From 10ca829f7478eddd899bac558ec3fdd0044dc3b4 Mon Sep 17 00:00:00 2001
From: Dan Fiedler <danfiedler@microsoft.com>
Date: Thu, 8 Oct 2026 06:38:49 -0400
Subject: [PATCH 1/2] Pin GitHub Actions to full-length commit SHAs

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 962fe6d..d445245 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -59,7 +59,7 @@ jobs:
       run: lein cloverage
 
     - name: Push coverage to Coveralls.io
-      uses: coverallsapp/github-action@master
+      uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
       with:
         path-to-lcov: target/coverage/lcov.info
         github-token: ${{ secrets.GITHUB_TOKEN }}

From 2f4347142d482023196c5716f8de66cb00396b21 Mon Sep 17 00:00:00 2001
From: Emlyn Corrin <emcorrin@microsoft.com>
Date: Wed, 4 Nov 2026 15:15:50 +0000
Subject: [PATCH 2/2] Remove Coveralls uploads and coverage badge

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
---
 .github/workflows/build.yml | 7 -------
 README.md                   | 1 -
 2 files changed, 8 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d445245..99ca534 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -58,12 +58,6 @@ jobs:
     - name: Run unit tests
       run: lein cloverage
 
-    - name: Push coverage to Coveralls.io
-      uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
-      with:
-        path-to-lcov: target/coverage/lcov.info
-        github-token: ${{ secrets.GITHUB_TOKEN }}
-
     - name: Run unit tests on old Clojure versions
       run: lein tests
 
@@ -77,4 +71,3 @@ jobs:
 #
 #    - name: Run Clojurescript tests
 #      run: lein fig:ci-test
-
diff --git a/README.md b/README.md
index 802aba5..9778c91 100644
--- a/README.md
+++ b/README.md
@@ -5,7 +5,6 @@
 
 [![cljdoc](https://cljdoc.org/badge/same/ish)](https://cljdoc.org/d/same/ish)
 [![Build status](https://github.com/microsoft/same-ish/actions/workflows/build.yml/badge.svg?branch=main&event=push)](https://github.com/microsoft/same-ish/actions/workflows/build.yml)
-[![Coverage](https://coveralls.io/repos/github/microsoft/same-ish/badge.svg?branch=main)](https://coveralls.io/github/microsoft/same-ish?branch=main)
 [![Downloads](https://img.shields.io/clojars/dt/same/ish.svg)](https://clojars.org/same/ish)
 
 You have some functions that return doubles or floats and you want to write some tests.