v5.0.0

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

Warning

The following arguments have been changed

• file (this has been deprecated in favor of files)
• plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

• binary
• gcov_args
• gcov_executable
• gcov_ignore
• gcov_include
• report_type
• skip_validation
• swift_project

You can see their usage in the action.yml file.

What's Changed

• chore(deps): bump to eslint9+ and remove eslint-config-google by @thomasrockhu-codecov in #1591
• build(deps-dev): bump @octokit/webhooks-types from 7.5.1 to 7.6.1 by @dependabot in #1595
• build(deps-dev): bump typescript from 5.6.2 to 5.6.3 by @dependabot in #1604
• build(deps-dev): bump @typescript-eslint/parser from 8.8.0 to 8.8.1 by @dependabot in #1601
• build(deps): bump @actions/core from 1.11.0 to 1.11.1 by @dependabot in #1597
• build(deps): bump github/codeql-action from 3.26.9 to 3.26.11 by @dependabot in #1596
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.8.0 to 8.8.1 by @dependabot in #1600
• build(deps-dev): bump eslint from 9.11.1 to 9.12.0 by @dependabot in #1598
• build(deps): bump github/codeql-action from 3.26.11 to 3.26.12 by @dependabot in #1609
• build(deps): bump actions/checkout from 4.2.0 to 4.2.1 by @dependabot in #1608
• build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in #1607
• build(deps-dev): bump @typescript-eslint/parser from 8.8.1 to 8.9.0 by @dependabot in #1612
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.8.1 to 8.9.0 by @dependabot in #1611
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.9.0 to 8.10.0 by @dependabot in #1615
• build(deps-dev): bump eslint from 9.12.0 to 9.13.0 by @dependabot in #1618
• build(deps): bump github/codeql-action from 3.26.12 to 3.26.13 by @dependabot in #1617
• build(deps-dev): bump @typescript-eslint/parser from 8.9.0 to 8.10.0 by @dependabot in #1614
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.10.0 to 8.11.0 by @dependabot in #1620
• build(deps-dev): bump @typescript-eslint/parser from 8.10.0 to 8.11.0 by @dependabot in #1619
• build(deps-dev): bump @types/jest from 29.5.13 to 29.5.14 by @dependabot in #1622
• build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in #1625
• build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot in #1624
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.11.0 to 8.12.1 by @dependabot in #1626
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.12.1 to 8.12.2 by @dependabot in #1629
• build(deps-dev): bump @typescript-eslint/parser from 8.11.0 to 8.12.2 by @dependabot in #1628
• build(deps-dev): bump @typescript-eslint/parser from 8.12.2 to 8.13.0 by @dependabot in #1635
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.12.2 to 8.13.0 by @dependabot in #1634
• feat: use wrapper by @thomasrockhu-codecov in #1621
• Update README.md by @thomasrockhu-codecov in #1639
• fix: add missing vars by @thomasrockhu-codecov in #1638
• fix: update container builds by @thomasrockhu-codecov in #1640
• fixL use the correct source by @thomasrockhu-codecov in #1642
• chore(deps): bump wrapper to 0.0.23 by @thomasrockhu-codecov in #1644

