v4 of the Codecov Action uses the CLI as the underlying upload. The CLI has helped to power new features including local upload, the global upload token, and new upcoming features.
Breaking Changes
The Codecov Action runs as a node20 action due to node16 deprecation. See this post from GitHub on how to migrate.
Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This doc shows instructions on how to add the Codecov token.
OS platforms have been added, though some may not be automatically detected. To see a list of platforms, see our CLI download page
Various arguments to the Action have been changed. Please be aware that the arguments match with the CLI's needs
v3 versions and below will not have access to CLI features (e.g. global upload token, ATS).
v4 represents a move from the universal uploader to the Codecov CLI. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.
Breaking Changes
No current support for aarch64 and alpine architectures.
Bumps the github-actions group with 23 updates in the / directory:
2434675.0.05.5.145342.3.12.4.0230.6.00.8.03434453.7.06.0.11.2.01.3.01.8.01.10.04545240.8.30.9.056565689Updates
actions/checkoutfrom 2 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
a5ac7e5Update for 4.1.6 release (#1733)24ed1a3Check platform for extension (#1732)44c2b7aREADME: Suggestuser.emailto be `41898282+github-actions[bot]@users.norepl...8459bc0Bump actions/upload-artifact from 2 to 4 (#1695)3f603f6Bump actions/setup-node from 1 to 4 (#1696)fd084cdBump github/codeql-action from 2 to 3 (#1694)9c1e94eUpdate NPM dependencies (#1703)0ad4b8fPrep Release v4.1.4 (#1704)43045aeDisableextensions.worktreeConfigwhen disablingsparse-checkout(#1692)37b0821Bump the minor-actions-dependencies group with 2 updates (#1693)Updates
peter-evans/create-or-update-commentfrom 3 to 4Release notes
Sourced from peter-evans/create-or-update-comment's releases.
... (truncated)
Commits
71345befeat: update runtime to node 20 (#306)d41bfe3build(deps-dev): bump prettier from 3.2.3 to 3.2.4 (#305)73b4b9ebuild(deps-dev): bump@types/nodefrom 18.19.7 to 18.19.8 (#304)b865facbuild(deps-dev): bump@types/nodefrom 18.19.6 to 18.19.7 (#303)52b668abuild(deps-dev): bump eslint-plugin-jest from 27.6.1 to 27.6.3 (#302)974f56abuild(deps-dev): bump prettier from 3.1.1 to 3.2.3 (#301)2cbfe8bbuild(deps-dev): bump@types/nodefrom 18.19.4 to 18.19.6 (#300)761872abuild(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 (#299)72c3238build(deps-dev): bump@types/nodefrom 18.19.3 to 18.19.4 (#298)07daf7bbuild(deps-dev): bump eslint-plugin-jest from 27.6.0 to 27.6.1 (#297)Updates
actions/github-scriptfrom 6 to 7Release notes
Sourced from actions/github-script's releases.
... (truncated)
Commits
60a0d83Merge pull request #440 from actions/joshmgross/v7.0.1b7fb200Update version to 7.0.112e22edMerge pull request #439 from actions/joshmgross/avoid-setting-base-urld319f8fAvoid settingbaseUrlto undefined when input is not providede69ef54Merge pull request #425 from actions/joshmgross/node-20ee0914bUpdate licensesd6fc56fUse@types/nodefor Node 20384d6cfFix quotations in tests8472492Only validate GraphQLpreviews84903f5Removenode-fetchfrom typeUpdates
docker/metadata-actionfrom 5.0.0 to 5.5.1Release notes
Sourced from docker/metadata-action's releases.
Commits
8e5442cMerge pull request #382 from crazy-max/dont-set-cwd-prefixeda41b7chore: update generated content388c08fdon't set cwd:// prefix for local bake filesdbef880Merge pull request #374 from docker/dependabot/npm_and_yarn/moment-timezone-0...b73e7a7chore: update generated contentb9fba69chore(deps): Bump moment-timezone from 0.5.43 to 0.5.44ac82374Merge pull request #373 from docker/dependabot/npm_and_yarn/moment-2.30.1c92519achore: update generated content3b4179dchore(deps): Bump moment from 2.29.4 to 2.30.10784993Merge pull request #371 from docker/dependabot/npm_and_yarn/docker/actions-to...Updates
magnetikonline/action-golang-cachefrom 4 to 5Release notes
Sourced from magnetikonline/action-golang-cache's releases.
Commits
fcca93eBumpactions/setup-go@v5/actions/cache@v4ec2faafUseformat()workflow expression to append optionalinputs.cache-key-suffix1bec231Set explicit emptydefault:forgo-versionandgo-version-fileinputsd3e977bImproveaction.yamldescription47ba946UpdateREADME.mdUpdates
codecov/codecov-actionfrom 3 to 4Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
125fc84chore(release): 4.4.1 (#1441)c9dbf6afix: isPullRequestFromFork returns false for any PR (#1437)59fc46fbuild(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#1438)3889fddbuild(deps): bump github/codeql-action from 3.25.4 to 3.25.5 (#1439)d42a336fix: prevent xlarge from running on forks (#1432)fd624e5build(deps-dev): bump@typescript-eslint/eslint-pluginfrom 7.8.0 to 7.9.0 (#...6d79887chore(release): 4.4.0 (#1430)37364fabuild(deps-dev): bump@typescript-eslint/parserfrom 7.8.0 to 7.9.0 (#1428)2791a5cfix: remove GPG and run on spawn (#1426)b71af43build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 (#1420)The following labels could not be found:
dependencies.Looks like these dependencies are updatable in another way, so this is no longer needed.