://github.com/codecov/codecov-action/compare/v4.1.1...v4.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/7afa10ed9b269c561c2336fd862446844e0cbf71""><code>7afa10e</code></a> fix: use_oidc shoudl be required false (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1353"">#1353</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/d820d60619df930d5a859db2d0d77ba93f9d1702""><code>d820d60</code></a> feat: allow for authentication via OIDC token (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1330"">#1330</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/3a20752bddc7bf9bbce2c747f45ff99d337b9690""><code>3a20752</code></a> chore(deps): update deps (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1351"">#1351</a>)</li>
<li>See full diff in <a href=""https://github.com/codecov/codecov-action/compare/v4.1.1...v4.2.0"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=4.1.1&new-version=4.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>",2024-04-08T06:21:47Z,2024-04-08T16:31:12Z,2024-04-08T16:31:11Z,2024-04-08T16:31:11Z,07c7f969fe879af7a871374209957d5cd1ddb5aa,,,0,ab2fee99dad63bf36f24bef5630bda6e9cc394fc,3c98570d3c622bd0982f7f8915366fbbbc70ca83,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8918,
1822484839,PR_kwDOAMm_X85soOln,8943,closed,0,Bump codecov/codecov-action from 4.2.0 to 4.3.0 in the actions group,49699333,"Bumps the actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).

Updates `codecov/codecov-action` from 4.2.0 to 4.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/codecov/codecov-action/releases"">codecov/codecov-action's releases</a>.</em></p>
<blockquote>
<h2>v4.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: automatically detect if using GitHub enterprise by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1356"">codecov/codecov-action#1356</a></li>
<li>build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1355"">codecov/codecov-action#1355</a></li>
<li>build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1360"">codecov/codecov-action#1360</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 7.5.0 to 7.6.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1364"">codecov/codecov-action#1364</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 7.5.0 to 7.6.0 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1363"">codecov/codecov-action#1363</a></li>
<li>feat: add network params by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1365"">codecov/codecov-action#1365</a></li>
<li>build(deps): bump undici from 5.28.3 to 5.28.4 by <a href=""https://github.com/dependabot""><code>@​dependabot</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1361"">codecov/codecov-action#1361</a></li>
<li>chore(release): v4.3.0 by <a href=""https://github.com/thomasrockhu-codecov""><code>@​thomasrockhu-codecov</code></a> in <a href=""https://redirect.github.com/codecov/codecov-action/pull/1366"">codecov/codecov-action#1366</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href=""https://github.com/codecov/codecov-action/compare/v4.2.0...v4.3.0"">https://github.com/codecov/codecov-action/compare/v4.2.0...v4.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/codecov/codecov-action/commit/84508663e988701840491b86de86b666e8a86bed""><code>8450866</code></a> chore(release): v4.3.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1366"">#1366</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/e8419092e9de1e2493563107cf52bfa83d9ae62f""><code>e841909</code></a> build(deps): bump undici from 5.28.3 to 5.28.4 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1361"">#1361</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/363a65ad481c04303701b094b4d2c113a65f5d3e""><code>363a65a</code></a> feat: add network params (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1365"">#1365</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/640b86a455d2fd2f6e7acbb9eb863bc9f4a51954""><code>640b86a</code></a> build(deps-dev): bump <code>@​typescript-eslint/parser</code> from 7.5.0 to 7.6.0 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1363"">#1363</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/375c033fbe86348a044b3884012d849d84b90769""><code>375c033</code></a> build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> from 7.5.0 to 7.6.0 (#...</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/d701256d7a115528200188787cd91ce87889775f""><code>d701256</code></a> build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1360"">#1360</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/0bb547ab4974725a7d01e2ac18c843a6924c39f3""><code>0bb547a</code></a> build(deps-dev): bump typescript from 5.4.3 to 5.4.4 (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1355"">#1355</a>)</li>
<li><a href=""https://github.com/codecov/codecov-action/commit/55e8381a3e12db78da75715d4d60379adb17c4e6""><code>55e8381</code></a> fix: automatically detect if using GitHub enterprise (<a href=""https://redirect.github.com/codecov/codecov-action/issues/1356"">#1356</a>)</li>
<li>See full diff in <a href=""https://github.com/codecov/codecov-action/compare/v4.2.0...v4.3.0"">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=4.2.0&new-version=4.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>",2024-04-15T06:04:28Z,2024-04-15T19:16:38Z,2024-04-15T19:16:38Z,2024-04-15T19:16:38Z,2b2de81ba55a6b302fc4a5d174d7c2b2f05ca9d4,,,0,96d0a36d035dea086f1584edd7c7297c64c7f769,b004af5174a4b0e32519df792a4f625d5548a9f0,CONTRIBUTOR,,13221727,https://github.com/pydata/xarray/pull/8943,