v4 of the Codecov Action uses the CLI as the underlying upload. The CLI has helped to power new features including local upload, the global upload token, and new upcoming features.
Breaking Changes
The Codecov Action runs as a node20 action due to node16 deprecation. See this post from GitHub on how to migrate.
Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This doc shows instructions on how to add the Codecov token.
OS platforms have been added, though some may not be automatically detected. To see a list of platforms, see our CLI download page
Various arguments to the Action have been changed. Please be aware that the arguments match with the CLI's needs
v3 versions and below will not have access to CLI features (e.g. global upload token, ATS).
v4 represents a move from the universal uploader to the Codecov CLI. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.
Breaking Changes
No current support for aarch64 and alpine architectures.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the all-actions group with 4 updates: actions/checkout, github/codeql-action, codecov/codecov-action and google-github-actions/release-please-action.
Updates
actions/checkoutfrom 2 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
692973ePrepare 4.1.7 release (#1775)6ccd57fPin actions/checkout's own workflows to a known, good, stable version. (#1776)b17fe1eHandle hidden refs (#1774)b80ff79Bump actions/checkout from 3 to 4 (#1697)b1ec302Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)a5ac7e5Update for 4.1.6 release (#1733)24ed1a3Check platform for extension (#1732)44c2b7aREADME: Suggestuser.emailto be `41898282+github-actions[bot]@users.norepl...8459bc0Bump actions/upload-artifact from 2 to 4 (#1695)3f603f6Bump actions/setup-node from 1 to 4 (#1696)Updates
github/codeql-actionfrom 1 to 3Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
Commits
8214744Merge pull request #2478 from github/update-v3.26.7-4a01ec798a3b3e07Update changelog for v3.26.74a01ec7Merge pull request #2474 from github/aeisenberg/always-upload-eslint-sarif762dbaeMerge pull request #2471 from github/update-bundle/codeql-bundle-v2.18.40d0f998Always upload eslint.sarife817992Merge pull request #2469 from github/aeisenberg/upload-eslint-sarif49021adMerge pull request #2472 from rvermeulen/rvermeulen/update-release-branch-authz56b8418Ignore suppressed alertsf824adbMerge branch 'main' into rvermeulen/update-release-branch-authz8d9ed0bAdd changelog noteUpdates
codecov/codecov-actionfrom 1 to 4Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
e28ff12chore(release): bump to 4.5.0 (#1477)7594baaUse an existing token even if the PR is from a fork (#1471)81c0a51feat: add support for tokenless v3 (#1410)f5e203fbuild(deps-dev): bump@typescript-eslint/eslint-pluginfrom 7.12.0 to 7.13.0 ...7c48363build(deps-dev): bump braces from 3.0.2 to 3.0.3 (#1475)69e5d09build(deps-dev): bump@typescript-eslint/parserfrom 7.12.0 to 7.13.0 (#1474)feaf700fix: handle trailing commas (#1470)7b6a727build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 (#1472)ccf7a1fbuild(deps-dev): bump@typescript-eslint/eslint-pluginfrom 7.11.0 to 7.12.0 ...f03f015build(deps-dev): bump@typescript-eslint/parserfrom 7.11.0 to 7.12.0 (#1467)Updates
google-github-actions/release-please-actionfrom 2 to 4Changelog
Sourced from google-github-actions/release-please-action's changelog.
... (truncated)
Commits
e4dc86bchore(main): release 4.1.1 (#8)db75dc8build: skip fork for release-please PR (#7)31aa19dchore: build dist (#6)04f3fd9build: push to main repo (#5)64ab157build: use a -legacy suffix for the fork name from this repository (#4)edb78cffix: add deprecation warning to workflow run (#1)a37ac6echore(main): release 4.1.0 (#957)733a6d7chore: build dist (#956)863b06ffeat: addchangelog-hostinput toaction.yml(#948)078b9b8chore(main): release 4.0.3 (#955)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show