From de8202b9b0fa9f7106870b397cd490112bd20c34 Mon Sep 17 00:00:00 2001
From: faucomte97 <f.aucomte@hotmail.co.uk>
Date: Fri, 30 Aug 2024 15:28:48 +0100
Subject: [PATCH] Upgrade other workflows

---
 .github/workflows/ci.yml                          | 5 +++++
 .github/workflows/publish-python-package.yml      | 8 ++++----
 .github/workflows/semantic-pull-request-check.yml | 2 +-
 .github/workflows/snyk.yaml                       | 8 ++++----
 4 files changed, 14 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b87ace8ae..bd7237a18 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,4 +34,9 @@ jobs:
           SELENIUM_WEBDRIVER: chrome-headless
           SELENIUM_HEADLESS: True
       - name: Upload coverage to Codecov
+        if: github.repository_owner_id == env.OCADO_TECH_ORG_ID
         uses: codecov/codecov-action@v4
+        with:
+          fail_ci_if_error: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          file: ${{ env.COVERAGE_REPORT }}
diff --git a/.github/workflows/publish-python-package.yml b/.github/workflows/publish-python-package.yml
index 7e9556c5e..3adb46b08 100644
--- a/.github/workflows/publish-python-package.yml
+++ b/.github/workflows/publish-python-package.yml
@@ -10,17 +10,17 @@ on:
 jobs:
   publish-pypi-packages:
     name: Publish PyPi Packages
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           persist-credentials: false
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
-          python-version: "3.8"
+          python-version: "3.12"
           architecture: "x64"
       - name: Install pip requirements
         run: |
diff --git a/.github/workflows/semantic-pull-request-check.yml b/.github/workflows/semantic-pull-request-check.yml
index 7371d424c..8c0d9e4ba 100644
--- a/.github/workflows/semantic-pull-request-check.yml
+++ b/.github/workflows/semantic-pull-request-check.yml
@@ -10,7 +10,7 @@ on:
 jobs:
   main:
     name: Validate PR title
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: amannn/action-semantic-pull-request@v5
         env:
diff --git a/.github/workflows/snyk.yaml b/.github/workflows/snyk.yaml
index e8d05fc27..c013bce3b 100644
--- a/.github/workflows/snyk.yaml
+++ b/.github/workflows/snyk.yaml
@@ -6,16 +6,16 @@ on:
 jobs:
   security:
     name: Run Snyk
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     env:
       LANG: C.UTF-8
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Setup python-version
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: "3.8"
           architecture: "x64"
@@ -26,7 +26,7 @@ jobs:
       - name: Generate requirements
         run: pip freeze > requirements.txt
       - name: Run Snyk to check for vulnerabilities in Python
-        uses: snyk/actions/python-3.8@master
+        uses: snyk/actions/python-3.10@master
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         with: