bump codecov-action to v4 (#71)

* bump codecov-action to v4

uses node.js v20 instead of deprecated node.js v16

also uses token in an env var as recommended by codecov docs

* enable dependabot

.github/dependabot.yml

@@ -0,0 +1,15 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: "daily"

.github/workflows/run-dev-tests.yml

@@ -134,9 +134,10 @@ jobs:
 
       - run: coverage report && coverage xml
 
-      - uses: codecov/codecov-action@v3
+      - uses: codecov/codecov-action@v4
+        env:
+          CODECOV_TOKEN: ${{secrets.CODECOV_TOKEN}}
         with:
-          token: ${{secrets.CODECOV_TOKEN}}
           files: ./coverage.xml
           fail_ci_if_error: true # optional (default = false)
           verbose: true # optional (default = false)