chore(deps): update codecov/codecov-action action to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
codecov/codecov-action	action	major	v4.0.1 -> v5.4.2

---

Release Notes

codecov/codecov-action (codecov/codecov-action)

v5.4.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

Compare Source

What's Changed

• fix: use the github core methods by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1807
• build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1803
• build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1797
• build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1798
• chore(release): wrapper -0.2.1 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1788
• build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

v5.4.0

Compare Source

What's Changed

• update wrapper submodule to 0.2.0, add recurse_submodules arg by @​matt-codecov in https://github.com/codecov/codecov-action/pull/1780
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1775
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1776
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1777
• Clarify in README that use_pypi bypasses integrity checks too by @​webknjaz in https://github.com/codecov/codecov-action/pull/1773
• Fix use of safe.directory inside containers by @​Flamefire in https://github.com/codecov/codecov-action/pull/1768
• Fix description for report_type input by @​craigscott-crascit in https://github.com/codecov/codecov-action/pull/1770
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1765
• Fix a typo in the example by @​miranska in https://github.com/codecov/codecov-action/pull/1758
• build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1757
• build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

v5.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

v5.3.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

v5.2.0

Compare Source

What's Changed

• Fix typo in README by @​tserg in https://github.com/codecov/codecov-action/pull/1747
• Th/add commands by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1745
• use correct audience when requesting oidc token by @​juho9000 in https://github.com/codecov/codecov-action/pull/1744
• build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1742
• build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1743
• chore(deps): bump wrapper to 0.0.32 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1740
• feat: add disable-telem feature by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1739
• fix: remove erroneous linebreak in readme by @​Vampire in https://github.com/codecov/codecov-action/pull/1734

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0

v5.1.2

Compare Source

What's Changed

• fix: update statment by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1726
• fix: update action script by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1725
• fix: prevent oidc on tokenless due to permissioning by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1724
• chore(release): wrapper-0.0.31 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1723
• Put quotes around ${{ inputs.token }} in action.yml by @​jwodder in https://github.com/codecov/codecov-action/pull/1721
• build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1722
• Remove mistake from options table by @​Acconut in https://github.com/codecov/codecov-action/pull/1718
• build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1717

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.1..v5.1.2

v5.1.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.0..v5.1.1

v5.1.0

Compare Source

What's Changed

• fix: hide unnecessary error on shasum by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1692
• build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1701
• chore(release): wrapper-0.0.29 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1713

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.7..v5.1.0

v5.0.7

Compare Source

What's Changed

• fix: use HEAD_REPO by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1690

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.6..v5.0.7

v5.0.6

Compare Source

What's Changed

• fix: update CODECOV_TOKEN and fix tokenless by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1688

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.5..v5.0.6

v5.0.5

Compare Source

What's Changed

• chore(release): wrapper-0.0.27 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1685

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.4..v5.0.5

v5.0.4

Compare Source

What's Changed

• chore(deps): bump wrapper to 0.0.26 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1681
• fix: strip out a trailing /n from input tokens by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1679
• fix: add action version by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1678

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.3..v5.0.4

v5.0.3

Compare Source

What's Changed

• fix: update OIDC audience by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1675
• fix: use double-quotes for OIDC by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1669
• fix: prevent always setting tokenless to be true by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1673
• fix: update CHANGELOG and automate by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1674
• fix: bump to v5 and update README by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1655
• build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1665
• fix: typo in inputs.disable_safe_directory by @​mkroening in https://github.com/codecov/codecov-action/pull/1666

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.2..v5.0.3

v5.0.2

Compare Source

What's Changed

• fix: override commit and pr values for PR cases by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1657

Full Changelog: codecov/codecov-action@v5.0.1...v5.0.2

v5.0.1

Compare Source

What's Changed

• fix: use marketplace v5 badge by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1646
• fix: update tokenless branch logic by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1650
• chore(release): 5.0.1 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1656

Full Changelog: codecov/codecov-action@v5.0.0...v5.0.1

v5.0.0

Compare Source

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

• file (this has been deprecated in favor of files)
• plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

• binary
• gcov_args
• gcov_executable
• gcov_ignore
• gcov_include
• report_type
• skip_validation
• swift_project

You can see their usage in the action.yml file.

