v4 of the Codecov Action uses the CLI as the underlying upload. The CLI has helped to power new features including local upload, the global upload token, and new upcoming features.
Breaking Changes
The Codecov Action runs as a node20 action due to node16 deprecation. See this post from GitHub on how to migrate.
Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This doc shows instructions on how to add the Codecov token.
OS platforms have been added, though some may not be automatically detected. To see a list of platforms, see our CLI download page
Various arguments to the Action have been changed. Please be aware that the arguments match with the CLI's needs
v3 versions and below will not have access to CLI features (e.g. global upload token, ATS).
v4 represents a move from the universal uploader to the Codecov CLI. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.
Breaking Changes
No current support for aarch64 and alpine architectures.
Bumps the github-actions group with 22 updates:
2
4
3
4
6
7
5.0.0
5.5.1
4
5
3
4
2.3.1
2.3.2
2
3
0.6.0
0.8.0
3
4
3
4
4
5
3.7.0
5.0.0
1.2.0
1.3.0
1.8.0
1.9.3
4
5
4
5
2
4
0.8.3
0.9.0
5
6
5
6
8
9
Updates
actions/checkout
from 2 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
1d96c77
Add SSH user parameter (#1685)cd7d8d6
Check git version before attempting to disablesparse-checkout
(#1656)8410ad0
Updateactions/checkout
version inupdate-main-version.yml
(#1650)9bb5618
Prep for release of v4.1.2 (#1649)8eb1f6a
Bump@babel/traverse
from 7.20.5 to 7.24.0 (#1642)556e4c3
Bump tough-cookie from 4.0.0 to 4.1.3 (#1406)b32f140
Warn on attempts to publishtest-ubuntu-git
from non-main branch. (#1623)2650dbd
Givetest-ubuntu-git
its ownREADME
(#1620)aadec89
Explicitly disable sparse checkout unless asked for (#1598)df0bcdd
Refine workflow for generatingtest-ubuntu-git
(#1617)Updates
peter-evans/create-or-update-comment
from 3 to 4Release notes
Sourced from peter-evans/create-or-update-comment's releases.
... (truncated)
Commits
71345be
feat: update runtime to node 20 (#306)d41bfe3
build(deps-dev): bump prettier from 3.2.3 to 3.2.4 (#305)73b4b9e
build(deps-dev): bump@types/node
from 18.19.7 to 18.19.8 (#304)b865fac
build(deps-dev): bump@types/node
from 18.19.6 to 18.19.7 (#303)52b668a
build(deps-dev): bump eslint-plugin-jest from 27.6.1 to 27.6.3 (#302)974f56a
build(deps-dev): bump prettier from 3.1.1 to 3.2.3 (#301)2cbfe8b
build(deps-dev): bump@types/node
from 18.19.4 to 18.19.6 (#300)761872a
build(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 (#299)72c3238
build(deps-dev): bump@types/node
from 18.19.3 to 18.19.4 (#298)07daf7b
build(deps-dev): bump eslint-plugin-jest from 27.6.0 to 27.6.1 (#297)Updates
actions/github-script
from 6 to 7Release notes
Sourced from actions/github-script's releases.
... (truncated)
Commits
60a0d83
Merge pull request #440 from actions/joshmgross/v7.0.1b7fb200
Update version to 7.0.112e22ed
Merge pull request #439 from actions/joshmgross/avoid-setting-base-urld319f8f
Avoid settingbaseUrl
to undefined when input is not providede69ef54
Merge pull request #425 from actions/joshmgross/node-20ee0914b
Update licensesd6fc56f
Use@types/node
for Node 20384d6cf
Fix quotations in tests8472492
Only validate GraphQLpreviews
84903f5
Removenode-fetch
from typeUpdates
docker/metadata-action
from 5.0.0 to 5.5.1Release notes
Sourced from docker/metadata-action's releases.
Commits
8e5442c
Merge pull request #382 from crazy-max/dont-set-cwd-prefixeda41b7
chore: update generated content388c08f
don't set cwd:// prefix for local bake filesdbef880
Merge pull request #374 from docker/dependabot/npm_and_yarn/moment-timezone-0...b73e7a7
chore: update generated contentb9fba69
chore(deps): Bump moment-timezone from 0.5.43 to 0.5.44ac82374
Merge pull request #373 from docker/dependabot/npm_and_yarn/moment-2.30.1c92519a
chore: update generated content3b4179d
chore(deps): Bump moment from 2.29.4 to 2.30.10784993
Merge pull request #371 from docker/dependabot/npm_and_yarn/docker/actions-to...Updates
magnetikonline/action-golang-cache
from 4 to 5Release notes
Sourced from magnetikonline/action-golang-cache's releases.
Commits
fcca93e
Bumpactions/setup-go@v5
/actions/cache@v4
ec2faaf
Useformat()
workflow expression to append optionalinputs.cache-key-suffix
1bec231
Set explicit emptydefault:
forgo-version
andgo-version-file
inputsd3e977b
Improveaction.yaml
description47ba946
UpdateREADME.md
Updates
codecov/codecov-action
from 3 to 4Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
8450866
chore(release): v4.3.0 (#1366)e841909
build(deps): bump undici from 5.28.3 to 5.28.4 (#1361)363a65a
feat: add network params (#1365)640b86a
build(deps-dev): bump@typescript-eslint/parser
from 7.5.0 to 7.6.0 (#1363)375c033
build(deps-dev): bump@typescript-eslint/eslint-plugin
from 7.5.0 to 7.6.0 (#...d701256
build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 (#1360)0bb547a
build(deps-dev): bump typescript from 5.4.3 to 5.4.4 (#1355)55e8381
fix: automatically detect if using GitHub enterprise (#1356)7afa10e
fix: use_oidc shoudl be required false (#1353)d820d60
feat: allow for authentication via OIDC token (#1330)Updates
contributor-assistant/github-action
from 2.3.1 to 2.3.2Release notes
Sourced from contributor-assistant/github-action's releases.
Superseded by #53.