From 5031bf15627590b4b9f877732e6bb82a3fdbcb8e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Martin=20Kr=C3=B6ning?= Date: Tue, 19 Nov 2024 04:31:56 +0100 Subject: [PATCH 1/8] fix: typo in `inputs.disable_safe_directory` (#1666) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Martin Kröning --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 36e11f2fa1..871231929f 100644 --- a/action.yml +++ b/action.yml @@ -155,7 +155,7 @@ runs: using: "composite" steps: - name: Set safe directory - if: ${{ inputs.set_safe_directory != 'true' }} + if: ${{ inputs.disable_safe_directory != 'true' }} shell: bash run: | git config --global --add safe.directory ${{ github.workspace }} From 21f471b0905adf9afb82e8232973e06159c478e3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 Nov 2024 22:32:16 -0500 Subject: [PATCH 2/8] build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 (#1665) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.0 to 3.27.4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3.27.0...v3.27.4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/codeql-analysis.yml | 6 +++--- .github/workflows/scorecards-analysis.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 79b7caff35..32f0a857fd 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -41,7 +41,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3.27.0 + uses: github/codeql-action/init@v3.27.4 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -52,7 +52,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v3.27.0 + uses: github/codeql-action/autobuild@v3.27.4 # ℹ️ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -66,4 +66,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3.27.0 + uses: github/codeql-action/analyze@v3.27.4 diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index f3e0f558b4..eeaf1a7a99 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -57,6 +57,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@v3.27.0 # v1.0.26 + uses: github/codeql-action/upload-sarif@v3.27.4 # v1.0.26 with: sarif_file: results.sarif From fb6775daf73f46666e53c687005dc3b35f4306e4 Mon Sep 17 00:00:00 2001 From: Tom Hu <88201630+thomasrockhu-codecov@users.noreply.github.com> Date: Tue, 19 Nov 2024 10:35:56 -0500 Subject: [PATCH 3/8] fix: bump to v5 and update README (#1655) * fix: bump to v5 and update README * Update README.md * Update README.md Co-authored-by: Joe Becher * Update README.md --------- Co-authored-by: Joe Becher --- README.md | 82 +++++++++++++++++++++++++++++++------------------------ 1 file changed, 47 insertions(+), 35 deletions(-) diff --git a/README.md b/README.md index 4c08455d78..af39f5d2de 100644 --- a/README.md +++ b/README.md @@ -43,7 +43,7 @@ You can see their usage in the `action.yml` [file](https://github.com/codecov/co ## Usage -To integrate Codecov with your Actions pipeline, specify the name of this repository with a tag number (`@v4` is recommended) as a `step` within your `workflow.yml` file. +To integrate Codecov with your Actions pipeline, specify the name of this repository with a tag number (`@v5` is recommended) as a `step` within your `workflow.yml` file. This Action also requires you to [provide an upload token](https://docs.codecov.io/docs/frequently-asked-questions#section-where-is-the-repository-upload-token-found-) from [codecov.io](https://www.codecov.io) (tip: in order to avoid exposing your token, [store it](https://docs.codecov.com/docs/adding-the-codecov-token#github-actions) as a `secret`). @@ -60,13 +60,13 @@ Inside your `.github/workflows/workflow.yml` file: ```yaml steps: - uses: actions/checkout@main -- uses: codecov/codecov-action@v4 +- uses: codecov/codecov-action@v5 with: fail_ci_if_error: true # optional (default = false) files: ./coverage1.xml,./coverage2.xml # optional flags: unittests # optional name: codecov-umbrella # optional - token: ${{ secrets.CODECOV_TOKEN }} # required + token: ${{ secrets.CODECOV_TOKEN }} verbose: true # optional (default = false) ``` @@ -75,7 +75,7 @@ The Codecov token can also be passed in via environment variables: ```yaml steps: - uses: actions/checkout@main -- uses: codecov/codecov-action@v4 +- uses: codecov/codecov-action@v5 with: fail_ci_if_error: true # optional (default = false) files: ./coverage1.xml,./coverage2.xml # optional @@ -92,7 +92,7 @@ steps: For users with [OpenID Connect(OIDC) enabled](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect), the Codecov token is not necessary. You can use OIDC with the `use_oidc` argument as following. ```yaml -- uses: codecov/codecov-action@v4 +- uses: codecov/codecov-action@v5 with: use_oidc: true ``` @@ -105,38 +105,50 @@ Codecov's Action supports inputs from the user. These inputs, along with their d | Input | Description | Required | | :--- | :--- | :---: | -| `token` | Repository Codecov token. Used to authorize report uploads | *Required -| `codecov_yml_path` | Specify the path to the Codecov YML | Optional -| `commit_parent` | Override to specify the parent commit SHA | Optional -| `directory` | Directory to search for coverage reports. | Optional -| `disable_search` | Disable search for coverage files. This is helpful when specifying what files you want to upload with the --file option. | Optional -| `disable_file_fixes` | Disable file fixes to ignore common lines from coverage (e.g. blank lines or empty brackets) | Optional +| `binary` | The file location of a pre-downloaded version of the CLI. If specified, integrity checking will be bypassed. | Optional +| `codecov_yml_path` | The location of the codecov.yml file. This is crrently ONLY used for automated test selection (https://docs.codecov.com/docs/getting-started-with-ats). Note that for all other cases, the Codecov yaml will need to be locate +d as described here: https://docs.codecov.com/docs/codecov-yaml#can-i-name-the-file-codecovyml | Optional +| `commit_parent` | SHA (with 40 chars) of what should be the parent of this commit. | Optional +| `directory` | Folder to search for coverage files. Default to the current working directory | Optional +| `disable_file_fixes` | Disable file fixes to ignore common lines from coverage (e.g. blank lines or empty brackets). Read more here https://docs.codecov.com/docs/fixing-reports | Optional +| `disable_search` | Disable search for coverage files. This is helpful when specifying what files you want to upload with the files option. | Optional +| `disable_safe_directory` | Disable setting safe directory. Set to true to disable. | Optional | `dry_run` | Don't upload files to Codecov | Optional | `env_vars` | Environment variables to tag the upload with (e.g. PYTHON \| OS,PYTHON) | Optional -| `exclude` | Folders to exclude from search | Optional -| `fail_ci_if_error` | Specify whether or not CI build should fail if Codecov runs into an error during upload | Optional -| `file` | Path to coverage file to upload | Optional -| `files` | Comma-separated list of files to upload | Optional -| `flags` | Flag upload to group coverage metrics (e.g. unittests \| integration \| ui,chrome) | Optional -| `handle_no_reports_found` | Raise no exceptions when no coverage reports found | Optional -| `job_code` | The job code | Optional -| `name` | User defined upload name. Visible in Codecov UI | Optional -| `os` | Override the assumed OS. Options are linux \| macos \| windows \| . | Optional -| `override_branch` | Specify the branch name | Optional -| `override_build` | Specify the build number | Optional +| `exclude` | Comma-separated list of folders to exclude from search. | Optional +| `fail_ci_if_error` | On error, exit with non-zero code | Optional +| `files` | Comma-separated explicit list of files to upload. These will be added to the coverage files found for upload. If you wish to only upload the specified files, please consider using "disable-search" to disable uploading other files. | Optional +tional +| `flags` | Comma-separated list of flags to upload to group coverage metrics. | Optional +| `git_service` | Override the git_service (e.g. github_enterprise) | Optional +| `gcov_args` | Extra arguments to pass to gcov | Optional +| `gcov_executable` | gcov executable to run. Defaults to 'gcov' | Optional +| `gcov_ignore` | Paths to ignore during gcov gathering | Optional +| `gcov_include` | Paths to include during gcov gathering | Optional +| `handle_no_reports_found` | If no coverage reports are found, do not raise an exception. | Optional +| `job_code` | | Optional +| `name` | Custom defined name of the upload. Visible in the Codecov UI | Optional +| `network_filter` | Specify a filter on the files listed in the network section of the Codecov report. This will only add files whose path begin with the specified filter. Useful for upload-specific path fixing. | Optional +| `network_prefix` | Specify a prefix on files listed in the network section of the Codecov report. Useful to help resolve path fixing. | Optional +| `os` | Override the assumed OS. Options available at cli.codecov.io | Optional +| `override_branch` | Specify the branch to be displayed with this commit on Codecov | Optional +| `override_build` | Specify the build number manually | Optional | `override_build_url` | The URL of the build where this is running | Optional -| `override_commit` | Specify the commit SHA | Optional -| `override_pr` | Specify the pull request number | Optional -| `plugin` | plugins to run. Options: xcode, gcov, pycoverage. The default behavior runs them all. | Optional -| `plugins` | Comma-separated list of plugins for use during upload. | Optional -| `report_code` | The code of the report. If unsure, do not include | Optional -| `root_dir` | Used to specify the location of your .git root to identify project root directory | Optional -| `slug` | Specify the slug manually (Enterprise use) | Optional -| `url` | Specify the base url to upload (Enterprise use) | Optional -| `use_legacy_upload_endpoint` | Use the legacy upload endpoint | Optional -| `use_oidc` | Use OpenID Connect for verification instead of token. This will ignore any token supplied. Please see [GitHub documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect) for details. -| `verbose` | Specify whether the Codecov output should be verbose | Optional -| `version` | Specify which version of the Codecov CLI should be used. Defaults to `latest` | Optional +| `override_commit` | Commit SHA (with 40 chars) | Optional +| `override_pr` | Specify the pull request number manually. Used to override pre-existing CI environment variables. | Optional +| `plugins` | Comma-separated list of plugins to run. Specify `noop` to turn off all plugins | Optional +| `report_code` | The code of the report if using local upload. If unsure, leave unset. Read more here https://docs.codecov.com/docs/the-codecov-cli#how-to-use-local-upload | Optional +| `report_type` | The type of file to upload, coverage by default. Possible values are "testing", "coverage". | Optional +| `root_dir` | Root folder from which to consider paths on the network section. Defaults to current working directory. | Optional +| `skip_validation` | Skip integrity checking of the CLI. This is NOT recommended. | Optional +| `slug` | [Required when using the org token] Set to the owner/repo slug used instead of the private repo token. Only applicable to some Enterprise users. | Optional +| `swift_project` | Specify the swift project name. Useful for optimization. | Optional +| `token` | Repository