Bump the ci-dependencies group with 2 updates (#45)

* Bump the ci-dependencies group with 2 updates

Bumps the ci-dependencies group with 2 updates: [actions/dependency-review-action](https://github.com/actions/dependency-review-action) and [darbiadev/.github](https://github.com/darbiadev/.github).


Updates `actions/dependency-review-action` from 3.1.0 to 3.1.3
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@6c5ccda...7bbfa03)

Updates `darbiadev/.github` from 3.0.0 to 5.1.0
- [Release notes](https://github.com/darbiadev/.github/releases)
- [Commits](darbiadev/.github@f185cc0...b0749d5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-dependencies
- dependency-name: darbiadev/.github
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* Always use the latest allowed licenses config

Signed-off-by: Bradley Reynolds <bradley.reynolds@darbia.dev>

* Specify source for coverage

Signed-off-by: Bradley Reynolds <bradley.reynolds@darbia.dev>

* Add token to enable coverage

Signed-off-by: Bradley Reynolds <bradley.reynolds@darbia.dev>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Bradley Reynolds <bradley.reynolds@darbia.dev>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bradley Reynolds <bradley.reynolds@darbia.dev>

.github/workflows/dependency-review.yaml

@@ -15,6 +15,6 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: "Dependency Review"
-        uses: actions/dependency-review-action@6c5ccdad469c9f8a2996bfecaec55a631a347034 # v3.1.0
+        uses: actions/dependency-review-action@7bbfa034e752445ea40215fff1c3bf9597993d3f # v3.1.3
         with:
-          config-file: darbiadev/.github/.github/dependency-review-config.yaml@5f704c2b5aa4a48d52e37e40ba540b15620e45b5 # v1.1.2
+          config-file: darbiadev/.github/.github/dependency-review-config.yaml@main

.github/workflows/python-ci.yaml

@@ -8,11 +8,11 @@ on:
 
 jobs:
   pre-commit:
-    uses: darbiadev/.github/.github/workflows/generic-precommit.yaml@f185cc076161b47921c6fb6da4c1fd5e40b50bff # v3.0.0
+    uses: darbiadev/.github/.github/workflows/generic-precommit.yaml@b0749d50c2f32c5672a7c459f55f39416941c26d # v5.1.0
 
   lint:
     needs: pre-commit
-    uses: darbiadev/.github/.github/workflows/python-lint.yaml@f185cc076161b47921c6fb6da4c1fd5e40b50bff # v3.0.0
+    uses: darbiadev/.github/.github/workflows/python-lint.yaml@b0749d50c2f32c5672a7c459f55f39416941c26d # v5.1.0
 
   test:
     needs: lint
@@ -21,10 +21,12 @@ jobs:
         os: [ ubuntu-latest ]
         python-version: [ "3.8", "3.9", "3.10", "3.11" ]
 
-    uses: darbiadev/.github/.github/workflows/python-test.yaml@f185cc076161b47921c6fb6da4c1fd5e40b50bff # v3.0.0
+    uses: darbiadev/.github/.github/workflows/python-test.yaml@b0749d50c2f32c5672a7c459f55f39416941c26d # v5.1.0
     with:
       os: ${{ matrix.os }}
       python-version: ${{ matrix.python-version }}
+    secrets:
+      codecov-token: ${{ secrets.CODECOV_TOKEN }}
 
   docs:
     # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
@@ -33,4 +35,4 @@ jobs:
       pages: write
       id-token: write
 
-    uses: darbiadev/.github/.github/workflows/github-pages-python-sphinx.yaml@f185cc076161b47921c6fb6da4c1fd5e40b50bff # v3.0.0
+    uses: darbiadev/.github/.github/workflows/github-pages-python-sphinx.yaml@b0749d50c2f32c5672a7c459f55f39416941c26d # v5.1.0

pyproject.toml

@@ -47,3 +47,8 @@ ignore = []
 
 [tool.ruff.pydocstyle]
 convention = "numpy"
+
+[tool.coverage.run]
+source = [
+    "darbiadev_ups",
+]