chore(deps): bump codecov/codecov-action from 4 to 5 (#461)

* chore(deps): bump codecov/codecov-action from 4 to 5

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): modify action config

- Pins actions to commit hash of release.
- Sets `actions/setup-go` to use `go.mod` for the Go version.
- Formats the YAML.

Signed-off-by: Ryan Johnson <ryan.johnson@broadcom.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Ryan Johnson <ryan.johnson@broadcom.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ryan Johnson <ryan.johnson@broadcom.com>

Author: dependabot[bot]

.github/workflows/test.yml

@@ -1,32 +1,36 @@
-name: Test and coverage
+name: Test and Code Coverage
 
-on: [pull_request, push]
+on:
+  pull_request:
+    paths-ignore:
+      - 'README.md'
+  push:
+    paths-ignore:
+      - 'README.md'
 
 env:
   BUILD_TAGS: 'akscluster cluster clustergroup credential ekscluster gitrepository iampolicy kustomization namespace custompolicy imagepolicy networkpolicy quotapolicy securitypolicy sourcesecret workspace tanzupackage tanzupackages packagerepository packageinstall clustersecret integration mutationpolicy backupschedule targetlocation dataprotection tanzukubernetescluster clusterclass managementcluster provisioner inspections custompolicytemplate customiamrole permissiontemplate'
+
 jobs:
   build:
-    name: Test and coverage
+    name: Test and Code Coverage
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Go
-        uses: actions/setup-go@v5
+      - name: Checkout
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+      - name: Setup Go
+        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
         with:
-          go-version: 1.19
-
+          go-version-file: 'go.mod'
+          cache: true
       - name: Build
         run: |
           go build -v ./...
-
       - name: Unit Test
         run: |
           go test $(go list ./... | grep -v /internal/client | grep -v /internal/models) -coverprofile=coverage.out -covermode=atomic
-
       - name: Mock Test
         run: |
           go test $(go list ./... | grep -v /internal/client | grep -v /internal/models) -tags $BUILD_TAGS
-
-      - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+      - name: Upload to Codecov
+        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2