From d89078f5024645f5ae61e3b578c8097092147c13 Mon Sep 17 00:00:00 2001
From: Shining <250120269+chronoai-shining@users.noreply.github.com>
Date: Mon, 15 Jun 2026 14:42:18 +0800
Subject: [PATCH 1/2] ci: sync develop-auto workflow files to develop for CI
 parity

develop-auto's CI workflows lagged develop by one Dependabot bump (#620):
codecov/codecov-action v4->v7 in ci.yml and create-github-app-token
v2->v3 in changeset-release.yml. The /sa-implement preflight ci-parity
gate (code 64) requires the workflow files to match across both branches
so PRs into develop-auto are gated identically to develop. This copies
develop's exact versions of the two files; no logic or gate changes.

Part of #1110
---
 .github/workflows/changeset-release.yml | 2 +-
 .github/workflows/ci.yml                | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/changeset-release.yml b/.github/workflows/changeset-release.yml
index ae7eb019..89d04e84 100644
--- a/.github/workflows/changeset-release.yml
+++ b/.github/workflows/changeset-release.yml
@@ -52,7 +52,7 @@ jobs:
     steps:
       - name: Mint app token
         id: app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.RELEASE_BOT_APP_ID }}
           private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a423505f..5abd2057 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,21 +75,21 @@ jobs:
       # because a single codecov-action invocation applies one flag set to
       # every file it uploads.
       - name: Upload ornn-api coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v7
         if: ${{ !cancelled() }}
         with:
           flags: api
           fail_ci_if_error: false
           files: ./ornn-api/coverage/lcov.info
       - name: Upload ornn-web coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v7
         if: ${{ !cancelled() }}
         with:
           flags: web
           fail_ci_if_error: false
           files: ./ornn-web/coverage/lcov.info
       - name: Upload TS SDK coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v7
         if: ${{ !cancelled() }}
         with:
           flags: sdk-ts
@@ -123,7 +123,7 @@ jobs:
       # Codecov upload (#471) — same as the bun job but for the
       # Python SDK's coverage.xml.
       - name: Upload Python coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v7
         if: ${{ !cancelled() }}
         with:
           flags: python

From f0d2c8b4931c97479943d1e53d1161f681ac3cb5 Mon Sep 17 00:00:00 2001
From: Shining <250120269+chronoai-shining@users.noreply.github.com>
Date: Mon, 15 Jun 2026 14:42:18 +0800
Subject: [PATCH 2/2] docs: empty changeset for develop-auto CI-parity sync

This PR only touches CI workflow YAML, so no package version bump is
warranted. The check-changeset gate still requires a changeset file on
non-Dependabot PRs into develop-auto, so add an empty one.

Part of #1110
---
 .changeset/sync-develop-auto-ci-parity.md | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 .changeset/sync-develop-auto-ci-parity.md

diff --git a/.changeset/sync-develop-auto-ci-parity.md b/.changeset/sync-develop-auto-ci-parity.md
new file mode 100644
index 00000000..9e6c97b0
--- /dev/null
+++ b/.changeset/sync-develop-auto-ci-parity.md
@@ -0,0 +1,4 @@
+---
+---
+
+CI-only: sync develop-auto workflow files to develop for CI parity. No version bump.