renovate[bot] commented 4 years ago

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
codecov	`3.0.2` -> `3.6.2`

GitHub Vulnerability Alerts

CVE-2020-7596

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.

Release Notes

codecov/codecov-node (codecov)

### [`v3.6.2`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#362) [Compare Source](https://togithub.com/codecov/codecov-node/compare/v3.6.1...v3.6.2) - Command line args sanitized fix ### [`v3.6.1`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#361) [Compare Source](https://togithub.com/codecov/codecov-node/compare/v3.6.0...v3.6.1) - Fix for Semaphore ### [`v3.6.0`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#360) [Compare Source](https://togithub.com/codecov/codecov-node/compare/e98d176505b669fe2973336fe9c037e6ea4f2948...v3.6.0) - Added AWS CodeBuild and Semaphore2 ### [`v3.5.0`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#350) [Compare Source](https://togithub.com/codecov/codecov-node/compare/v3.4.0...e98d176505b669fe2973336fe9c037e6ea4f2948) - Added TeamCity support ### [`v3.4.0`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#340) [Compare Source](https://togithub.com/codecov/codecov-node/compare/v3.3.0...v3.4.0) - Added Heroku CI support ### [`v3.3.0`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#330) [Compare Source](https://togithub.com/codecov/codecov-node/compare/e427d900309adb50746a39a50aa7d80071a5ddd0...v3.3.0) - Added pipe with `--pipe`, `-l` ### [`v3.2.0`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#320) [Compare Source](https://togithub.com/codecov/codecov-node/compare/v3.1.0...e427d900309adb50746a39a50aa7d80071a5ddd0) - Added azure pipelines . ### [`v3.1.0`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#310) [Compare Source](https://togithub.com/codecov/codecov-node/compare/v3.0.4...v3.1.0) - Custom yaml file. Allow codecov token from yml file. ### [`v3.0.4`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#304) [Compare Source](https://togithub.com/codecov/codecov-node/compare/v3.0.3...v3.0.4) - Security fixes ### [`v3.0.3`](https://togithub.com/codecov/codecov-node/blob/HEAD/CHANGELOG.md#303) [Compare Source](https://togithub.com/codecov/codecov-node/compare/v3.0.2...v3.0.3) - Support non-git/hg root dirs

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

michaelhsu-bot commented 4 years ago

	Warnings
:warning:	Please add a label to your PR.
:warning:	Please assign someone to merge this PR, and optionally include people who should review.
:warning:	Changes were made to package.json, but not to licenses.csv - Perhaps you need to run `$ yarn run license`?

Generated by :no_entry_sign: dangerJS

codecov[bot] commented 4 years ago

Codecov Report

Base: 83.77% // Head: 83.77% // No change to project coverage :thumbsup:

Coverage data is based on head (f0db7f2) compared to base (ae921c2). Patch has no changes to coverable lines.

:exclamation: Current head f0db7f2 differs from pull request most recent head f0bf73e. Consider uploading reports for the commit f0bf73e to get more accurate results

Additional details and impacted files

```diff @@ Coverage Diff @@ ## master #675 +/- ## ======================================= Coverage 83.77% 83.77% ======================================= Files 326 326 Lines 2694 2694 Branches 174 174 ======================================= Hits 2257 2257 Misses 372 372 Partials 65 65 ``` Help us with your feedback. Take ten seconds to tell us [how you rate us](https://about.codecov.io/nps?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=MCS-Lite). Have a feature suggestion? [Share it here.](https://app.codecov.io/gh/feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=MCS-Lite)

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.