feat: add support for tokenless v3 #1410

joseph-sentry · 2024-05-06T20:23:02Z

The idea is that we will detect that if this action is being run from a PR and that PR is from a fork to an upstream repo then we should upload using tokenless, so we will set the TOKENLESS env var so that we can pass the necessary information for the CLI to upload using tokenless

Necessary for: codecov/codecov-cli#434

codecov · 2024-05-06T20:23:56Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 90.35%. Comparing base (feaf700) to head (9a328fc).

❗ Current head 9a328fc differs from pull request most recent head 6c9378e

Please upload reports for the commit 6c9378e to get more accurate results.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1410      +/-   ##
==========================================
- Coverage   91.66%   90.35%   -1.32%     
==========================================
  Files           4        4              
  Lines         312      311       -1     
  Branches       85       84       -1     
==========================================
- Hits          286      281       -5     
- Misses         26       30       +4

Flag	Coverage Δ
demo	`90.35% <100.00%> (-1.32%)`	⬇️
macos-latest	`90.35% <100.00%> (-1.32%)`	⬇️
macos-latest-xlarge	`90.35% <100.00%> (?)`
script	`90.35% <100.00%> (-1.32%)`	⬇️
ubuntu-latest	`90.35% <100.00%> (-1.32%)`	⬇️
version	`?`
windows-latest	`90.35% <100.00%> (-1.32%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

thomasrockhu-codecov · 2024-05-07T09:39:09Z

src/buildExec.ts

@@ -31,7 +31,7 @@ const getGitService = (): string => {

 const isFork = (): boolean => {
  if (
-    `${context.eventName}` !== 'pull_request' ||
+    `${context.eventName}` !== 'pull_request' &&


thomasrockhu-codecov · 2024-05-08T12:39:04Z

src/buildExec.ts

@@ -47,6 +47,7 @@ const isPullRequestFromFork = (): boolean => {
 const getToken = async (): Promise<string> => {
  if (isPullRequestFromFork()) {
    core.info('==> Fork detected, tokenless uploading used');
+    process.env['TOKENLESS'] = context.payload.pull_request.head.label;


can you in this PR description link to the CLI change that is consuming this?

thomasrockhu-codecov

Just need some documentation to how this will be consumed

thomasrockhu-codecov · 2024-06-05T11:07:10Z

@joseph-sentry you will need to run npm run build locally I think. Or the install script should handle it when you commit