Full Changelog: v4.6.0...v5.0.0

v5.0.0-beta

What's Changed

• chore(deps): bump to eslint9+ and remove eslint-config-google by @thomasrockhu-codecov in #1591
• build(deps-dev): bump @octokit/webhooks-types from 7.5.1 to 7.6.1 by @dependabot in #1595
• build(deps-dev): bump typescript from 5.6.2 to 5.6.3 by @dependabot in #1604
• build(deps-dev): bump @typescript-eslint/parser from 8.8.0 to 8.8.1 by @dependabot in #1601
• build(deps): bump @actions/core from 1.11.0 to 1.11.1 by @dependabot in #1597
• build(deps): bump github/codeql-action from 3.26.9 to 3.26.11 by @dependabot in #1596
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.8.0 to 8.8.1 by @dependabot in #1600
• build(deps-dev): bump eslint from 9.11.1 to 9.12.0 by @dependabot in #1598
• build(deps): bump github/codeql-action from 3.26.11 to 3.26.12 by @dependabot in #1609
• build(deps): bump actions/checkout from 4.2.0 to 4.2.1 by @dependabot in #1608
• build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in #1607
• build(deps-dev): bump @typescript-eslint/parser from 8.8.1 to 8.9.0 by @dependabot in #1612
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.8.1 to 8.9.0 by @dependabot in #1611
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.9.0 to 8.10.0 by @dependabot in #1615
• build(deps-dev): bump eslint from 9.12.0 to 9.13.0 by @dependabot in #1618
• build(deps): bump github/codeql-action from 3.26.12 to 3.26.13 by @dependabot in #1617
• build(deps-dev): bump @typescript-eslint/parser from 8.9.0 to 8.10.0 by @dependabot in #1614
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.10.0 to 8.11.0 by @dependabot in #1620
• build(deps-dev): bump @typescript-eslint/parser from 8.10.0 to 8.11.0 by @dependabot in #1619
• build(deps-dev): bump @types/jest from 29.5.13 to 29.5.14 by @dependabot in #1622
• build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in #1625
• build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot in #1624
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.11.0 to 8.12.1 by @dependabot in #1626
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.12.1 to 8.12.2 by @dependabot in #1629
• build(deps-dev): bump @typescript-eslint/parser from 8.11.0 to 8.12.2 by @dependabot in #1628
• build(deps-dev): bump @typescript-eslint/parser from 8.12.2 to 8.13.0 by @dependabot in #1635
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.12.2 to 8.13.0 by @dependabot in #1634
• feat: use wrapper by @thomasrockhu-codecov in #1621
• Update README.md by @thomasrockhu-codecov in #1639
• fix: add missing vars by @thomasrockhu-codecov in #1638
• fix: update container builds by @thomasrockhu-codecov in #1640
• fixL use the correct source by @thomasrockhu-codecov in #1642

Full Changelog: v4.6.0...v5.0.0-beta

v4.6.0

What's Changed

• build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in #1481
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #1480
• build(deps-dev): bump ts-jest from 29.1.4 to 29.1.5 by @dependabot in #1479
• build(deps-dev): bump @typescript-eslint/parser from 7.13.0 to 7.13.1 by @dependabot in #1485
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.13.0 to 7.13.1 by @dependabot in #1484
• build(deps-dev): bump typescript from 5.4.5 to 5.5.2 by @dependabot in #1490
• build(deps-dev): bump @typescript-eslint/parser from 7.13.1 to 7.14.1 by @dependabot in #1493
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.13.1 to 7.14.1 by @dependabot in #1492
• build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #1496
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.14.1 to 7.15.0 by @dependabot in #1501
• build(deps-dev): bump typescript from 5.5.2 to 5.5.3 by @dependabot in #1500
• build(deps-dev): bump @typescript-eslint/parser from 7.14.1 to 7.15.0 by @dependabot in #1499
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #1502
• build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @dependabot in #1504
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.15.0 to 7.16.0 by @dependabot in #1503
• build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @dependabot in #1507
• build(deps-dev): bump @typescript-eslint/parser from 7.15.0 to 7.16.0 by @dependabot in #1505
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #1509
• chore(ci): restrict scorecards to codecov/codecov-action by @thomasrockhu-codecov in #1512
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.16.0 to 7.16.1 by @dependabot in #1514
• build(deps-dev): bump @typescript-eslint/parser from 7.16.0 to 7.16.1 by @dependabot in #1513
• test: versionInfo by @marcobiedermann in #1407
• build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @dependabot in #1515
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #1516
• build(deps-dev): bump typescript from 5.5.3 to 5.5.4 by @dependabot in #1521
• build(deps-dev): bump @typescript-eslint/parser from 7.16.1 to 7.17.0 by @dependabot in #1520
• build(deps-dev): bump @typescript-eslint/parser from 7.17.0 to 7.18.0 by @dependabot in #1528
• build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by @dependabot in #1526
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #1525
• build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @dependabot in #1532
• build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #1534
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #1542
• build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #1541
• ref: Tidy up types and remove string coercion by @nicholas-codecov in #1536
• build(deps-dev): bump @octokit/webhooks-types from 3.77.1 to 7.5.1 by @dependabot in #1545
• build(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by @dependabot in #1551
• feat: pass tokenless value as branch override by @joseph-sentry in #1511
• build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in #1563
• Create makefile.yml by @Hawthorne001 in #1555
• build(deps): bump github/codeql-action from 3.26.2 to 3.26.6 by @dependabot in #1562
• build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @dependabot in #1557
• Spell evenName in the logs correctly by @webknjaz in #1560
• build(deps-dev): bump typescript from 5.5.4 to 5.6.2 by @dependabot in #1566
• build(deps-dev): bump @types/jest from 29.5.12 to 29.5.13 by @dependabot in #1567
• build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 by @dependabot in #1569
• build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by @dependabot in #1571
• build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 by @dependabot in #1575
• build(deps-dev): bump @vercel/ncc from 0.38.1 to 0.38.2 by @dependabot in #1577
• chore: fix typo of OSS by @shoothzj in #1578
• build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 by @dependabot in #1584
• build(deps): bump actions/checkout from 4.1.7 to 4.2.0 by @dependabot in #1583
• fix: bump eslint parser deps by @thomasrockhu-codecov in #1586
• chore(release):4.6.0 by @thomasrockhu-codecov in #1587

