v4.0.0

v4 of the Codecov Action uses the CLI as the underlying upload. The CLI has helped to power new features including local upload, the global upload token, and new upcoming features.

Breaking Changes

• The Codecov Action runs as a node20 action due to node16 deprecation. See this post from GitHub on how to migrate.
• Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This doc shows instructions on how to add the Codecov token.
• OS platforms have been added, though some may not be automatically detected. To see a list of platforms, see our CLI download page
• Various arguments to the Action have been changed. Please be aware that the arguments match with the CLI's needs

v3 versions and below will not have access to CLI features (e.g. global upload token, ATS).

What's Changed

• build(deps): bump openpgp from 5.8.0 to 5.9.0 by @dependabot in #985
• build(deps): bump actions/checkout from 3.0.0 to 3.5.3 by @dependabot in #1000
• build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #1006
• build(deps): bump tough-cookie from 4.0.0 to 4.1.3 by @dependabot in #1013
• build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in #1024
• build(deps): bump node-fetch from 3.3.1 to 3.3.2 by @dependabot in #1031
• build(deps-dev): bump @types/node from 20.1.4 to 20.4.5 by @dependabot in #1032
• build(deps): bump github/codeql-action from 1.0.26 to 2.21.2 by @dependabot in #1033
• build commit,report and upload args based on codecovcli by @dana-yaish in #943
• build(deps-dev): bump @types/node from 20.4.5 to 20.5.3 by @dependabot in #1055
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.4 by @dependabot in #1051
• build(deps-dev): bump @types/node from 20.5.3 to 20.5.4 by @dependabot in #1058
• chore(deps): update outdated deps by @thomasrockhu-codecov in #1059
• build(deps-dev): bump @types/node from 20.5.4 to 20.5.6 by @dependabot in #1060
• build(deps-dev): bump @typescript-eslint/parser from 6.4.1 to 6.5.0 by @dependabot in #1065
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.4.1 to 6.5.0 by @dependabot in #1064
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #1063
• build(deps-dev): bump eslint from 8.47.0 to 8.48.0 by @dependabot in #1061
• build(deps-dev): bump @types/node from 20.5.6 to 20.5.7 by @dependabot in #1062
• build(deps): bump openpgp from 5.9.0 to 5.10.1 by @dependabot in #1066
• build(deps-dev): bump @types/node from 20.5.7 to 20.5.9 by @dependabot in #1070
• build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by @dependabot in #1069
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.5.0 to 6.6.0 by @dependabot in #1072
• Update README.md by @thomasrockhu-codecov in #1073
• build(deps-dev): bump @typescript-eslint/parser from 6.5.0 to 6.6.0 by @dependabot in #1071
• build(deps-dev): bump @vercel/ncc from 0.36.1 to 0.38.0 by @dependabot in #1074
• build(deps): bump @actions/core from 1.10.0 to 1.10.1 by @dependabot in #1081
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.6.0 to 6.7.0 by @dependabot in #1080
• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #1078
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #1077
• build(deps-dev): bump @types/node from 20.5.9 to 20.6.0 by @dependabot in #1075
• build(deps-dev): bump @typescript-eslint/parser from 6.6.0 to 6.7.0 by @dependabot in #1079
• build(deps-dev): bump eslint from 8.48.0 to 8.49.0 by @dependabot in #1076
• use cli instead of node uploader by @dana-yaish in #1068
• chore(release): 4.0.0-beta.1 by @thomasrockhu-codecov in #1084
• not adding -n if empty to do-upload command by @dana-yaish in #1085
• 4.0.0-beta.2 by @thomasrockhu-codecov in #1086
• build(deps-dev): bump jest from 29.6.4 to 29.7.0 by @dependabot in #1082
• build(deps-dev): bump @types/jest from 29.5.4 to 29.5.5 by @dependabot in #1092
• build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 by @dependabot in #1094
• build(deps-dev): bump @types/node from 20.6.0 to 20.6.2 by @dependabot in #1093
• build(deps): bump openpgp from 5.10.1 to 5.10.2 by @dependabot in #1096
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.0 to 6.7.2 by @dependabot in #1095
• build(deps-dev): bump @types/node from 20.6.2 to 20.6.3 by @dependabot in #1098
• build(deps-dev): bump @typescript-eslint/parser from 6.7.0 to 6.7.2 by @dependabot in #1097
• feat: add plugins by @thomasrockhu-codecov in #1099
• build(deps-dev): bump eslint from 8.49.0 to 8.50.0 by @dependabot in #1104
• build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by @dependabot in #1102
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #1101
• build(deps-dev): bump @typescript-eslint/parser from 6.7.2 to 6.7.3 by @dependabot in #1108
• build(deps-dev): bump @types/node from 20.6.3 to 20.7.0 by @dependabot in #1107
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.2 to 6.7.3 by @dependabot in #1106
• build(deps-dev): bump @types/node from 20.7.0 to 20.7.1 by @dependabot in #1111
• build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by @dependabot in #1113
• build(deps-dev): bump @types/node from 20.7.1 to 20.8.0 by @dependabot in #1112
• build(deps-dev): bump @types/node from 20.8.0 to 20.8.2 by @dependabot in #1114
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.3 to 6.7.4 by @dependabot in #1115
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.4 to 6.7.5 by @dependabot in #1123
• build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in #1120
• build(deps): bump github/codeql-action from 2.21.9 to 2.22.0 by @dependabot in #1119
• build(deps-dev): bump @typescript-eslint/parser from 6.7.3 to 6.7.5 by @dependabot in #1122
• build(deps-dev): bump @types/node from 20.8.2 to 20.8.4 by @dependabot in #1121
• build(deps-dev): bump eslint from 8.50.0 to 8.51.0 by @dependabot in #1117
• build(deps): bump @actions/github from 5.1.1 to 6.0.0 by @dependabot in #1124
• build(deps): bump github/codeql-action from 2.22.0 to 2.22.3 by @dependabot in #1127
• build(deps-dev): bump @types/node from 20.8.4 to 20.8.6 by @dependabot in #1126
• build(deps-dev): bump @babel/traverse from 7.22.11 to 7.23.2 by @dependabot in #1129
• build(deps): bump undici from 5.25.4 to 5.26.3 by @dependabot in #1128...

v3.1.6

Full Changelog: v3.1.5...v3.1.6

v3.1.5

What's Changed

• action.yml: Update to Node.js 20 by @hallabro in #1228

New Contributors

• @hallabro made their first contribution in #1228

Full Changelog: v3.1.4...v3.1.5

v4.0.0-beta.3

What's Changed

• build(deps-dev): bump jest from 29.6.4 to 29.7.0 by @dependabot in #1082
• build(deps-dev): bump @types/jest from 29.5.4 to 29.5.5 by @dependabot in #1092
• build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 by @dependabot in #1094
• build(deps-dev): bump @types/node from 20.6.0 to 20.6.2 by @dependabot in #1093
• build(deps): bump openpgp from 5.10.1 to 5.10.2 by @dependabot in #1096
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.7.0 to 6.7.2 by @dependabot in #1095
• build(deps-dev): bump @types/node from 20.6.2 to 20.6.3 by @dependabot in #1098
• build(deps-dev): bump @typescript-eslint/parser from 6.7.0 to 6.7.2 by @dependabot in #1097
• feat: add plugins by @thomasrockhu-codecov in #1099

Full Changelog: v4.0.0-beta.2...v4.0.0-beta.3

v4.0.0-beta.2

What's Changed

• not adding -n if empty to do-upload command by @dana-yaish in #1085
• 4.0.0-beta.2 by @thomasrockhu-codecov in #1086

Full Changelog: v4.0.0-beta.1...v4.0.0-beta.2

4.0.0-beta.1

v4 represents a move from the universal uploader to the Codecov CLI. Although this will unlock new features for our users, the CLI is not yet at feature parity with the universal uploader.

Breaking Changes

• No current support for aarch64 and alpine architectures.
• Tokenless uploading is unsuported
• Various arguments to the Action have been removed

