From e8bd2589bd1334683452f6700e36a20c97fcff7c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 5 May 2026 10:36:23 +0000
Subject: [PATCH] build(deps): bump the dependencies group across 1 directory
 with 2 updates

Bumps the dependencies group with 2 updates in the / directory: [orgoro/coverage](https://github.com/orgoro/coverage) and [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action).


Updates `orgoro/coverage` from 7dbd48c7f7ed09df337ff40058340c85bc93cb3d to ca0c362dc1a4f100447309405e6dfea47e251495
- [Release notes](https://github.com/orgoro/coverage/releases)
- [Commits](https://github.com/orgoro/coverage/compare/7dbd48c7f7ed09df337ff40058340c85bc93cb3d...7dbd48c7f7ed09df337ff40058340c85bc93cb3d)

Updates `slackapi/slack-github-action` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slackapi/slack-github-action/compare/af78098f536edbc4de71162a307590698245be95...03ea5433c137af7c0495bc0cad1af10403fc800c)

---
updated-dependencies:
- dependency-name: orgoro/coverage
  dependency-version: 7dbd48c7f7ed09df337ff40058340c85bc93cb3d
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: slackapi/slack-github-action
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/merge-develop.yml | 2 +-
 .github/workflows/pull-request.yml  | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/merge-develop.yml b/.github/workflows/merge-develop.yml
index 4cd2408..7e63f0d 100644
--- a/.github/workflows/merge-develop.yml
+++ b/.github/workflows/merge-develop.yml
@@ -49,7 +49,7 @@ jobs:
 
       - name: code coverage report
         if: ${{ github.event_name == 'pull_request' }}
-        uses: orgoro/coverage@7dbd48c7f7ed09df337ff40058340c85bc93cb3d
+        uses: orgoro/coverage@ca0c362dc1a4f100447309405e6dfea47e251495
         with:
           coverageFile: reports/coverage.xml
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index e815233..565c935 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -137,7 +137,7 @@ jobs:
 
       - name: code coverage report
         if: ${{ github.event_name == 'pull_request' }}
-        uses: orgoro/coverage@7dbd48c7f7ed09df337ff40058340c85bc93cb3d
+        uses: orgoro/coverage@ca0c362dc1a4f100447309405e6dfea47e251495
         with:
           coverageFile: reports/coverage.xml
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -341,7 +341,7 @@ jobs:
     if: ${{ always() && github.repository == 'NHSDigital/mesh-client' && github.actor == 'dependabot[bot]' && contains(needs.*.result, 'failure') }}
     steps:
       - name: Slack Notification
-        uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95
+        uses: slackapi/slack-github-action@03ea5433c137af7c0495bc0cad1af10403fc800c
         with:
           webhook: ${{ secrets.DEPENDABOT_SLACK_WEBHOOK_URL }}
           webhook-type: incoming-webhook