Codecov token. Used to authorize report uploads | Optional +| `url` | Set to the Codecov instance URl. Used by Dedicated Enterprise Cloud customers. | Optional +| `use_legacy_upload_endpoint` | Use the legacy upload endpoint. | Optional +| `use_oidc` | Use OIDC instead of token. This will ignore any token supplied | Optional +| `verbose` | Enable verbose logging | Optional +| `version` | Which version of the Codecov CLI to use (defaults to 'latest') | Optional | `working-directory` | Directory in which to execute codecov.sh | Optional ### Example `workflow.yml` with Codecov Action @@ -165,7 +177,7 @@ jobs: pip install pytest-cov pytest --cov=./ --cov-report=xml - name: Upload coverage to Codecov - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v5 with: directory: ./coverage/reports/ env_vars: OS,PYTHON From 8754828e79e404caea0acb0b253c297997dbf02c Mon Sep 17 00:00:00 2001 From: Tom Hu <88201630+thomasrockhu-codecov@users.noreply.github.com> Date: Tue, 19 Nov 2024 12:45:11 -0500 Subject: [PATCH 4/8] fix: update CHANGELOG and automate (#1674) * fix: update CHANGELOG and automate * chore(release): v5.0.3 --- CHANGELOG.md | 850 +++++++++++++++++++++++++++++++++++++++++------ changelog.py | 66 ++++ hooks/pre-commit | 5 + 3 files changed, 819 insertions(+), 102 deletions(-) create mode 100644 changelog.py diff --git a/CHANGELOG.md b/CHANGELOG.md index fbc89c8942..8ab94fe462 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,109 +1,742 @@ -## 4.0.0-beta.2 -### Fixes -- #1085 not adding -n if empty to do-upload command - -## 4.0.0-beta.1 - -`v4` represents a move from the [universal uploader](https://github.com/codecov/uploader) to the [Codecov CLI](https://github.com/codecov/codecov-cli). Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader. - -### Breaking Changes +## v5.0.2 +### What's Changed +* fix: override commit and pr values for PR cases by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1657 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v5.0.1...v5.0.2 + +## v5.0.1 +### What's Changed +* fix: use marketplace v5 badge by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1646 +* fix: update tokenless branch logic by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1650 +* chore(release): 5.0.1 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1656 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v5.0.0...v5.0.1 + +## v5.0.0 +### v5 Release +`v5` of the Codecov GitHub Action will use the [Codecov Wrapper](https://github.com/codecov/wrapper) to encapsulate the [CLI](https://github.com/codecov/codecov-cli). This will help ensure that the Action gets updates quicker. + +### Migration Guide +The `v5` release also coincides with the opt-out feature for tokens for public repositories. In the `Global Upload Token` section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see [how to upload without a token](https://docs.codecov.com/docs/codecov-tokens#uploading-without-a-token). + +> [!WARNING] +> **The following arguments have been changed** +> - `file` (this has been deprecated in favor of `files`) +> - `plugin` (this has been deprecated in favor of `plugins`) + +The following arguments have been added: + +- `binary` +- `gcov_args` +- `gcov_executable` +- `gcov_ignore` +- `gcov_include` +- `report_type` +- `skip_validation` +- `swift_project` + +You can see their usage in the `action.yml` [file](https://github.com/codecov/codecov-action/blob/main/action.yml). + +## What's Changed +* chore(deps): bump to eslint9+ and remove eslint-config-google by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1591 +* build(deps-dev): bump @octokit/webhooks-types from 7.5.1 to 7.6.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1595 +* build(deps-dev): bump typescript from 5.6.2 to 5.6.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1604 +* build(deps-dev): bump @typescript-eslint/parser from 8.8.0 to 8.8.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1601 +* build(deps): bump @actions/core from 1.11.0 to 1.11.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1597 +* build(deps): bump github/codeql-action from 3.26.9 to 3.26.11 by @dependabot in https://github.com/codecov/codecov-action/pull/1596 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.8.0 to 8.8.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1600 +* build(deps-dev): bump eslint from 9.11.1 to 9.12.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1598 +* build(deps): bump github/codeql-action from 3.26.11 to 3.26.12 by @dependabot in https://github.com/codecov/codecov-action/pull/1609 +* build(deps): bump actions/checkout from 4.2.0 to 4.2.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1608 +* build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1607 +* build(deps-dev): bump @typescript-eslint/parser from 8.8.1 to 8.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1612 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.8.1 to 8.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1611 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.9.0 to 8.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1615 +* build(deps-dev): bump eslint from 9.12.0 to 9.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1618 +* build(deps): bump github/codeql-action from 3.26.12 to 3.26.13 by @dependabot in https://github.com/codecov/codecov-action/pull/1617 +* build(deps-dev): bump @typescript-eslint/parser from 8.9.0 to 8.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1614 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.10.0 to 8.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1620 +* build(deps-dev): bump @typescript-eslint/parser from 8.10.0 to 8.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1619 +* build(deps-dev): bump @types/jest from 29.5.13 to 29.5.14 by @dependabot in https://github.com/codecov/codecov-action/pull/1622 +* build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1625 +* build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1624 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.11.0 to 8.12.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1626 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.12.1 to 8.12.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1629 +* build(deps-dev): bump @typescript-eslint/parser from 8.11.0 to 8.12.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1628 +* build(deps-dev): bump @typescript-eslint/parser from 8.12.2 to 8.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1635 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.12.2 to 8.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1634 +* feat: use wrapper by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1621 +* Update README.md by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1639 +* fix: add missing vars by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1638 +* fix: update container builds by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1640 +* fixL use the correct source by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1642 +* chore(deps): bump wrapper to 0.0.23 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1644 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.6.0...v5.0.0 + +## v5.0.0-beta (Prerelease) +### What's Changed +* chore(deps): bump to eslint9+ and remove eslint-config-google by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1591 +* build(deps-dev): bump @octokit/webhooks-types from 7.5.1 to 7.6.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1595 +* build(deps-dev): bump typescript from 5.6.2 to 5.6.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1604 +* build(deps-dev): bump @typescript-eslint/parser from 8.8.0 to 8.8.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1601 +* build(deps): bump @actions/core from 1.11.0 to 1.11.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1597 +* build(deps): bump github/codeql-action from 3.26.9 to 3.26.11 by @dependabot in https://github.com/codecov/codecov-action/pull/1596 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.8.0 to 8.8.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1600 +* build(deps-dev): bump eslint from 9.11.1 to 9.12.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1598 +* build(deps): bump github/codeql-action from 3.26.11 to 3.26.12 by @dependabot in https://github.com/codecov/codecov-action/pull/1609 +* build(deps): bump actions/checkout from 4.2.0 to 4.2.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1608 +* build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1607 +* build(deps-dev): bump @typescript-eslint/parser from 8.8.1 to 8.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1612 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.8.1 to 8.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1611 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.9.0 to 8.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1615 +* build(deps-dev): bump eslint from 9.12.0 to 9.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1618 +* build(deps): bump github/codeql-action from 3.26.12 to 3.26.13 by @dependabot in https://github.com/codecov/codecov-action/pull/1617 +* build(deps-dev): bump @typescript-eslint/parser from 8.9.0 to 8.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1614 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.10.0 to 8.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1620 +* build(deps-dev): bump @typescript-eslint/parser from 8.10.0 to 8.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1619 +* build(deps-dev): bump @types/jest from 29.5.13 to 29.5.14 by @dependabot in https://github.com/codecov/codecov-action/pull/1622 +* build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1625 +* build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1624 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.11.0 to 8.12.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1626 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.12.1 to 8.12.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1629 +* build(deps-dev): bump @typescript-eslint/parser from 8.11.0 to 8.12.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1628 +* build(deps-dev): bump @typescript-eslint/parser from 8.12.2 to 8.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1635 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.12.2 to 8.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1634 +* feat: use wrapper by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1621 +* Update README.md by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1639 +* fix: add missing vars by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1638 +* fix: update container builds by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1640 +* fixL use the correct source by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1642 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.6.0...v5.0.0-beta + +## v4.6.0 +### What's Changed +* build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in https://github.com/codecov/codecov-action/pull/1481 +* build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1480 +* build(deps-dev): bump ts-jest from 29.1.4 to 29.1.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1479 +* build(deps-dev): bump @typescript-eslint/parser from 7.13.0 to 7.13.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1485 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.13.0 to 7.13.