v4.6.0

Compare Source

What's Changed

• build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @​dependabot in https://github.com/codecov/codecov-action/pull/1481
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @​dependabot in https://github.com/codecov/codecov-action/pull/1480
• build(deps-dev): bump ts-jest from 29.1.4 to 29.1.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1479
• build(deps-dev): bump @​typescript-eslint/parser from 7.13.0 to 7.13.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1485
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.13.0 to 7.13.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1484
• build(deps-dev): bump typescript from 5.4.5 to 5.5.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1490
• build(deps-dev): bump @​typescript-eslint/parser from 7.13.1 to 7.14.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1493
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.13.1 to 7.14.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1492
• build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @​dependabot in https://github.com/codecov/codecov-action/pull/1496
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.14.1 to 7.15.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1501
• build(deps-dev): bump typescript from 5.5.2 to 5.5.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1500
• build(deps-dev): bump @​typescript-eslint/parser from 7.14.1 to 7.15.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1499
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1502
• build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1504
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.15.0 to 7.16.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1503
• build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1507
• build(deps-dev): bump @​typescript-eslint/parser from 7.15.0 to 7.16.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1505
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @​dependabot in https://github.com/codecov/codecov-action/pull/1509
• chore(ci): restrict scorecards to codecov/codecov-action by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1512
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.16.0 to 7.16.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1514
• build(deps-dev): bump @​typescript-eslint/parser from 7.16.0 to 7.16.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1513
• test: versionInfo by @​marcobiedermann in https://github.com/codecov/codecov-action/pull/1407
• build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1515
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @​dependabot in https://github.com/codecov/codecov-action/pull/1516
• build(deps-dev): bump typescript from 5.5.3 to 5.5.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1521
• build(deps-dev): bump @​typescript-eslint/parser from 7.16.1 to 7.17.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1520
• build(deps-dev): bump @​typescript-eslint/parser from 7.17.0 to 7.18.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1528
• build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by @​dependabot in https://github.com/codecov/codecov-action/pull/1526
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1525
• build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1532
• build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1534
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1542
• build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @​dependabot in https://github.com/codecov/codecov-action/pull/1541
• ref: Tidy up types and remove string coercion by @​nicholas-codecov in https://github.com/codecov/codecov-action/pull/1536
• build(deps-dev): bump @​octokit/webhooks-types from 3.77.1 to 7.5.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1545
• build(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1551
• feat: pass tokenless value as branch override by @​joseph-sentry in https://github.com/codecov/codecov-action/pull/1511
• build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1563
• Create makefile.yml by @​Hawthorne001 in https://github.com/codecov/codecov-action/pull/1555
• build(deps): bump github/codeql-action from 3.26.2 to 3.26.6 by @​dependabot in https://github.com/codecov/codecov-action/pull/1562
• build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1557
• Spell evenName in the logs correctly by @​webknjaz in https://github.com/codecov/codecov-action/pull/1560
• build(deps-dev): bump typescript from 5.5.4 to 5.6.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1566
• build(deps-dev): bump @​types/jest from 29.5.12 to 29.5.13 by @​dependabot in https://github.com/codecov/codecov-action/pull/1567
• build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 by @​dependabot in https://github.com/codecov/codecov-action/pull/1569
• build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1571
• build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 by @​dependabot in https://github.com/codecov/codecov-action/pull/1575
• build(deps-dev): bump @​vercel/ncc from 0.38.1 to 0.38.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1577
• chore: fix typo of OSS by @​shoothzj in https://github.com/codecov/codecov-action/pull/1578
• build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 by @​dependabot in https://github.com/codecov/codecov-action/pull/1584
• build(deps): bump actions/checkout from 4.1.7 to 4.2.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1583
• fix: bump eslint parser deps by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1586
• chore(release):4.6.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1587

v4.5.0

Compare Source

What's Changed

• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.9.0 to 7.10.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1446
• build(deps-dev): bump ts-jest from 29.1.2 to 29.1.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1443
• build(deps-dev): bump @​typescript-eslint/parser from 7.9.0 to 7.10.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1445
• build(deps-dev): bump @​typescript-eslint/parser from 7.10.0 to 7.11.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1459
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.10.0 to 7.11.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1458
• build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @​dependabot in https://github.com/codecov/codecov-action/pull/1456
• build(deps-dev): bump ts-jest from 29.1.3 to 29.1.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1460
• build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @​dependabot in https://github.com/codecov/codecov-action/pull/1466
• build(deps-dev): bump @​typescript-eslint/parser from 7.11.0 to 7.12.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1467
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.11.0 to 7.12.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1468
• build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @​dependabot in https://github.com/codecov/codecov-action/pull/1472
• fix: handle trailing commas by @​joseph-sentry in https://github.com/codecov/codecov-action/pull/1470
• build(deps-dev): bump @​typescript-eslint/parser from 7.12.0 to 7.13.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1474
• build(deps-dev): bump braces from 3.0.2 to 3.0.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1475
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.12.0 to 7.13.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1473
• feat: add support for tokenless v3 by @​joseph-sentry in https://github.com/codecov/codecov-action/pull/1410
• Use an existing token even if the PR is from a fork by @​leofeyer in https://github.com/codecov/codecov-action/pull/1471
• chore(release): bump to 4.5.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1477

v4.4.1

Compare Source

What's Changed

• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1427
• fix: prevent xlarge from running on forks by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1432
• build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1439
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot in https://github.com/codecov/codecov-action/pull/1438
• fix: isPullRequestFromFork returns false for any PR by @​shahar-h in https://github.com/codecov/codecov-action/pull/1437
• chore(release): 4.4.1 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1441

v4.4.0

Compare Source

What's Changed

• chore: Clarify isPullRequestFromFork by @​jsoref in https://github.com/codecov/codecov-action/pull/1411
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1423
• build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1421
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1420
• feat: remove GPG and run on spawn by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1426
• build(deps-dev): bump @​typescript-eslint/parser from 7.8.0 to 7.9.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1428
• chore(release): 4.4.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1430

