GH Actions: Bump codecov/codecov-action from 3 to 4 #2421
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
|
This is a highly problematic change as CodeCov will now require a dedicated token, even for public repos. See codecov/feedback#112 for further information. |
|
We can't just add the token as a secret in the repo, and use it in the action? |
We will have to, but so far I've just seen problems reported related to this change. At least, they have made a change to allow tokenless runs for PRs from forks as those don't have access to repo secrets. The short of it is that CodeCov basically has a rate limit issue and instead of solving that, they dump the problem onto their end-users with this change. I suggest we wait a few weeks at the very least before accepting this PR, so CodeCov can at least get the release right. |
|
Looks like CodeCov is locking down on the use of the v3 action as the builds for #2444 keep failing, no matter how often I retry them. sigh Guess it's time to get the token set up and merge this PR (though I somehow expect more problems after that, but we'll see). |
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v3...v4) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
jrfnl
force-pushed
the
dependabot/github_actions/codecov/codecov-action-4
branch
from
69ab559 to
37ff716
Compare
|
I've added the token now, both in the repo secrets as well as in the workflow (see this PR). If the build passes, we should probably merge this now. |
Bumps codecov/codecov-action from 3 to 4.
Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
e0b68c6fix: show both token uses in readme (#1250)1f9f557Add all args (#1245)09686fcUpdate README.md (#1243)f30e495fix: update action.yml (#1240)a7b945cfix: allow for other archs (#1239)98ab2c5Update package.json (#1238)43235ccUpdate README.md (#1237)0cf8684chore(ci): bump to node20 (#1236)8e1e730build(deps-dev): bump@typescript-eslint/eslint-pluginfrom 6.19.1 to 6.20.0 ...61293afbuild(deps-dev): bump@typescript-eslint/parserfrom 6.19.1 to 6.20.0 (#1235)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)