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1484 +* build(deps-dev): bump typescript from 5.4.5 to 5.5.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1490 +* build(deps-dev): bump @typescript-eslint/parser from 7.13.1 to 7.14.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1493 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.13.1 to 7.14.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1492 +* build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in https://github.com/codecov/codecov-action/pull/1496 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.14.1 to 7.15.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1501 +* build(deps-dev): bump typescript from 5.5.2 to 5.5.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1500 +* build(deps-dev): bump @typescript-eslint/parser from 7.14.1 to 7.15.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1499 +* build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1502 +* build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1504 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.15.0 to 7.16.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1503 +* build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1507 +* build(deps-dev): bump @typescript-eslint/parser from 7.15.0 to 7.16.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1505 +* build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in https://github.com/codecov/codecov-action/pull/1509 +* chore(ci): restrict scorecards to codecov/codecov-action by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1512 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.16.0 to 7.16.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1514 +* build(deps-dev): bump @typescript-eslint/parser from 7.16.0 to 7.16.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1513 +* test: `versionInfo` by @marcobiedermann in https://github.com/codecov/codecov-action/pull/1407 +* build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1515 +* build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in https://github.com/codecov/codecov-action/pull/1516 +* build(deps-dev): bump typescript from 5.5.3 to 5.5.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1521 +* build(deps-dev): bump @typescript-eslint/parser from 7.16.1 to 7.17.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1520 +* build(deps-dev): bump @typescript-eslint/parser from 7.17.0 to 7.18.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1528 +* build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by @dependabot in https://github.com/codecov/codecov-action/pull/1526 +* build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1525 +* build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1532 +* build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1534 +* build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1542 +* build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1541 +* ref: Tidy up types and remove string coercion by @nicholas-codecov in https://github.com/codecov/codecov-action/pull/1536 +* build(deps-dev): bump @octokit/webhooks-types from 3.77.1 to 7.5.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1545 +* build(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1551 +* feat: pass tokenless value as branch override by @joseph-sentry in https://github.com/codecov/codecov-action/pull/1511 +* build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1563 +* Create makefile.yml by @Hawthorne001 in https://github.com/codecov/codecov-action/pull/1555 +* build(deps): bump github/codeql-action from 3.26.2 to 3.26.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1562 +* build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1557 +* Spell `evenName` in the logs correctly by @webknjaz in https://github.com/codecov/codecov-action/pull/1560 +* build(deps-dev): bump typescript from 5.5.4 to 5.6.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1566 +* build(deps-dev): bump @types/jest from 29.5.12 to 29.5.13 by @dependabot in https://github.com/codecov/codecov-action/pull/1567 +* build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1569 +* build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1571 +* build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 by @dependabot in https://github.com/codecov/codecov-action/pull/1575 +* build(deps-dev): bump @vercel/ncc from 0.38.1 to 0.38.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1577 +* chore: fix typo of OSS by @shoothzj in https://github.com/codecov/codecov-action/pull/1578 +* build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 by @dependabot in https://github.com/codecov/codecov-action/pull/1584 +* build(deps): bump actions/checkout from 4.1.7 to 4.2.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1583 +* fix: bump eslint parser deps by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1586 +* chore(release):4.6.0 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1587 + +## New Contributors +* @nicholas-codecov made their first contribution in https://github.com/codecov/codecov-action/pull/1536 +* @Hawthorne001 made their first contribution in https://github.com/codecov/codecov-action/pull/1555 +* @webknjaz made their first contribution in https://github.com/codecov/codecov-action/pull/1560 +* @shoothzj made their first contribution in https://github.com/codecov/codecov-action/pull/1578 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.5.0...v4.6.0 + +## v4.5.0 +### What's Changed +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.9.0 to 7.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1446 +* build(deps-dev): bump ts-jest from 29.1.2 to 29.1.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1443 +* build(deps-dev): bump @typescript-eslint/parser from 7.9.0 to 7.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1445 +* build(deps-dev): bump @typescript-eslint/parser from 7.10.0 to 7.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1459 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.10.0 to 7.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1458 +* build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1456 +* build(deps-dev): bump ts-jest from 29.1.3 to 29.1.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1460 +* build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1466 +* build(deps-dev): bump @typescript-eslint/parser from 7.11.0 to 7.12.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1467 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.11.0 to 7.12.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1468 +* build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in https://github.com/codecov/codecov-action/pull/1472 +* fix: handle trailing commas by @joseph-sentry in https://github.com/codecov/codecov-action/pull/1470 +* build(deps-dev): bump @typescript-eslint/parser from 7.12.0 to 7.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1474 +* build(deps-dev): bump braces from 3.0.2 to 3.0.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1475 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.12.0 to 7.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1473 +* feat: add support for tokenless v3 by @joseph-sentry in https://github.com/codecov/codecov-action/pull/1410 +* Use an existing token even if the PR is from a fork by @leofeyer in https://github.com/codecov/codecov-action/pull/1471 +* chore(release): bump to 4.5.0 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1477 + +## New Contributors +* @joseph-sentry made their first contribution in https://github.com/codecov/codecov-action/pull/1470 +* @leofeyer made their first contribution in https://github.com/codecov/codecov-action/pull/1471 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.4.1...v4.5.0 + +## v4.4.1 +### What's Changed +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1427 +* fix: prevent xlarge from running on forks by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1432 +* build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1439 +* build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1438 +* fix: isPullRequestFromFork returns false for any PR by @shahar-h in https://github.com/codecov/codecov-action/pull/1437 +* chore(release): 4.4.1 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1441 + +## New Contributors +* @shahar-h made their first contribution in https://github.com/codecov/codecov-action/pull/1437 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.4.0...v4.4.1 + +## What's Changed +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1427 +* fix: prevent xlarge from running on forks by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1432 +* build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1439 +* build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1438 +* fix: isPullRequestFromFork returns false for any PR by @shahar-h in https://github.com/codecov/codecov-action/pull/1437 +* chore(release): 4.4.1 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1441 + +## New Contributors +* @shahar-h made their first contribution in https://github.com/codecov/codecov-action/pull/1437 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.4.0...v4.4.1 + +## v4.4.0 +### What's Changed +* chore: Clarify isPullRequestFromFork by @jsoref in https://github.com/codecov/codecov-action/pull/1411 +* build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1423 +* build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1421 +* build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1420 +* feat: remove GPG and run on spawn by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1426 +* build(deps-dev): bump @typescript-eslint/parser from 7.8.0 to 7.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1428 +* chore(release): 4.4.0 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1430 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.3.1...v4.4.0 + +## v4.3.1 +### What's Changed +* build(deps-dev): bump typescript from 5.4.4 to 5.4.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1370 +* fix: more verbose log message when failing to import pgp key by @ReenigneArcher in https://github.com/codecov/codecov-action/pull/1371 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.6.0 to 7.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1374 +* build(deps-dev): bump @typescript-eslint/parser from 7.6.0 to 7.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1375 +* build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1382 +* build(deps): bump github/codeql-action from 3.24.10 to 3.25.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1381 +* build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1380 +* build(deps-dev): bump @typescript-eslint/parser from 7.7.0 to 7.7.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1384 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1383 +* Update README.md to point to docs about tokenless by @rohan-at-sentry in https://github.com/codecov/codecov-action/pull/1395 +* build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1393 +* build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1392 +* build(deps): bump github/codeql-action from 3.25.1 to 3.25.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1391 +* style: Node Packages by @marcobiedermann in https://github.com/codecov/codecov-action/pull/1394 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.7.1 to 7.8.