New Contributors

• @nicholas-codecov made their first contribution in #1536
• @Hawthorne001 made their first contribution in #1555
• @webknjaz made their first contribution in #1560
• @shoothzj made their first contribution in #1578

Full Changelog: v4.5.0...v4.6.0

v4.5.0

What's Changed

• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.9.0 to 7.10.0 by @dependabot in #1446
• build(deps-dev): bump ts-jest from 29.1.2 to 29.1.3 by @dependabot in #1443
• build(deps-dev): bump @typescript-eslint/parser from 7.9.0 to 7.10.0 by @dependabot in #1445
• build(deps-dev): bump @typescript-eslint/parser from 7.10.0 to 7.11.0 by @dependabot in #1459
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.10.0 to 7.11.0 by @dependabot in #1458
• build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #1456
• build(deps-dev): bump ts-jest from 29.1.3 to 29.1.4 by @dependabot in #1460
• build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #1466
• build(deps-dev): bump @typescript-eslint/parser from 7.11.0 to 7.12.0 by @dependabot in #1467
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.11.0 to 7.12.0 by @dependabot in #1468
• build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #1472
• fix: handle trailing commas by @joseph-sentry in #1470
• build(deps-dev): bump @typescript-eslint/parser from 7.12.0 to 7.13.0 by @dependabot in #1474
• build(deps-dev): bump braces from 3.0.2 to 3.0.3 by @dependabot in #1475
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.12.0 to 7.13.0 by @dependabot in #1473
• feat: add support for tokenless v3 by @joseph-sentry in #1410
• Use an existing token even if the PR is from a fork by @leofeyer in #1471
• chore(release): bump to 4.5.0 by @thomasrockhu-codecov in #1477

New Contributors

• @joseph-sentry made their first contribution in #1470
• @leofeyer made their first contribution in #1471

Full Changelog: v4.4.1...v4.5.0

v4.4.1

What's Changed

• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 by @dependabot in #1427
• fix: prevent xlarge from running on forks by @thomasrockhu-codecov in #1432
• build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @dependabot in #1439
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #1438
• fix: isPullRequestFromFork returns false for any PR by @shahar-h in #1437
• chore(release): 4.4.1 by @thomasrockhu-codecov in #1441

New Contributors

• @shahar-h made their first contribution in #1437

Full Changelog: v4.4.0...v4.4.1

What's Changed

• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 by @dependabot in #1427
• fix: prevent xlarge from running on forks by @thomasrockhu-codecov in #1432
• build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @dependabot in #1439
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #1438
• fix: isPullRequestFromFork returns false for any PR by @shahar-h in #1437
• chore(release): 4.4.1 by @thomasrockhu-codecov in #1441

