chore: restore required CI with lockfile and codecov bumps

[jonathannorris]

Summary

• Bump codecov/codecov-action from v6.0.1 to v7.0.0 so the Ruby 4.0 coverage upload stops failing GPG verification
• Bump erb to 6.0.4, json to 2.21.1, concurrent-ruby to 1.3.7, and Bundler to 4.0.12 so Security Audit (and ruby-head install) pass

Combines the lockfile changes from #281 with the Codecov bump from #291 so the required CI Status check can go green.

Related Issues

• chore: resolve open dependabot security alerts #281
• chore(deps): update codecov/codecov-action action to v7 #291

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3d9e67c1-6820-4005-b77b-33985d9f34f5

📥 Commits

Reviewing files that changed from the base of the PR and between f729acb and 05624da.

⛔ Files ignored due to path filters (1)

• Gemfile.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• .github/workflows/main.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The RSpec CI job now pins the Codecov upload action to a specific v7.0.0 commit SHA instead of the mutable v7.0.0 tag.

Changes

CI Codecov integration

Layer / File(s)	Summary
Pin Codecov upload action .github/workflows/main.yml	The RSpec job now references commit fb8b3582c8e4def4969c97caa2f19720cb33a72f for Codecov uploads.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 05624

This PR updates CI dependencies and the lockfile to restore required checks, with no actionable merge-blocking risk remaining after normal checks and review.

Suggested reviewers: josecolella, aepfli, askpt, toddbaert

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the primary objective: restoring the required CI check through lockfile and Codecov updates.
Description check	✅ Passed	The description directly explains the Codecov and dependency updates and their purpose in restoring the required CI check.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

---

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Pull request overview

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Restores the required CI check by combining dependency lockfile updates (to satisfy security audit / ruby-head installs) with a Codecov GitHub Action bump (to address coverage upload verification failures).

Changes:

• Bumped Ruby gem dependencies in Gemfile.lock and updated the recorded Bundler version.
• Updated Codecov GitHub Action from v6.0.1 to v7.0.0 in CI workflow.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
Gemfile.lock	Updates gem versions and the BUNDLED WITH version to align CI/security audit requirements.
.github/workflows/main.yml	Bumps Codecov action version to fix coverage upload failures and restore CI status.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.50%. Comparing base (0e986fd) to head (05624da).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #301   +/-   ##
=======================================
  Coverage   99.50%   99.50%           
=======================================
  Files          31       31           
  Lines         808      808           
=======================================
  Hits          804      804           
  Misses          4        4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.