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1402 +* build(deps-dev): bump @typescript-eslint/parser from 7.7.1 to 7.8.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1401 +* docs: Type Annotations by @marcobiedermann in https://github.com/codecov/codecov-action/pull/1397 +* docs: main branch by @marcobiedermann in https://github.com/codecov/codecov-action/pull/1396 +* fix: bypass token checks for forks and OIDC by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1404 +* chore(release): 4.3.1. by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1405 + +## New Contributors +* @ReenigneArcher made their first contribution in https://github.com/codecov/codecov-action/pull/1371 +* @rohan-at-sentry made their first contribution in https://github.com/codecov/codecov-action/pull/1395 +* @marcobiedermann made their first contribution in https://github.com/codecov/codecov-action/pull/1394 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.3.0...v4.3.1 + +## v4.3.0 +### What's Changed +* fix: automatically detect if using GitHub enterprise by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1356 +* build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1355 +* build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in https://github.com/codecov/codecov-action/pull/1360 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.5.0 to 7.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1364 +* build(deps-dev): bump @typescript-eslint/parser from 7.5.0 to 7.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1363 +* feat: add network params by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1365 +* build(deps): bump undici from 5.28.3 to 5.28.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1361 +* chore(release): v4.3.0 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1366 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.2.0...v4.3.0 + +## v4.2.0 +### What's Changed +* chore(deps): update deps by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1351 +* feat: allow for authentication via OIDC token by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1330 +* fix: use_oidc shoudl be required false by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1353 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.1.1...v4.2.0 + +## v4.1.1 +### What's Changed +* build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1315 +* build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1319 +* Removed mention of Mercurial by @drazisil-codecov in https://github.com/codecov/codecov-action/pull/1325 +* build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1332 +* build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1331 +* fix: force version by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1329 +* build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1334 +* build(deps): bump undici from 5.28.2 to 5.28.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1338 +* build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by @dependabot in https://github.com/codecov/codecov-action/pull/1341 +* fix: typo in disable_safe_directory by @mkroening in https://github.com/codecov/codecov-action/pull/1343 +* chore(release): 4.1.1 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1344 + +## New Contributors +* @mkroening made their first contribution in https://github.com/codecov/codecov-action/pull/1343 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.1.0...v4.1.1 + +## v4.1.0 +### What's Changed +* fix: set safe directory by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1304 +* build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1306 +* build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1305 +* chore(release): v4.1.0 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1307 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.0.2...v4.1.0 + +## v4.0.2 +### What's Changed +* Update README.md by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1251 +* build(deps-dev): bump @types/jest from 29.5.11 to 29.5.12 by @dependabot in https://github.com/codecov/codecov-action/pull/1257 +* build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1266 +* Escape pipes in table of arguments by @jwodder in https://github.com/codecov/codecov-action/pull/1265 +* Add link to docs on Dependabot secrets by @ianlewis in https://github.com/codecov/codecov-action/pull/1260 +* fix: working-directory input for all stages by @Bo98 in https://github.com/codecov/codecov-action/pull/1272 +* build(deps-dev): bump @typescript-eslint/parser from 6.20.0 to 6.21.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1271 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1269 +* build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1298 +* Use updated syntax for GitHub Markdown notes by @jamacku in https://github.com/codecov/codecov-action/pull/1300 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.21.0 to 7.0.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1290 +* build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1286 +* chore(release): bump to 4.0.2 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1302 + +## New Contributors +* @jwodder made their first contribution in https://github.com/codecov/codecov-action/pull/1265 +* @ianlewis made their first contribution in https://github.com/codecov/codecov-action/pull/1260 +* @Bo98 made their first contribution in https://github.com/codecov/codecov-action/pull/1272 +* @jamacku made their first contribution in https://github.com/codecov/codecov-action/pull/1300 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.0.1...v4.0.2 + +## v4.0.1 +### What's Changed +* Update README.md by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1243 +* Add all args by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1245 +* fix: show both token uses in readme by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1250 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.0.0...v4.0.1 + +## v4.0.0 +#v4 of the Codecov Action uses the [CLI](https://docs.codecov.com/docs/the-codecov-cli) as the underlying upload. The CLI has helped to power new features including local upload, the global upload token, and new upcoming features. + +## Breaking Changes + +- The Codecov Action runs as a `node20` action due to `node16` deprecation. See [this post from GitHub](https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/) on how to migrate. +- Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This [doc](https://docs.codecov.com/docs/adding-the-codecov-token#github-actions) shows instructions on how to add the Codecov token. +- OS platforms have been added, though some may not be automatically detected. To see a list of platforms, see our [CLI download page](https://cli.codecov.io) +- Various arguments to the Action have been changed. Please be aware that the arguments match with the CLI's needs + +`v3` versions and below will not have access to CLI features (e.g. global upload token, ATS). + +## What's Changed +* build(deps): bump openpgp from 5.8.0 to 5.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/985 +* build(deps): bump actions/checkout from 3.0.0 to 3.5.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1000 +* build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1006 +* build(deps): bump tough-cookie from 4.0.0 to 4.1.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1013 +* build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1024 +* build(deps): bump node-fetch from 3.3.1 to 3.3.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1031 +* build(deps-dev): bump @types/node from 20.1.4 to 20.4.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1032 +* build(deps): bump github/codeql-action from 1.0.26 to 2.21.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1033 +* build commit,report and upload args based on codecovcli by @dana-yaish in https://github.com/codecov/codecov-action/pull/943 +* build(deps-dev): bump @types/node from 20.4.5 to 20.5.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1055 +* build(deps): bump github/codeql-action from 2.21.2 to 2.21.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1051 +* build(deps-dev): bump @types/node from 20.5.3 to 20.5.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1058 +* chore(deps): update outdated deps by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1059 +* build(deps-dev): bump @types/node from 20.5.4 to 20.5.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1060 +* build(deps-dev): bump @typescript-eslint/parser from 6.4.1 to 6.5.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1065 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.4.1 to 6.5.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1064 +* build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1063 +* build(deps-dev): bump eslint from 8.47.0 to 8.48.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1061 +* build(deps-dev): bump @types/node from 20.5.6 to 20.5.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1062 +* build(deps): bump openpgp from 5.9.0 to 5.10.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1066 +* build(deps-dev): bump @types/node from 20.5.7 to 20.5.9 by @dependabot in https://github.com/codecov/codecov-action/pull/1070 +* build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1069 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.5.0 to 6.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1072 +* Update README.md by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1073 +* build(deps-dev): bump @typescript-eslint/parser from 6.5.0 to 6.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1071 +* build(deps-dev): bump @vercel/ncc from 0.36.1 to 0.38.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1074 +* build(deps): bump @actions/core from 1.10.0 to 1.10.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1081 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.6.0 to 6.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1080 +* build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1078 +* build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1077 +* build(deps-dev): bump @types/node from 20.5.9 to 20.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1075 +* build(deps-dev): bump @typescript-eslint/parser from 6.6.0 to 6.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1079 +* build(deps-dev): bump eslint from 8.48.0 to 8.49.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1076 +* use cli instead of node uploader by @dana-yaish in https://github.com/codecov/codecov-action/pull/1068 +* chore(release): 4.0.0-beta.1 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1084 +* not adding -n if empty to do-upload command by @dana-yaish in https://github.com/codecov/codecov-action/pull/1085 +* 4.0.0-beta.2 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1086 +* build(deps-dev): bump jest from 29.6.4 to 29.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1082 +* build(deps-dev): bump @types/jest from 29.5.4 to 29.5.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1092 +* build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1094 +* build(deps-dev): bump @types/node from 20.6.0 to 20.6.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1093 +* build(deps): bump openpgp from 5.10.1 to 5.10.