What's Changed

• build(deps): bump openpgp from 5.8.0 to 5.9.0 by @dependabot in #985
• build(deps): bump actions/checkout from 3.0.0 to 3.5.3 by @dependabot in #1000
• build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #1006
• build(deps): bump tough-cookie from 4.0.0 to 4.1.3 by @dependabot in #1013
• build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in #1024
• build(deps): bump node-fetch from 3.3.1 to 3.3.2 by @dependabot in #1031
• build(deps-dev): bump @types/node from 20.1.4 to 20.4.5 by @dependabot in #1032
• build(deps): bump github/codeql-action from 1.0.26 to 2.21.2 by @dependabot in #1033
• build commit,report and upload args based on codecovcli by @dana-yaish in #943
• build(deps-dev): bump @types/node from 20.4.5 to 20.5.3 by @dependabot in #1055
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.4 by @dependabot in #1051
• build(deps-dev): bump @types/node from 20.5.3 to 20.5.4 by @dependabot in #1058
• chore(deps): update outdated deps by @thomasrockhu-codecov in #1059
• build(deps-dev): bump @types/node from 20.5.4 to 20.5.6 by @dependabot in #1060
• build(deps-dev): bump @typescript-eslint/parser from 6.4.1 to 6.5.0 by @dependabot in #1065
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.4.1 to 6.5.0 by @dependabot in #1064
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #1063
• build(deps-dev): bump eslint from 8.47.0 to 8.48.0 by @dependabot in #1061
• build(deps-dev): bump @types/node from 20.5.6 to 20.5.7 by @dependabot in #1062
• build(deps): bump openpgp from 5.9.0 to 5.10.1 by @dependabot in #1066
• build(deps-dev): bump @types/node from 20.5.7 to 20.5.9 by @dependabot in #1070
• build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by @dependabot in #1069
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.5.0 to 6.6.0 by @dependabot in #1072
• Update README.md by @thomasrockhu-codecov in #1073
• build(deps-dev): bump @typescript-eslint/parser from 6.5.0 to 6.6.0 by @dependabot in #1071
• build(deps-dev): bump @vercel/ncc from 0.36.1 to 0.38.0 by @dependabot in #1074
• build(deps): bump @actions/core from 1.10.0 to 1.10.1 by @dependabot in #1081
• build(deps-dev): bump @typescript-eslint/eslint-plugin from 6.6.0 to 6.7.0 by @dependabot in #1080
• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #1078
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #1077
• build(deps-dev): bump @types/node from 20.5.9 to 20.6.0 by @dependabot in #1075
• build(deps-dev): bump @typescript-eslint/parser from 6.6.0 to 6.7.0 by @dependabot in #1079
• build(deps-dev): bump eslint from 8.48.0 to 8.49.0 by @dependabot in #1076
• use cli instead of node uploader by @dana-yaish in #1068
• chore(release): 4.0.0-beta.1 by @thomasrockhu-codecov in #1084

New Contributors

• @dana-yaish made their first contribution in #943

Full Changelog: v3.1.4...v4.0.0-beta.1

3.1.4

What's Changed

• build(deps-dev): bump @types/node from 18.15.12 to 18.16.3 by @dependabot in #970
• Fix typo in README.md by @hisaac in #967
• fix: add back in working dir by @thomasrockhu-codecov in #971
• fix: CLI option names for uploader by @kleisauke in #969
• build(deps-dev): bump @types/node from 18.16.3 to 20.1.0 by @dependabot in #975
• build(deps-dev): bump @types/node from 20.1.0 to 20.1.2 by @dependabot in #979
• build(deps-dev): bump @types/node from 20.1.2 to 20.1.4 by @dependabot in #981
• release: 3.1.4 by @thomasrockhu-codecov in #983

New Contributors

• @hisaac made their first contribution in #967
• @kleisauke made their first contribution in #969

Full Changelog: v3.1.3...v3.1.4

3.1.3

What's Changed

• build(deps-dev): bump jest-junit from 15.0.0 to 16.0.0 by @dependabot in #957
• build(deps): bump openpgp from 5.7.0 to 5.8.0 by @dependabot in #958
• build(deps-dev): bump @types/node from 18.15.10 to 18.15.12 by @dependabot in #959
• fix: allow for aarch64 build by @thomasrockhu-codecov in #960
• chore(release): bump to 3.1.3 by @thomasrockhu-codecov in #961

Full Changelog: v3.1.2...v3.1.3

3.1.2

What's Changed

• build(deps): bump node-fetch from 3.2.4 to 3.2.10 by @dependabot in #835
• build(deps-dev): bump @types/node from 16.11.40 to 18.13.0 by @dependabot in #911
• build(deps-dev): bump @vercel/ncc from 0.34.0 to 0.36.1 by @dependabot in #900
• build(deps-dev): bump typescript from 4.7.4 to 4.9.5 by @dependabot in #905
• Update README.md by @stefanomunarini in #718
• build(deps): bump openpgp from 5.4.0 to 5.5.0 by @dependabot in #819
• build(deps): bump ossf/scorecard-action from 1.1.1 to 2.0.4 by @dependabot in #840
• build(deps): bump @actions/core from 1.9.1 to 1.10.0 by @dependabot in #841
• build(deps): bump @actions/github from 5.0.3 to 5.1.1 by @dependabot in #843
• build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by @dependabot in #896
• build(deps-dev): bump jest-junit from 13.2.0 to 15.0.0 by @dependabot in #872
• build(deps): bump node-fetch from 3.2.10 to 3.3.0 by @dependabot in #869
• build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 by @dependabot in #879
• build(deps): bump json5 from 2.2.1 to 2.2.3 by @dependabot in #895
• codeql-analysis.yml by @minumulasri in #898
• build(deps): bump ossf/scorecard-action from 1.1.1 to 2.1.2 by @dependabot in #889
• build(deps-dev): bump @types/node from 18.13.0 to 18.14.0 by @dependabot in #922
• build(deps): bump openpgp from 5.5.0 to 5.7.0 by @dependabot in #924
• build(deps-dev): bump @types/node from 18.14.0 to 18.14.2 by @dependabot in #927
• Remove unsupported path_to_write_report argument by @jsoref in #851
• Update README to contain correct information - inputs and negate feature by @moshe-azaria-sage in #901
• build(deps-dev): bump @types/node from 18.14.2 to 18.14.6 by @dependabot in #933
• build(deps-dev): bump @types/node from 18.14.6 to 18.15.0 by @dependabot in #937
• build(deps-dev): bump @types/node from 18.15.0 to 18.15.5 by @dependabot in #945
• build(deps): bump node-fetch from 3.3.0 to 3.3.1 by @dependabot in #938
• build(deps-dev): bump @types/node from 18.15.5 to 18.15.6 by @dependabot in #946
• build(deps-dev): bump @types/node from 18.15.6 to 18.15.10 by @dependabot in #947
• build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 by @dependabot in #951
• fix: add in all the extra arguments for uploader by @thomasrockhu-codecov in #955
• chore(release): bump to 3.1.2 by @thomasrockhu-codecov in #956