Full Changelog: codecov/codecov-action@v4.3.1...v4.4.0

v4.3.1

Compare Source

What's Changed

• build(deps-dev): bump typescript from 5.4.4 to 5.4.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1370
• fix: more verbose log message when failing to import pgp key by @​ReenigneArcher in https://github.com/codecov/codecov-action/pull/1371
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.6.0 to 7.7.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1374
• build(deps-dev): bump @​typescript-eslint/parser from 7.6.0 to 7.7.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1375
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1382
• build(deps): bump github/codeql-action from 3.24.10 to 3.25.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1381
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1380
• build(deps-dev): bump @​typescript-eslint/parser from 7.7.0 to 7.7.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1384
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1383
• Update README.md to point to docs about tokenless by @​rohan-at-sentry in https://github.com/codecov/codecov-action/pull/1395
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1393
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1392
• build(deps): bump github/codeql-action from 3.25.1 to 3.25.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1391
• style: Node Packages by @​marcobiedermann in https://github.com/codecov/codecov-action/pull/1394
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.7.1 to 7.8.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1402
• build(deps-dev): bump @​typescript-eslint/parser from 7.7.1 to 7.8.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1401
• docs: Type Annotations by @​marcobiedermann in https://github.com/codecov/codecov-action/pull/1397
• docs: main branch by @​marcobiedermann in https://github.com/codecov/codecov-action/pull/1396
• fix: bypass token checks for forks and OIDC by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1404
• chore(release): 4.3.1. by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1405

v4.3.0

Compare Source

What's Changed

• fix: automatically detect if using GitHub enterprise by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1356
• build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1355
• build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @​dependabot in https://github.com/codecov/codecov-action/pull/1360
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.5.0 to 7.6.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1364
• build(deps-dev): bump @​typescript-eslint/parser from 7.5.0 to 7.6.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1363
• feat: add network params by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1365
• build(deps): bump undici from 5.28.3 to 5.28.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1361
• chore(release): v4.3.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1366

Full Changelog: codecov/codecov-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

What's Changed

• chore(deps): update deps by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1351
• feat: allow for authentication via OIDC token by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1330
• fix: use_oidc shoudl be required false by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1353

Full Changelog: codecov/codecov-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

What's Changed

• build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @​dependabot in https://github.com/codecov/codecov-action/pull/1315
• build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1319
• Removed mention of Mercurial by @​drazisil-codecov in https://github.com/codecov/codecov-action/pull/1325
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by @​dependabot in https://github.com/codecov/codecov-action/pull/1332
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1331
• fix: force version by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1329
• build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1334
• build(deps): bump undici from 5.28.2 to 5.28.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1338
• build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by @​dependabot in https://github.com/codecov/codecov-action/pull/1341
• fix: typo in disable_safe_directory by @​mkroening in https://github.com/codecov/codecov-action/pull/1343
• chore(release): 4.1.1 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1344

v4.1.0

Compare Source

What's Changed

• fix: set safe directory by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1304
• build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1306
• build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1305
• chore(release): v4.1.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1307

Full Changelog: codecov/codecov-action@v4.0.2...v4.1.0

v4.0.2

Compare Source

What's Changed

• Update README.md by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1251
• build(deps-dev): bump @​types/jest from 29.5.11 to 29.5.12 by @​dependabot in https://github.com/codecov/codecov-action/pull/1257
• build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1266
• Escape pipes in table of arguments by @​jwodder in https://github.com/codecov/codecov-action/pull/1265
• Add link to docs on Dependabot secrets by @​ianlewis in https://github.com/codecov/codecov-action/pull/1260
• fix: working-directory input for all stages by @​Bo98 in https://github.com/codecov/codecov-action/pull/1272
• build(deps-dev): bump @​typescript-eslint/parser from 6.20.0 to 6.21.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1271
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1269
• build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1298
• Use updated syntax for GitHub Markdown notes by @​jamacku in https://github.com/codecov/codecov-action/pull/1300
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 6.21.0 to 7.0.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1290
• build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @​dependabot in https://github.com/codecov/codecov-action/pull/1286
• chore(release): bump to 4.0.2 by @​thomasrockhu-codecov in [https://github.com/chore(release): bump to 4.0.2 codecov/codecov-action#1302](https://redirect.github.com/codecov/codecov-action/pull/1302

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[amazon-q-developer]

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

[amazon-q-developer]

✅ I finished the code review, and didn't find any security or code quality issues.

[amazon-q-developer]

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

[amazon-q-developer]

✅ I finished the code review, and didn't find any security or code quality issues.

[amazon-q-developer]

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

[amazon-q-developer]

✅ I finished the code review, and didn't find any security or code quality issues.

[amazon-q-developer]

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

[amazon-q-developer]

✅ I finished the code review, and didn't find any security or code quality issues.

[amazon-q-developer]

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

[amazon-q-developer]

✅ I finished the code review, and didn't find any security or code quality issues.

[amazon-q-developer]

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

[amazon-q-developer]

✅ I finished the code review, and didn't find any security or code quality issues.