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1096 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.0 to 6.7.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1095 +* build(deps-dev): bump @types/node from 20.6.2 to 20.6.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1098 +* build(deps-dev): bump @typescript-eslint/parser from 6.7.0 to 6.7.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1097 +* feat: add plugins by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1099 +* build(deps-dev): bump eslint from 8.49.0 to 8.50.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1104 +* build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by @dependabot in https://github.com/codecov/codecov-action/pull/1102 +* build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1101 +* build(deps-dev): bump @typescript-eslint/parser from 6.7.2 to 6.7.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1108 +* build(deps-dev): bump @types/node from 20.6.3 to 20.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1107 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.2 to 6.7.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1106 +* build(deps-dev): bump @types/node from 20.7.0 to 20.7.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1111 +* build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by @dependabot in https://github.com/codecov/codecov-action/pull/1113 +* build(deps-dev): bump @types/node from 20.7.1 to 20.8.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1112 +* build(deps-dev): bump @types/node from 20.8.0 to 20.8.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1114 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.3 to 6.7.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1115 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.4 to 6.7.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1123 +* build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1120 +* build(deps): bump github/codeql-action from 2.21.9 to 2.22.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1119 +* build(deps-dev): bump @typescript-eslint/parser from 6.7.3 to 6.7.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1122 +* build(deps-dev): bump @types/node from 20.8.2 to 20.8.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1121 +* build(deps-dev): bump eslint from 8.50.0 to 8.51.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1117 +* build(deps): bump @actions/github from 5.1.1 to 6.0.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1124 +* build(deps): bump github/codeql-action from 2.22.0 to 2.22.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1127 +* build(deps-dev): bump @types/node from 20.8.4 to 20.8.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1126 +* build(deps-dev): bump @babel/traverse from 7.22.11 to 7.23.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1129 +* build(deps): bump undici from 5.25.4 to 5.26.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1128 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.5 to 6.8.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1130 +* build(deps-dev): bump @typescript-eslint/parser from 6.7.5 to 6.8.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1131 +* build(deps-dev): bump @types/node from 20.8.6 to 20.8.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1135 +* build(deps-dev): bump @vercel/ncc from 0.38.0 to 0.38.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1136 +* build(deps-dev): bump @types/jest from 29.5.5 to 29.5.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1137 +* build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1142 +* build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1141 +* build(deps-dev): bump eslint from 8.51.0 to 8.52.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1140 +* build(deps-dev): bump @typescript-eslint/parser from 6.8.0 to 6.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1147 +* build(deps-dev): bump @types/node from 20.8.7 to 20.8.8 by @dependabot in https://github.com/codecov/codecov-action/pull/1146 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.8.0 to 6.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1145 +* chore(deps): move from node-fetch to undici by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1148 +* build(deps): bump openpgp from 5.10.2 to 5.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1149 +* build(deps-dev): bump @typescript-eslint/parser from 6.9.0 to 6.9.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1155 +* build(deps): bump github/codeql-action from 2.22.4 to 2.22.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1152 +* build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1151 +* build(deps): bump undici from 5.26.5 to 5.27.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1150 +* build(deps-dev): bump @types/jest from 29.5.6 to 29.5.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1153 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.9.0 to 6.9.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1154 +* build(deps): bump undici from 5.27.0 to 5.27.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1157 +* build(deps-dev): bump eslint from 8.52.0 to 8.53.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1156 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.9.1 to 6.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1159 +* build(deps-dev): bump @typescript-eslint/parser from 6.9.1 to 6.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1158 +* build(deps-dev): bump @types/jest from 29.5.7 to 29.5.8 by @dependabot in https://github.com/codecov/codecov-action/pull/1161 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.10.0 to 6.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1164 +* build(deps-dev): bump @typescript-eslint/parser from 6.10.0 to 6.11.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1163 +* build(deps): bump github/codeql-action from 2.22.5 to 2.22.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1167 +* build(deps-dev): bump eslint from 8.53.0 to 8.54.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1166 +* build(deps-dev): bump @types/jest from 29.5.8 to 29.5.9 by @dependabot in https://github.com/codecov/codecov-action/pull/1172 +* build(deps-dev): bump typescript from 5.2.2 to 5.3.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1171 +* build(deps-dev): bump @typescript-eslint/parser from 6.11.0 to 6.12.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1170 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.11.0 to 6.12.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1169 +* build(deps): bump github/codeql-action from 2.22.7 to 2.22.8 by @dependabot in https://github.com/codecov/codecov-action/pull/1175 +* build(deps): bump undici from 5.27.2 to 5.28.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1174 +* build(deps-dev): bump @types/jest from 29.5.9 to 29.5.10 by @dependabot in https://github.com/codecov/codecov-action/pull/1173 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.12.0 to 6.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1178 +* build(deps-dev): bump @typescript-eslint/parser from 6.12.0 to 6.13.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1180 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.13.0 to 6.13.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1181 +* build(deps): bump undici from 5.28.0 to 5.28.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1179 +* build(deps-dev): bump eslint from 8.54.0 to 8.55.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1183 +* build(deps): bump undici from 5.28.1 to 5.28.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1182 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.13.1 to 6.13.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1185 +* build(deps-dev): bump @typescript-eslint/parser from 6.13.1 to 6.13.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1184 +* build(deps-dev): bump @types/jest from 29.5.10 to 29.5.11 by @dependabot in https://github.com/codecov/codecov-action/pull/1187 +* build(deps): bump undici from 5.28.2 to 6.0.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1186 +* build(deps-dev): bump typescript from 5.3.2 to 5.3.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1189 +* build(deps): bump undici from 6.0.0 to 6.0.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1188 +* build(deps): bump github/codeql-action from 2.22.8 to 2.22.9 by @dependabot in https://github.com/codecov/codecov-action/pull/1191 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.13.2 to 6.14.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1193 +* build(deps-dev): bump @typescript-eslint/parser from 6.13.2 to 6.14.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1192 +* build(deps-dev): bump eslint from 8.55.0 to 8.56.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1194 +* build(deps): bump github/codeql-action from 2.22.9 to 3.22.11 by @dependabot in https://github.com/codecov/codecov-action/pull/1195 +* build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1196 +* build(deps-dev): bump @typescript-eslint/parser from 6.14.0 to 6.15.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1198 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.14.0 to 6.15.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1197 +* build(deps): bump undici from 6.0.1 to 6.2.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1199 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.15.0 to 6.17.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1206 +* build(deps-dev): bump @typescript-eslint/parser from 6.15.0 to 6.17.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1205 +* build(deps): bump undici from 6.2.0 to 6.2.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1201 +* build(deps): bump github/codeql-action from 3.22.11 to 3.22.12 by @dependabot in https://github.com/codecov/codecov-action/pull/1200 +* build(deps-dev): bump @typescript-eslint/parser from 6.17.0 to 6.18.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1208 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.17.0 to 6.18.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1207 +* build(deps): bump undici from 6.2.1 to 6.3.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1211 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.18.0 to 6.18.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1210 +* build(deps-dev): bump @typescript-eslint/parser from 6.18.0 to 6.18.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1209 +* build(deps-dev): bump @typescript-eslint/parser from 6.18.1 to 6.19.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1215 +* build(deps): bump github/codeql-action from 3.22.12 to 3.23.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1213 +* build(deps): bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1212 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.18.1 to 6.19.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1214 +* fix: downgrade undici as it has a breaking change by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1219 +* fix: remove openpgp dep due to licensing and use gpg by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1218 +* chore(ci): add fossa workflow by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1216 +* build(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1222 +* build(deps): bump github/codeql-action from 3.23.0 to 3.23.