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [codecov/codecov-action](https://github.com/codecov/codecov-action) | action | minor | `v4.0.1` -> `v4.5.0` | --- ### Release Notes <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v4.5.0`](https://github.com/codecov/codecov-action/releases/tag/v4.5.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.4.1...v4.5.0) ##### What's Changed - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.9.0 to 7.10.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1446 - build(deps-dev): bump ts-jest from 29.1.2 to 29.1.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1443 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.9.0 to 7.10.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1445 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.10.0 to 7.11.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1459 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.10.0 to 7.11.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1458 - build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1456 - build(deps-dev): bump ts-jest from 29.1.3 to 29.1.4 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1460 - build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1466 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.11.0 to 7.12.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1467 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.11.0 to 7.12.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1468 - build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1472 - fix: handle trailing commas by [@joseph-sentry](https://github.com/joseph-sentry) in [codecov/codecov-action#1470 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.12.0 to 7.13.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1474 - build(deps-dev): bump braces from 3.0.2 to 3.0.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1475 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.12.0 to 7.13.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1473 - feat: add support for tokenless v3 by [@joseph-sentry](https://github.com/joseph-sentry) in [codecov/codecov-action#1410 - Use an existing token even if the PR is from a fork by [@leofeyer](https://github.com/leofeyer) in [codecov/codecov-action#1471 - chore(release): bump to 4.5.0 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1477 ##### New Contributors - [@joseph-sentry](https://github.com/joseph-sentry) made their first contribution in [codecov/codecov-action#1470 - [@leofeyer](https://github.com/leofeyer) made their first contribution in [codecov/codecov-action#1471 **Full Changelog**: codecov/codecov-action@v4.4.1...v4.5.0 ### [`v4.4.1`](https://github.com/codecov/codecov-action/releases/tag/v4.4.1) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.4.0...v4.4.1) #### What's Changed - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.8.0 to 7.9.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1427 - fix: prevent xlarge from running on forks by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1432 - build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1439 - build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1438 - fix: isPullRequestFromFork returns false for any PR by [@shahar-h](https://github.com/shahar-h) in [codecov/codecov-action#1437 - chore(release): 4.4.1 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1441 #### New Contributors - [@shahar-h](https://github.com/shahar-h) made their first contribution in [codecov/codecov-action#1437 **Full Changelog**: codecov/codecov-action@v4.4.0...v4.4.1 #### What's Changed - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.8.0 to 7.9.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1427 - fix: prevent xlarge from running on forks by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1432 - build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1439 - build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1438 - fix: isPullRequestFromFork returns false for any PR by [@shahar-h](https://github.com/shahar-h) in [codecov/codecov-action#1437 - chore(release): 4.4.1 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1441 #### New Contributors - [@shahar-h](https://github.com/shahar-h) made their first contribution in [codecov/codecov-action#1437 **Full Changelog**: codecov/codecov-action@v4.4.0...v4.4.1 ### [`v4.4.0`](https://github.com/codecov/codecov-action/releases/tag/v4.4.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.3.1...v4.4.0) #### What's Changed - chore: Clarify isPullRequestFromFork by [@jsoref](https://github.com/jsoref) in [codecov/codecov-action#1411 - build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1423 - build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1421 - build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1420 - feat: remove GPG and run on spawn by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1426 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.8.0 to 7.9.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1428 - chore(release): 4.4.0 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1430 **Full Changelog**: codecov/codecov-action@v4.3.1...v4.4.0 ### [`v4.3.1`](https://github.com/codecov/codecov-action/compare/v4.3.0...v4.3.1) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.3.0...v4.3.1) ### [`v4.3.0`](https://github.com/codecov/codecov-action/releases/tag/v4.3.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.2.0...v4.3.0) #### What's Changed - fix: automatically detect if using GitHub enterprise by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1356 - build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1355 - build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1360 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.5.0 to 7.6.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1364 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.5.0 to 7.6.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1363 - feat: add network params by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1365 - build(deps): bump undici from 5.28.3 to 5.28.4 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1361 - chore(release): v4.3.0 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1366 **Full Changelog**: codecov/codecov-action@v4.2.0...v4.3.0 ### [`v4.2.0`](https://github.com/codecov/codecov-action/releases/tag/v4.2.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.1.1...v4.2.0) #### What's Changed - chore(deps): update deps by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1351 - feat: allow for authentication via OIDC token by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1330 - fix: use_oidc shoudl be required false by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1353 **Full Changelog**: codecov/codecov-action@v4.1.1...v4.2.0 ### [`v4.1.1`](https://github.com/codecov/codecov-action/releases/tag/v4.1.1) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.1.0...v4.1.1) #### What's Changed - build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1315 - build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1319 - Removed mention of Mercurial by [@drazisil-codecov](https://github.com/drazisil-codecov) in [codecov/codecov-action#1325 - build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1332 - build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1331 - fix: force version by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1329 - build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1334 - build(deps): bump undici from 5.28.2 to 5.28.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1338 - build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1341 - fix: typo in disable_safe_directory by [@mkroening](https://github.com/mkroening) in [codecov/codecov-action#1343 - chore(release): 4.1.1 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1344 #### New Contributors - [@mkroening](https://github.com/mkroening) made their first contribution in [codecov/codecov-action#1343 **Full Changelog**: codecov/codecov-action@v4.1.0...v4.1.1 ### [`v4.1.0`](https://github.com/codecov/codecov-action/releases/tag/v4.1.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.0.2...v4.1.0) ##### What's Changed - fix: set safe directory by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1304 - build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1306 - build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1305 - chore(release): v4.1.0 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1307 **Full Changelog**: codecov/codecov-action@v4.0.2...v4.1.0 ### [`v4.0.2`](https://github.com/codecov/codecov-action/releases/tag/v4.0.2) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.0.1...v4.0.2) ##### What's Changed - Update README.md by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1251 - build(deps-dev): bump [@types/jest](https://github.com/types/jest) from 29.5.11 to 29.5.12 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1257 - build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1266 - Escape pipes in table of arguments by [@jwodder](https://github.com/jwodder) in [codecov/codecov-action#1265 - Add link to docs on Dependabot secrets by [@ianlewis](https://github.com/ianlewis) in [codecov/codecov-action#1260 - fix: working-directory input for all stages by [@Bo98](https://github.com/Bo98) in [codecov/codecov-action#1272 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.20.0 to 6.21.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1271 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.20.0 to 6.21.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1269 - build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1298 - Use updated syntax for GitHub Markdown notes by [@jamacku](https://github.com/jamacku) in [codecov/codecov-action#1300 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.21.0 to 7.0.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1290 - build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1286 - chore(release): bump to 4.0.2 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1302 ##### New Contributors - [@jwodder](https://github.com/jwodder) made their first contribution in [codecov/codecov-action#1265 - [@ianlewis](https://github.com/ianlewis) made their first contribution in [codecov/codecov-action#1260 - [@Bo98](https://github.com/Bo98) made their first contribution in [codecov/codecov-action#1272 - [@jamacku](https://github.com/jamacku) made their first contribution in [codecov/codecov-action#1300 **Full Changelog**: codecov/codecov-action@v4.0.1...v4.0.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View the [repository job log](https://developer.mend.io/github/kula-app/OnLaunch-Android-Client).