New Contributors

• @shahar-h made their first contribution in #1437

Full Changelog: v4.4.0...v4.4.1

v4.4.0

What's Changed

• chore: Clarify isPullRequestFromFork by @jsoref in #1411
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #1423
• build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @dependabot in #1421
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #1420
• feat: remove GPG and run on spawn by @thomasrockhu-codecov in #1426
• build(deps-dev): bump @typescript-eslint/parser from 7.8.0 to 7.9.0 by @dependabot in #1428
• chore(release): 4.4.0 by @thomasrockhu-codecov in #1430

Full Changelog: v4.3.1...v4.4.0

v4.3.1

What's Changed

• build(deps-dev): bump typescript from 5.4.4 to 5.4.5 by @dependabot in #1370
• fix: more verbose log message when failing to import pgp key by @ReenigneArcher in #1371
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.6.0 to 7.7.0 by @dependabot in #1374
• build(deps-dev): bump @typescript-eslint/parser from 7.6.0 to 7.7.0 by @dependabot in #1375
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #1382
• build(deps): bump github/codeql-action from 3.24.10 to 3.25.1 by @dependabot in #1381
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #1380
• build(deps-dev): bump @typescript-eslint/parser from 7.7.0 to 7.7.1 by @dependabot in #1384
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1 by @dependabot in #1383
• Update README.md to point to docs about tokenless by @rohan-at-sentry in #1395
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #1393
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #1392
• build(deps): bump github/codeql-action from 3.25.1 to 3.25.3 by @dependabot in #1391
• style: Node Packages by @marcobiedermann in #1394
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.7.1 to 7.8.0 by @dependabot in #1402
• build(deps-dev): bump @typescript-eslint/parser from 7.7.1 to 7.8.0 by @dependabot in #1401
• docs: Type Annotations by @marcobiedermann in #1397
• docs: main branch by @marcobiedermann in #1396
• fix: bypass token checks for forks and OIDC by @thomasrockhu-codecov in #1404
• chore(release): 4.3.1. by @thomasrockhu-codecov in #1405

New Contributors

• @ReenigneArcher made their first contribution in #1371
• @rohan-at-sentry made their first contribution in #1395
• @marcobiedermann made their first contribution in #1394

Full Changelog: v4.3.0...v4.3.1

v4.3.0

What's Changed

• fix: automatically detect if using GitHub enterprise by @thomasrockhu-codecov in #1356
• build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by @dependabot in #1355
• build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in #1360
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.5.0 to 7.6.0 by @dependabot in #1364
• build(deps-dev): bump @typescript-eslint/parser from 7.5.0 to 7.6.0 by @dependabot in #1363
• feat: add network params by @thomasrockhu-codecov in #1365
• build(deps): bump undici from 5.28.3 to 5.28.4 by @dependabot in #1361
• chore(release): v4.3.0 by @thomasrockhu-codecov in #1366

Full Changelog: v4.2.0...v4.3.0

v4.2.0

What's Changed

• chore(deps): update deps by @thomasrockhu-codecov in #1351
• feat: allow for authentication via OIDC token by @thomasrockhu-codecov in #1330
• fix: use_oidc shoudl be required false by @thomasrockhu-codecov in #1353

Full Changelog: v4.1.1...v4.2.0

v4.1.1

What's Changed

• build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @dependabot in #1315
• build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by @dependabot in #1319
• Removed mention of Mercurial by @drazisil-codecov in #1325
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by @dependabot in #1332
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #1331
• fix: force version by @thomasrockhu-codecov in #1329
• build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by @dependabot in #1334
• build(deps): bump undici from 5.28.2 to 5.28.3 by @dependabot in #1338
• build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by @dependabot in #1341
• fix: typo in disable_safe_directory by @mkroening in #1343
• chore(release): 4.1.1 by @thomasrockhu-codecov in #1344

New Contributors

• @mkroening made their first contribution in #1343

Full Changelog: v4.1.0...v4.1.1