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1221 +* build(deps-dev): bump @typescript-eslint/parser from 6.19.0 to 6.19.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1225 +* build(deps-dev): bump ts-jest from 29.1.1 to 29.1.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1224 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.19.0 to 6.19.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1223 +* build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1232 +* build(deps): bump github/codeql-action from 3.23.1 to 3.23.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1231 +* build(deps-dev): bump @typescript-eslint/parser from 6.19.1 to 6.20.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1235 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.19.1 to 6.20.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1234 +* chore(ci): bump to node20 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1236 +* Update README.md by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1237 +* Update package.json by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1238 +* fix: allow for other archs by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1239 +* fix: update action.yml by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1240 + +## New Contributors +* @dana-yaish made their first contribution in https://github.com/codecov/codecov-action/pull/943 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v3.1.6...v4.0.0 + +## v3.1.6 +#**Full Changelog**: https://github.com/codecov/codecov-action/compare/v3.1.5...v3.1.6 + +## v3.1.5 +### What's Changed +* action.yml: Update to Node.js 20 by @hallabro in https://github.com/codecov/codecov-action/pull/1228 + +## New Contributors +* @hallabro made their first contribution in https://github.com/codecov/codecov-action/pull/1228 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v3.1.4...v3.1.5 + +## v4.0.0-beta.3 (Prerelease) +### What's Changed +* build(deps-dev): bump jest from 29.6.4 to 29.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1082 +* build(deps-dev): bump @types/jest from 29.5.4 to 29.5.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1092 +* build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1094 +* build(deps-dev): bump @types/node from 20.6.0 to 20.6.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1093 +* build(deps): bump openpgp from 5.10.1 to 5.10.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1096 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.0 to 6.7.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1095 +* build(deps-dev): bump @types/node from 20.6.2 to 20.6.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1098 +* build(deps-dev): bump @typescript-eslint/parser from 6.7.0 to 6.7.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1097 +* feat: add plugins by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1099 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.0.0-beta.2...v4.0.0-beta.3 + +## v4.0.0-beta.2 (Prerelease) +### What's Changed +* not adding -n if empty to do-upload command by @dana-yaish in https://github.com/codecov/codecov-action/pull/1085 +* 4.0.0-beta.2 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1086 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v4.0.0-beta.1...v4.0.0-beta.2 + +## 4.0.0-beta.1 (Prerelease) +#`v4` represents a move from the [universal uploader](https://github.com/codecov/uploader) to the [Codecov CLI](https://github.com/codecov/codecov-cli). Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader. + +## Breaking Changes - No current support for `aarch64` and `alpine` architectures. - Tokenless uploading is unsuported - Various arguments to the Action have been removed -## 3.1.4 -### Fixes -- #967 Fix typo in README.md -- #971 fix: add back in working dir -- #969 fix: CLI option names for uploader +## What's Changed +* build(deps): bump openpgp from 5.8.0 to 5.9.0 by @dependabot in https://github.com/codecov/codecov-action/pull/985 +* build(deps): bump actions/checkout from 3.0.0 to 3.5.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1000 +* build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1006 +* build(deps): bump tough-cookie from 4.0.0 to 4.1.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1013 +* build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1024 +* build(deps): bump node-fetch from 3.3.1 to 3.3.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1031 +* build(deps-dev): bump @types/node from 20.1.4 to 20.4.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1032 +* build(deps): bump github/codeql-action from 1.0.26 to 2.21.2 by @dependabot in https://github.com/codecov/codecov-action/pull/1033 +* build commit,report and upload args based on codecovcli by @dana-yaish in https://github.com/codecov/codecov-action/pull/943 +* build(deps-dev): bump @types/node from 20.4.5 to 20.5.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1055 +* build(deps): bump github/codeql-action from 2.21.2 to 2.21.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1051 +* build(deps-dev): bump @types/node from 20.5.3 to 20.5.4 by @dependabot in https://github.com/codecov/codecov-action/pull/1058 +* chore(deps): update outdated deps by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1059 +* build(deps-dev): bump @types/node from 20.5.4 to 20.5.6 by @dependabot in https://github.com/codecov/codecov-action/pull/1060 +* build(deps-dev): bump @typescript-eslint/parser from 6.4.1 to 6.5.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1065 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.4.1 to 6.5.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1064 +* build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1063 +* build(deps-dev): bump eslint from 8.47.0 to 8.48.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1061 +* build(deps-dev): bump @types/node from 20.5.6 to 20.5.7 by @dependabot in https://github.com/codecov/codecov-action/pull/1062 +* build(deps): bump openpgp from 5.9.0 to 5.10.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1066 +* build(deps-dev): bump @types/node from 20.5.7 to 20.5.9 by @dependabot in https://github.com/codecov/codecov-action/pull/1070 +* build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by @dependabot in https://github.com/codecov/codecov-action/pull/1069 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.5.0 to 6.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1072 +* Update README.md by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1073 +* build(deps-dev): bump @typescript-eslint/parser from 6.5.0 to 6.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1071 +* build(deps-dev): bump @vercel/ncc from 0.36.1 to 0.38.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1074 +* build(deps): bump @actions/core from 1.10.0 to 1.10.1 by @dependabot in https://github.com/codecov/codecov-action/pull/1081 +* build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.6.0 to 6.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1080 +* build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1078 +* build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in https://github.com/codecov/codecov-action/pull/1077 +* build(deps-dev): bump @types/node from 20.5.9 to 20.6.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1075 +* build(deps-dev): bump @typescript-eslint/parser from 6.6.0 to 6.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1079 +* build(deps-dev): bump eslint from 8.48.0 to 8.49.0 by @dependabot in https://github.com/codecov/codecov-action/pull/1076 +* use cli instead of node uploader by @dana-yaish in https://github.com/codecov/codecov-action/pull/1068 +* chore(release): 4.0.0-beta.1 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1084 + +## New Contributors +* @dana-yaish made their first contribution in https://github.com/codecov/codecov-action/pull/943 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v3.1.4...v4.0.0-beta.1 -### Dependencies -- #970 build(deps-dev): bump @types/node from 18.15.12 to 18.16.3 -- #979 build(deps-dev): bump @types/node from 20.1.0 to 20.1.2 -- #981 build(deps-dev): bump @types/node from 20.1.2 to 20.1.4 +## 3.1.4 +### What's Changed +* build(deps-dev): bump @types/node from 18.15.12 to 18.16.3 by @dependabot in https://github.com/codecov/codecov-action/pull/970 +* Fix typo in README.md by @hisaac in https://github.com/codecov/codecov-action/pull/967 +* fix: add back in working dir by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/971 +* fix: CLI option names for uploader by @kleisauke in https://github.com/codecov/codecov-action/pull/969 +* build(deps-dev): bump @types/node from 18.16.3 to 20.1.0 by @dependabot in https://github.com/codecov/codecov-action/pull/975 +* build(deps-dev): bump @types/node from 20.1.0 to 20.1.2 by @dependabot in https://github.com/codecov/codecov-action/pull/979 +* build(deps-dev): bump @types/node from 20.1.2 to 20.1.4 by @dependabot in https://github.com/codecov/codecov-action/pull/981 +* release: 3.1.4 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/983 + +## New Contributors +* @hisaac made their first contribution in https://github.com/codecov/codecov-action/pull/967 +* @kleisauke made their first contribution in https://github.com/codecov/codecov-action/pull/969 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v3.1.3...v3.1.4 ## 3.1.3 -### Fixes -- #960 fix: allow for aarch64 build +### What's Changed +* build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0 by @dependabot in https://github.com/codecov/codecov-action/pull/957 +* build(deps): bump openpgp from 5.7.0 to 5.8.0 by @dependabot in https://github.com/codecov/codecov-action/pull/958 +* build(deps-dev): bump @types/node from 18.15.10 to 18.15.12 by @dependabot in https://github.com/codecov/codecov-action/pull/959 +* fix: allow for aarch64 build by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/960 +* chore(release): bump to 3.1.3 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/961 -### Dependencies -- #957 build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0 -- #958 build(deps): bump openpgp from 5.7.0 to 5.8.0 -- #959 build(deps-dev): bump @types/node from 18.15.10 to 18.15.12 -## 3.1.2 -### Fixes -- #718 Update README.md -- #851 Remove unsupported path_to_write_report argument -- #898 codeql-analysis.yml -- #901 Update README to contain correct information - inputs and negate feature -- #955 fix: add in all the extra arguments for uploader +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v3.1.2...v3.1.3 -### Dependencies -- #819 build(deps): bump openpgp from 5.4.0 to 5.5.0 -- #835 build(deps): bump node-fetch from 3.2.4 to 3.2.10 -- #840 build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4 -- #841 build(deps): bump @actions/core from 1.9.1 to 1.10.0 -- #843 build(deps): bump @actions/github from 5.0.3 to 5.1.1 -- #869 build(deps): bump node-fetch from 3.2.10 to 3.3.0 -- #872 build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0 -- #879 build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 -- #889 build(deps): bump ossf/scorecard-action from 1.1.1 to 2.1.2 -- #895 build(deps): bump json5 from 2.2.1 to 2.2.3 -- #896 build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 -- #900 build(deps-dev): bump @vercel/ncc from 0.34.0 to 0.36.1 -- #905 build(deps-dev): bump typescript from 