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [codecov/codecov-action](https://github.com/codecov/codecov-action) | action | minor | `v4.0.1` -> `v4.5.0` | --- ### Release Notes <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v4.5.0`](https://github.com/codecov/codecov-action/releases/tag/v4.5.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.4.1...v4.5.0) ##### What's Changed - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.9.0 to 7.10.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1446 - build(deps-dev): bump ts-jest from 29.1.2 to 29.1.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1443 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.9.0 to 7.10.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1445 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.10.0 to 7.11.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1459 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.10.0 to 7.11.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1458 - build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1456 - build(deps-dev): bump ts-jest from 29.1.3 to 29.1.4 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1460 - build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1466 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.11.0 to 7.12.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1467 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.11.0 to 7.12.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1468 - build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1472 - fix: handle trailing commas by [@joseph-sentry](https://github.com/joseph-sentry) in [codecov/codecov-action#1470 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.12.0 to 7.13.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1474 - build(deps-dev): bump braces from 3.0.2 to 3.0.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1475 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.12.0 to 7.13.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1473 - feat: add support for tokenless v3 by [@joseph-sentry](https://github.com/joseph-sentry) in [codecov/codecov-action#1410 - Use an existing token even if the PR is from a fork by [@leofeyer](https://github.com/leofeyer) in [codecov/codecov-action#1471 - chore(release): bump to 4.5.0 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1477 ##### New Contributors - [@joseph-sentry](https://github.com/joseph-sentry) made their first contribution in [codecov/codecov-action#1470 - [@leofeyer](https://github.com/leofeyer) made their first contribution in [codecov/codecov-action#1471 **Full Changelog**: codecov/codecov-action@v4.4.1...v4.5.0 ### [`v4.4.1`](https://github.com/codecov/codecov-action/releases/tag/v4.4.1) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.4.0...v4.4.1) #### What's Changed - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.8.0 to 7.9.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1427 - fix: prevent xlarge from running on forks by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1432 - build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1439 - build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1438 - fix: isPullRequestFromFork returns false for any PR by [@shahar-h](https://github.com/shahar-h) in [codecov/codecov-action#1437 - chore(release): 4.4.1 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1441 #### New Contributors - [@shahar-h](https://github.com/shahar-h) made their first contribution in [codecov/codecov-action#1437 **Full Changelog**: codecov/codecov-action@v4.4.0...v4.4.1 #### What's Changed - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.8.0 to 7.9.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1427 - fix: prevent xlarge from running on forks by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1432 - build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1439 - build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1438 - fix: isPullRequestFromFork returns false for any PR by [@shahar-h](https://github.com/shahar-h) in [codecov/codecov-action#1437 - chore(release): 4.4.1 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1441 #### New Contributors - [@shahar-h](https://github.com/shahar-h) made their first contribution in [codecov/codecov-action#1437 **Full Changelog**: codecov/codecov-action@v4.4.0...v4.4.1 ### [`v4.4.0`](https://github.com/codecov/codecov-action/releases/tag/v4.4.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.3.1...v4.4.0) #### What's Changed - chore: Clarify isPullRequestFromFork by [@jsoref](https://github.com/jsoref) in [codecov/codecov-action#1411 - build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1423 - build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1421 - build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1420 - feat: remove GPG and run on spawn by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1426 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.8.0 to 7.9.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1428 - chore(release): 4.4.0 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1430 **Full Changelog**: codecov/codecov-action@v4.3.1...v4.4.0 ### [`v4.3.1`](https://github.com/codecov/codecov-action/compare/v4.3.0...v4.3.1) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.3.0...v4.3.1) ### [`v4.3.0`](https://github.com/codecov/codecov-action/releases/tag/v4.3.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.2.0...v4.3.0) #### What's Changed - fix: automatically detect if using GitHub enterprise by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1356 - build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1355 - build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1360 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.5.0 to 7.6.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1364 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.5.0 to 7.6.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1363 - feat: add network params by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1365 - build(deps): bump undici from 5.28.3 to 5.28.4 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1361 - chore(release): v4.3.0 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1366 **Full Changelog**: codecov/codecov-action@v4.2.0...v4.3.0 ### [`v4.2.0`](https://github.com/codecov/codecov-action/releases/tag/v4.2.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.1.1...v4.2.0) #### What's Changed - chore(deps): update deps by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1351 - feat: allow for authentication via OIDC token by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1330 - fix: use_oidc shoudl be required false by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1353 **Full Changelog**: codecov/codecov-action@v4.1.1...v4.2.0 ### [`v4.1.1`](https://github.com/codecov/codecov-action/releases/tag/v4.1.1) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.1.0...v4.1.1) #### What's Changed - build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1315 - build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1319 - Removed mention of Mercurial by [@drazisil-codecov](https://github.com/drazisil-codecov) in [codecov/codecov-action#1325 - build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1332 - build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1331 - fix: force version by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1329 - build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1334 - build(deps): bump undici from 5.28.2 to 5.28.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1338 - build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1341 - fix: typo in disable_safe_directory by [@mkroening](https://github.com/mkroening) in [codecov/codecov-action#1343 - chore(release): 4.1.1 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1344 #### New Contributors - [@mkroening](https://github.com/mkroening) made their first contribution in [codecov/codecov-action#1343 **Full Changelog**: codecov/codecov-action@v4.1.0...v4.1.1 ### [`v4.1.0`](https://github.com/codecov/codecov-action/releases/tag/v4.1.0) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.0.2...v4.1.0) ##### What's Changed - fix: set safe directory by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1304 - build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1306 - build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1305 - chore(release): v4.1.0 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1307 **Full Changelog**: codecov/codecov-action@v4.0.2...v4.1.0 ### [`v4.0.2`](https://github.com/codecov/codecov-action/releases/tag/v4.0.2) [Compare Source](https://github.com/codecov/codecov-action/compare/v4.0.1...v4.0.2) ##### What's Changed - Update README.md by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1251 - build(deps-dev): bump [@types/jest](https://github.com/types/jest) from 29.5.11 to 29.5.12 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1257 - build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1266 - Escape pipes in table of arguments by [@jwodder](https://github.com/jwodder) in [codecov/codecov-action#1265 - Add link to docs on Dependabot secrets by [@ianlewis](https://github.com/ianlewis) in [codecov/codecov-action#1260 - fix: working-directory input for all stages by [@Bo98](https://github.com/Bo98) in [codecov/codecov-action#1272 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.20.0 to 6.21.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1271 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.20.0 to 6.21.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1269 - build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1298 - Use updated syntax for GitHub Markdown notes by [@jamacku](https://github.com/jamacku) in [codecov/codecov-action#1300 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.21.0 to 7.0.0 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1290 - build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by [@dependabot](https://github.com/dependabot) in [codecov/codecov-action#1286 - chore(release): bump to 4.0.2 by [@thomasrockhu-codecov](https://github.com/thomasrockhu-codecov) in [codecov/codecov-action#1302 ##### New Contributors - [@jwodder](https://github.com/jwodder) made their first contribution in [codecov/codecov-action#1265 - [@ianlewis](https://github.com/ianlewis) made their first contribution in [codecov/codecov-action#1260 - [@Bo98](https://github.com/Bo98) made their first contribution in [codecov/codecov-action#1272 - [@jamacku](https://github.com/jamacku) made their first contribution in [codecov/codecov-action#1300 **Full Changelog**: codecov/codecov-action@v4.0.1...v4.0.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View the [repository job log](https://developer.mend.io/github/AhmedBaset/eslint-plugin-rtl-friendly).