New Contributors

• @stefanomunarini made their first contribution in #718
• @minumulasri made their first contribution in #898
• @jsoref made their first contribution in #851
• @moshe-azaria-sage made their first contribution in #901

Full Changelog: v3.1.1...v3.1.2

3.1.1

What's Changed

• Update deprecation warning by @slifty in #661
• Create codeql-analysis.yml by @mitchell-codecov in #593
• build(deps): bump node-fetch from 3.2.3 to 3.2.4 by @dependabot in #714
• build(deps-dev): bump typescript from 4.6.3 to 4.6.4 by @dependabot in #713
• README: fix typo by @Evalir in #712
• build(deps): bump github/codeql-action from 1 to 2 by @dependabot in #724
• build(deps-dev): bump @types/jest from 27.4.1 to 27.5.0 by @dependabot in #717
• fix: Remove a blank row by @johnmanjiro13 in #725
• Update README.md with correct badge version by @gsheni in #726
• build(deps-dev): bump @types/node from 17.0.25 to 17.0.33 by @dependabot in #729
• build(deps-dev): downgrade @types/node to 16.11.35 by @dependabot in #734
• build(deps): bump actions/checkout from 2 to 3 by @dependabot in #723
• build(deps): bump @actions/github from 5.0.1 to 5.0.3 by @dependabot in #733
• build(deps): bump @actions/core from 1.6.0 to 1.8.2 by @dependabot in #732
• build(deps-dev): bump @types/node from 16.11.35 to 16.11.36 by @dependabot in #737
• Create scorecards-analysis.yml by @mitchell-codecov in #633
• build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0 by @dependabot in #749
• fix: add more verbosity to validation by @thomasrockhu-codecov in #747
• build(deps-dev): bump typescript from 4.6.4 to 4.7.3 by @dependabot in #755
• Regenerate scorecards-analysis.yml by @mitchell-codecov in #750
• build(deps-dev): bump @types/node from 16.11.36 to 16.11.39 by @dependabot in #759
• build(deps-dev): bump @types/node from 16.11.39 to 16.11.40 by @dependabot in #762
• build(deps-dev): bump @vercel/ncc from 0.33.4 to 0.34.0 by @dependabot in #746
• build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1 by @dependabot in #757
• build(deps): bump openpgp from 5.2.1 to 5.3.0 by @dependabot in #760
• build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 by @dependabot in #748
• build(deps-dev): bump typescript from 4.7.3 to 4.7.4 by @dependabot in #766
• Switch to v3 by @thomasrockhu in #774
• Fix network entry in table by @kevmoo in #783
• Trim arguments after splitting them by @mitchell-codecov in #791
• build(deps): bump openpgp from 5.3.0 to 5.4.0 by @dependabot in #799
• build(deps): bump @actions/core from 1.8.2 to 1.9.1 by @dependabot in #798
• Plumb failCi into verification function. by @RobbieMcKinstry in #769
• release: update changelog and version to 3.1.1 by @thomasrockhu-codecov in #828

New Contributors

• @slifty made their first contribution in #661
• @Evalir made their first contribution in #712
• @johnmanjiro13 made their first contribution in #725
• @gsheni made their first contribution in #726
• @kevmoo made their first contribution in #783
• @RobbieMcKinstry made their first contribution in #769

Full Changelog: v3.1.0...v3.1.1