4.7.4 to 4.9.5 -- #911 build(deps-dev): bump @types/node from 16.11.40 to 18.13.0 -- #922 build(deps-dev): bump @types/node from 18.13.0 to 18.14.0 -- #924 build(deps): bump openpgp from 5.5.0 to 5.7.0 -- #927 build(deps-dev): bump @types/node from 18.14.0 to 18.14.2 -- #933 build(deps-dev): bump @types/node from 18.14.2 to 18.14.6 -- #937 build(deps-dev): bump @types/node from 18.14.6 to 18.15.0 -- #938 build(deps): bump node-fetch from 3.3.0 to 3.3.1 -- #945 build(deps-dev): bump @types/node from 18.15.0 to 18.15.5 -- #946 build(deps-dev): bump @types/node from 18.15.5 to 18.15.6 -- #947 build(deps-dev): bump @types/node from 18.15.6 to 18.15.10 -- #951 build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 +## 3.1.2 +### What's Changed +* build(deps): bump node-fetch from 3.2.4 to 3.2.10 by @dependabot in https://github.com/codecov/codecov-action/pull/835 +* build(deps-dev): bump @types/node from 16.11.40 to 18.13.0 by @dependabot in https://github.com/codecov/codecov-action/pull/911 +* build(deps-dev): bump @vercel/ncc from 0.34.0 to 0.36.1 by @dependabot in https://github.com/codecov/codecov-action/pull/900 +* build(deps-dev): bump typescript from 4.7.4 to 4.9.5 by @dependabot in https://github.com/codecov/codecov-action/pull/905 +* Update README.md by @stefanomunarini in https://github.com/codecov/codecov-action/pull/718 +* build(deps): bump openpgp from 5.4.0 to 5.5.0 by @dependabot in https://github.com/codecov/codecov-action/pull/819 +* build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4 by @dependabot in https://github.com/codecov/codecov-action/pull/840 +* build(deps): bump @actions/core from 1.9.1 to 1.10.0 by @dependabot in https://github.com/codecov/codecov-action/pull/841 +* build(deps): bump @actions/github from 5.0.3 to 5.1.1 by @dependabot in https://github.com/codecov/codecov-action/pull/843 +* build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by @dependabot in https://github.com/codecov/codecov-action/pull/896 +* build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0 by @dependabot in https://github.com/codecov/codecov-action/pull/872 +* build(deps): bump node-fetch from 3.2.10 to 3.3.0 by @dependabot in https://github.com/codecov/codecov-action/pull/869 +* build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 by @dependabot in https://github.com/codecov/codecov-action/pull/879 +* build(deps): bump json5 from 2.2.1 to 2.2.3 by @dependabot in https://github.com/codecov/codecov-action/pull/895 +* codeql-analysis.yml by @minumulasri in https://github.com/codecov/codecov-action/pull/898 +* build(deps): bump ossf/scorecard-action from 1.1.1 to 2.1.2 by @dependabot in https://github.com/codecov/codecov-action/pull/889 +* build(deps-dev): bump @types/node from 18.13.0 to 18.14.0 by @dependabot in https://github.com/codecov/codecov-action/pull/922 +* build(deps): bump openpgp from 5.5.0 to 5.7.0 by @dependabot in https://github.com/codecov/codecov-action/pull/924 +* build(deps-dev): bump @types/node from 18.14.0 to 18.14.2 by @dependabot in https://github.com/codecov/codecov-action/pull/927 +* Remove unsupported path_to_write_report argument by @jsoref in https://github.com/codecov/codecov-action/pull/851 +* Update README to contain correct information - inputs and negate feature by @moshe-azaria-sage in https://github.com/codecov/codecov-action/pull/901 +* build(deps-dev): bump @types/node from 18.14.2 to 18.14.6 by @dependabot in https://github.com/codecov/codecov-action/pull/933 +* build(deps-dev): bump @types/node from 18.14.6 to 18.15.0 by @dependabot in https://github.com/codecov/codecov-action/pull/937 +* build(deps-dev): bump @types/node from 18.15.0 to 18.15.5 by @dependabot in https://github.com/codecov/codecov-action/pull/945 +* build(deps): bump node-fetch from 3.3.0 to 3.3.1 by @dependabot in https://github.com/codecov/codecov-action/pull/938 +* build(deps-dev): bump @types/node from 18.15.5 to 18.15.6 by @dependabot in https://github.com/codecov/codecov-action/pull/946 +* build(deps-dev): bump @types/node from 18.15.6 to 18.15.10 by @dependabot in https://github.com/codecov/codecov-action/pull/947 +* build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 by @dependabot in https://github.com/codecov/codecov-action/pull/951 +* fix: add in all the extra arguments for uploader by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/955 +* chore(release): bump to 3.1.2 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/956 + +## New Contributors +* @stefanomunarini made their first contribution in https://github.com/codecov/codecov-action/pull/718 +* @minumulasri made their first contribution in https://github.com/codecov/codecov-action/pull/898 +* @jsoref made their first contribution in https://github.com/codecov/codecov-action/pull/851 +* @moshe-azaria-sage made their first contribution in https://github.com/codecov/codecov-action/pull/901 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v3.1.1...v3.1.2 ## 3.1.1 -### Fixes -- #661 Update deprecation warning -- #593 Create codeql-analysis.yml -- #712 README: fix typo -- #725 fix: Remove a blank row -- #726 Update README.md with correct badge version -- #633 Create scorecards-analysis.yml -- #747 fix: add more verbosity to validation -- #750 Regenerate scorecards-analysis.yml -- #774 Switch to v3 -- #783 Fix network entry in table -- #791 Trim arguments after splitting them -- #769 Plumb failCi into verification function. - -### Dependencies -- #713 build(deps-dev): bump typescript from 4.6.3 to 4.6.4 -- #714 build(deps): bump node-fetch from 3.2.3 to 3.2.4 -- #724 build(deps): bump github/codeql-action from 1 to 2 -- #717 build(deps-dev): bump @types/jest from 27.4.1 to 27.5.0 -- #729 build(deps-dev): bump @types/node from 17.0.25 to 17.0.33 -- #734 build(deps-dev): downgrade @types/node to 16.11.35 -- #723 build(deps): bump actions/checkout from 2 to 3 -- #733 build(deps): bump @actions/github from 5.0.1 to 5.0.3 -- #732 build(deps): bump @actions/core from 1.6.0 to 1.8.2 -- #737 build(deps-dev): bump @types/node from 16.11.35 to 16.11.36 -- #749 build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0 -- #755 build(deps-dev): bump typescript from 4.6.4 to 4.7.3 -- #759 build(deps-dev): bump @types/node from 16.11.36 to 16.11.39 -- #762 build(deps-dev): bump @types/node from 16.11.39 to 16.11.40 -- #746 build(deps-dev): bump @vercel/ncc from 0.33.4 to 0.34.0 -- #757 build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1 -- #760 build(deps): bump openpgp from 5.2.1 to 5.3.0 -- #748 build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 -- #766 build(deps-dev): bump typescript from 4.7.3 to 4.7.4 -- #799 build(deps): bump openpgp from 5.3.0 to 5.4.0 -- #798 build(deps): bump @actions/core from 1.8.2 to 1.9.1 - -## 3.1.0 +### What's Changed +* Update deprecation warning by @slifty in https://github.com/codecov/codecov-action/pull/661 +* Create codeql-analysis.yml by @mitchell-codecov in https://github.com/codecov/codecov-action/pull/593 +* build(deps): bump node-fetch from 3.2.3 to 3.2.4 by @dependabot in https://github.com/codecov/codecov-action/pull/714 +* build(deps-dev): bump typescript from 4.6.3 to 4.6.4 by @dependabot in https://github.com/codecov/codecov-action/pull/713 +* README: fix typo by @Evalir in https://github.com/codecov/codecov-action/pull/712 +* build(deps): bump github/codeql-action from 1 to 2 by @dependabot in https://github.com/codecov/codecov-action/pull/724 +* build(deps-dev): bump @types/jest from 27.4.1 to 27.5.0 by @dependabot in https://github.com/codecov/codecov-action/pull/717 +* fix: Remove a blank row by @johnmanjiro13 in https://github.com/codecov/codecov-action/pull/725 +* Update README.md with correct badge version by @gsheni in https://github.com/codecov/codecov-action/pull/726 +* build(deps-dev): bump @types/node from 17.0.25 to 17.0.33 by @dependabot in https://github.com/codecov/codecov-action/pull/729 +* build(deps-dev): downgrade @types/node to 16.11.35 by @dependabot in https://github.com/codecov/codecov-action/pull/734 +* build(deps): bump actions/checkout from 2 to 3 by @dependabot in https://github.com/codecov/codecov-action/pull/723 +* build(deps): bump @actions/github from 5.0.1 to 5.0.3 by @dependabot in https://github.com/codecov/codecov-action/pull/733 +* build(deps): bump @actions/core from 1.6.0 to 1.8.2 by @dependabot in https://github.com/codecov/codecov-action/pull/732 +* build(deps-dev): bump @types/node from 16.11.35 to 16.11.36 by @dependabot in https://github.com/codecov/codecov-action/pull/737 +* Create scorecards-analysis.yml by @mitchell-codecov in https://github.com/codecov/codecov-action/pull/633 +* build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0 by @dependabot in https://github.com/codecov/codecov-action/pull/749 +* fix: add more verbosity to validation by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/747 +* build(deps-dev): bump typescript from 4.6.4 to 4.7.3 by @dependabot in https://github.com/codecov/codecov-action/pull/755 +* Regenerate scorecards-analysis.yml by @mitchell-codecov in https://github.com/codecov/codecov-action/pull/750 +* build(deps-dev): bump @types/node from 16.11.36 to 16.11.39 by @dependabot in https://github.com/codecov/codecov-action/pull/759 +* build(deps-dev): bump @types/node from 16.11.39 to 16.11.40 by @dependabot in https://github.com/codecov/codecov-action/pull/762 +* build(deps-dev): bump @vercel/ncc from 0.33.4 to 0.34.0 by @dependabot in https://github.com/codecov/codecov-action/pull/746 +* build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1 by @dependabot in https://github.com/codecov/codecov-action/pull/757 +* build(deps): bump openpgp from 5.2.1 to 5.3.0 by @dependabot in https://github.com/codecov/codecov-action/pull/760 +* build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 by @dependabot in https://github.com/codecov/codecov-action/pull/748 +* build(deps-dev): bump typescript from 4.7.3 to 4.7.4 by @dependabot in https://github.com/codecov/codecov-action/pull/766 +* Switch to v3 by @thomasrockhu in https://github.com/codecov/codecov-action/pull/774 +* Fix `network` entry in table by @kevmoo in https://github.com/codecov/codecov-action/pull/783 +* Trim arguments after splitting them by @mitchell-codecov in https://github.com/codecov/codecov-action/pull/791 +* build(deps): bump openpgp from 5.3.0 to 5.4.0 by @dependabot in https://github.com/codecov/codecov-action/pull/799 +* build(deps): bump @actions/core from 1.8.2 to 1.9.1 by @dependabot in https://github.com/codecov/codecov-action/pull/798 +* Plumb failCi into verification function. by @RobbieMcKinstry in https://github.com/codecov/codecov-action/pull/769 +* release: update changelog and version to 3.1.1 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/828 + +## New Contributors +* @slifty made their first contribution in https://github.com/codecov/codecov-action/pull/661 +* @Evalir made their first contribution in https://github.com/codecov/codecov-action/pull/712 +* @johnmanjiro13 made their first contribution in https://github.com/codecov/codecov-action/pull/725 +* @gsheni made their first contribution in https://github.com/codecov/codecov-action/pull/726 +* @kevmoo made their first contribution in https://github.com/codecov/codecov-action/pull/783 +* @RobbieMcKinstry made their first contribution in https://github.com/codecov/codecov-action/pull/769 + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v3.1.0...v3.1.1 + +## v3.1.0 +### 3.1.0 ### Features - #699 Incorporate `xcode` arguments for the Codecov uploader @@ -112,8 +745,8 @@ - #696 build(deps-dev): bump @types/node from 17.0.23 to 17.0.25 - #698 build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0 -## 3.0.0 -### Breaking Changes +## v3.0.0 +#### Breaking Changes - #689 Bump to node16 and small fixes ### Features @@ -137,7 +770,8 @@ - #676 build(deps): bump @actions/exec from 1.1.0 to 1.1.1 - #675 build(deps): bump openpgp from 5.1.0 to 5.2.1 -## 2.1.0 +## v2.1.0 +### 2.1.0 ### Features - #515 Allow specifying version of Codecov uploader @@ -146,7 +780,8 @@ - #508 build(deps): bump openpgp from 5.0.0-5 to 5.0.0 - #514 build(deps-dev): bump @types/node from 16.6.0 to 16.9.0 -## 2.0.3 +## v2.0.3 +### 2.0.3 ### Fixes - #464 Fix wrong link in the readme - #485 fix: Add override OS and linux default to platform @@ -166,11 +801,22 @@ - #483 build(deps-dev): bump @vercel/ncc from 0.29.0 to 0.29.2 - #484 build(deps): bump @actions/core from 1.4.0 to 1.5.0 -## 2.0.2 -### Fixes +## v2.0.2 +#### Fixes - Underlying uploader fixes issues with tokens not being sent properly for users seeing - `Error!: Error: Error uploading to https://codecov.io: Error: Error uploading to Codecov: Error: Not Found` -- #440 fix: Validation ordering +`Error!: Error: Error uploading to https://codecov.io: Error: Error uploading to Codecov: Error: Not Found` +- #432 fix: use import to destructure package.json +- #434 fix: openpgp and asn1.js +- #440 2.0.2 token fixes + +### Dependencies +- #420 Bump eslint from 7.30.0 to 7.31.0 +- #433 build(deps-dev): bump @types/node from 16.3.3 to 16.4.0 +- #425 build(deps-dev): bump @typescript-eslint/eslint-plugin from 4.28.3 to 4.28.4 +- #426 build(deps-dev): bump @typescript-eslint/parser from 4.28.3 to 4.28.4 +- #438 Set up Dependabot for github-actions dependencies + + ## 2.0.1 ### Fixes diff --git a/changelog.py b/changelog.py new file mode 100644 index 0000000000..39d8c9e56d --- /dev/null +++ b/changelog.py @@ -0,0 +1,66 @@ +import json +import re +import subprocess + +def update_changelog(): + with open('src/version', 'r') as f: + raw_version = f.read() + version = re.search('\"(.*)\"', raw_version).groups()[0] + changelog = [f"## v{version}"] + changelog.append("### What\'s Changed") + + with open('CHANGELOG.md', 'r') as f: + previous = f.readline().replace("##", '').strip() + + if previous == version: + print(f"No changes to version {version}") + return + print(f"Adding logs from {previous}..{version}") + + raw_current_branch = subprocess.run([ + "git", + "branch", + "--show-current", + ], capture_output=True) + current_branch = raw_current_branch.stdout.decode('utf-8') + + raw_commits = subprocess.run([ + "git", + "log", + f"{previous}..{current_branch}", + "--oneline", + ], capture_output=True) + commits = [line[:7] for line in raw_commits.stdout.decode('utf-8').split('\n')] + + prs = set() + for commit in commits: + commit_output = subprocess.run([ + 'gh', + 'pr', + 'list', + '--json', + 'author,number,title,url', + '--search', + f'"{commit}"', + ], capture_output=True) + commit_details = json.loads(commit_output.stdout.decode('utf-8'))[0] + if not commit_details['number']: + continue + if commit_details['number'] in prs: + continue + prs.add(commit_details['number']) + changelog.append(f"* {commit_details['title']} by @{commit_details['author']['login']} in {commit_details['url']}") + + changelog.append('\n') + changelog.append(f"**Full Changelog**: https://github.com/codecov/codecov-action/compare/{previous}..{version}\n") + + with open('CHANGELOG.md', 'r') as f: + for line in f: + changelog.append(line.strip()) + + with open('CHANGELOG.md', 'w') as f: + f.write('\n'.join(changelog)) + + +if __name__=="__main__": + update_changelog() diff --git a/hooks/pre-commit b/hooks/pre-commit index d6c6a438fb..85e3636d91 100755 --- a/hooks/pre-commit +++ b/hooks/pre-commit @@ -4,3 +4,8 @@ set -e cp src/scripts/dist/codecov.sh dist/codecov.sh git add dist/codecov.sh + +git diff --cached --name-only | if grep --quiet "src/version" +then + python changelog.py +fi From 9c78078f595fd0f9bf275c5035c60da9ce9b02d0 Mon Sep 17 00:00:00 2001 From: Tom Hu <88201630+thomasrockhu-codecov@users.noreply.github.com> Date: Tue, 19 Nov 2024 12:56:18 -0500 Subject: [PATCH 5/8] fix: prevent always setting tokenless to be true (#1673) --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 871231929f..161a292196 100644 --- a/action.yml +++ b/action.yml @@ -179,7 +179,7 @@ runs: - name: Override branch for forks shell: bash run: | - if [ -z "$CC_BRANCH" ] && [ -z "$CC_TOKEN" ] && [ "${GITHUB_EVENT_PULL_REQUEST_REPO_FULL_NAME}" != "$GITHUB_REPOSITORY" ]; + if [ -z "$CC_BRANCH" ] && [ -z "$CC_TOKEN" ] && [ -n "$GITHUB_EVENT_PULL_REQUEST_REPO_FULL_NAME"] && [ "${GITHUB_EVENT_PULL_REQUEST_REPO_FULL_NAME}" != "$GITHUB_REPOSITORY" ]; then echo -e "\033[0;32m==>\033[0m Fork detected, tokenless uploading used" TOKENLESS="$GITHUB_EVENT_PULL_REQUEST_HEAD_LABEL" From e8603fa30787f57d94a36f031f805c6b2e4d0b11 Mon Sep 17 00:00:00 2001 From: Tom Hu <88201630+thomasrockhu-codecov@users.noreply.github.com> Date: Tue, 19 Nov 2024 14:14:58 -0500 Subject: [PATCH 6/8] fix: use double-quotes for OIDC (#1669) * fix: get log for use oidc * fix: add oidc run * fix: move the oidc call * fix: update to use double quote on oidc --- .github/workflows/main.yml | 8 ++++++++ action.yml | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 6bc4004245..4c6106e937 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -78,6 +78,14 @@ jobs: name: codecov-demo verbose: true token: ${{ secrets.CODECOV_TOKEN }} + - name: Upload coverage to Codecov (oidc) + uses: ./ + with: + files: ./coverage/script/coverage-final.json + flags: script,${{ matrix.os }} + name: codecov-script + use_oidc: true + verbose: true - name: Upload coverage to Codecov (version) uses: ./ with: diff --git a/action.yml b/action.yml index 161a292196..2b390f34f9 100644 --- a/action.yml +++ b/action.yml @@ -166,7 +166,7 @@ runs: if [ ${{ inputs.use_oidc }} == 'true' ]; then # {"count":1984,"value":"***"} - CC_TOKEN=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=api://AzureADTokenExchange" | cut -d\' -f6) + CC_TOKEN=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=api://AzureADTokenExchange" | cut -d\" -f6) echo "CC_TOKEN=$CC_TOKEN" >> "$GITHUB_ENV" else if [ -n ${{ inputs.token }} ]; From 28b3165f9282bdd8a13b2fbe24c27199da421b5c Mon Sep 17 00:00:00 2001 From: Tom Hu <88201630+thomasrockhu-codecov@users.noreply.github.com> Date: Tue, 19 Nov 2024 15:20:22 -0500 Subject: [PATCH 7/8] fix: update OIDC audience (#1675) * dnm: whats the token * fix: show the url * fix: do the echo * fix: just echo * fix: true == true * fix get the action * fix: use audience --- action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/action.yml b/action.yml index 2b390f34f9..f2fa3ab90e 100644 --- a/action.yml +++ b/action.yml @@ -163,10 +163,10 @@ runs: - name: Get and set token shell: bash run: | - if [ ${{ inputs.use_oidc }} == 'true' ]; + if [ "${{ inputs.use_oidc }}" == 'true' ]; then # {"count":1984,"value":"***"} - CC_TOKEN=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=api://AzureADTokenExchange" | cut -d\" -f6) + CC_TOKEN=$(curl -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=https://codecov.io" | cut -d\" -f6) echo "CC_TOKEN=$CC_TOKEN" >> "$GITHUB_ENV" else if [ -n ${{ inputs.token }} ]; From 05f5a9cfad807516dbbef9929c4a42df3eb78766 Mon Sep 17 00:00:00 2001 From: Tom Hu <88201630+thomasrockhu-codecov@users.noreply.github.com> Date: Tue, 19 Nov 2024 15:39:28 -0500 Subject: [PATCH 8/8] chore(release): 5.0.3 (#1676) --- CHANGELOG.md | 15 ++++++++++++++- changelog.py | 19 +++++++++++++++---- hooks/pre-commit | 2 ++ src/version | 2 +- 4 files changed, 32 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 8ab94fe462..4af06b0607 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,16 @@ +## v5.0.3 +### What's Changed +* fix: update OIDC audience by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1675 +* fix: use double-quotes for OIDC by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1669 +* fix: prevent always setting tokenless to be true by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1673 +* fix: update CHANGELOG and automate by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1674 +* fix: bump to v5 and update README by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1655 +* build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1665 +* fix: typo in `inputs.disable_safe_directory` by @mkroening in https://github.com/codecov/codecov-action/pull/1666 + + +**Full Changelog**: https://github.com/codecov/codecov-action/compare/v5.0.2..v5.0.3 + ## v5.0.2 ### What's Changed * fix: override commit and pr values for PR cases by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1657 @@ -935,4 +948,4 @@ for the full list. ### Dependencies and Misc - #166 Bump requestretry from 4.1.1 to 4.1.2 - #169 Bump typescript from 4.0.5 to 4.1.2 -- #178 Bump @types/jest from 26.0.15 to 26.0.19 +- #178 Bump @types/jest from 26.0.15 to 26.0.19 \ No newline at end of file diff --git a/changelog.py b/changelog.py index 39d8c9e56d..059d91f291 100644 --- a/changelog.py +++ b/changelog.py @@ -15,14 +15,14 @@ def update_changelog(): if previous == version: print(f"No changes to version {version}") return - print(f"Adding logs from {previous}..{version}") + print(f"Adding logs from {previous}..v{version}") raw_current_branch = subprocess.run([ "git", "branch", "--show-current", ], capture_output=True) - current_branch = raw_current_branch.stdout.decode('utf-8') + current_branch = raw_current_branch.stdout.decode('utf-8').strip() raw_commits = subprocess.run([ "git", @@ -31,9 +31,12 @@ def update_changelog(): "--oneline", ], capture_output=True) commits = [line[:7] for line in raw_commits.stdout.decode('utf-8').split('\n')] + print(commits) prs = set() for commit in commits: + if not commit: + continue commit_output = subprocess.run([ 'gh', 'pr', @@ -42,8 +45,16 @@ def update_changelog(): 'author,number,title,url', '--search', f'"{commit}"', + '--state', + 'merged', ], capture_output=True) - commit_details = json.loads(commit_output.stdout.decode('utf-8'))[0] + + commit_details = commit_output.stdout.decode('utf-8') + if not commit_details or not json.loads(commit_details): + continue + commit_details = json.loads(commit_details)[0] + + if not commit_details['number']: continue if commit_details['number'] in prs: @@ -52,7 +63,7 @@ def update_changelog(): changelog.append(f"* {commit_details['title']} by @{commit_details['author']['login']} in {commit_details['url']}") changelog.append('\n') - changelog.append(f"**Full Changelog**: https://github.com/codecov/codecov-action/compare/{previous}..{version}\n") + changelog.append(f"**Full Changelog**: https://github.com/codecov/codecov-action/compare/{previous}..v{version}\n") with open('CHANGELOG.md', 'r') as f: for line in f: diff --git a/hooks/pre-commit b/hooks/pre-commit index 85e3636d91..e5a9246338 100755 --- a/hooks/pre-commit +++ b/hooks/pre-commit @@ -9,3 +9,5 @@ git diff --cached --name-only | if grep --quiet "src/version" then python changelog.py fi + +git add CHANGELOG.md diff --git a/src/version b/src/version index 5a7c4cd0fc..a0f7001f08 100644 --- a/src/version +++ b/src/version @@ -1 +1 @@ -CODECOV_ACTION_VERSION="5.0.2" +CODECOV_ACTION_VERSION="5.0.3"