thomasrockhu-codecov reviewed May 7, 2024

View reviewed changes

joseph-sentry force-pushed the joseph/tokenless-v3 branch from 9a328fc to b7e79c8 Compare May 7, 2024 13:40

thomasrockhu-codecov reviewed May 8, 2024

View reviewed changes

thomasrockhu-codecov approved these changes May 8, 2024

View reviewed changes

alexdlaird mentioned this pull request May 16, 2024

Can v4 still securely work with pull requests? #1431

Open

joseph-sentry closed this May 22, 2024

joseph-sentry reopened this Jun 4, 2024

joseph-sentry force-pushed the joseph/tokenless-v3 branch from b7e79c8 to a193b6d Compare June 10, 2024 15:35

feat: add support for tokenless v3

6c9378e

joseph-sentry force-pushed the joseph/tokenless-v3 branch from a193b6d to 6c9378e Compare June 10, 2024 15:37

joseph-sentry merged commit 81c0a51 into codecov:main Jun 11, 2024
5 of 8 checks passed

AlekSi mentioned this pull request Jun 21, 2024

Tokenless upload is being used when token is available codecov/codecov-cli#460

Closed

renovate bot mentioned this pull request Jun 21, 2024

chore(deps): update all (major) moul/midcat#6

Open

1 task

t1m0thyj mentioned this pull request Jun 25, 2024

CI: Codecov failing when uploading coverage zowe/zowe-client-python-sdk#290

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: add support for tokenless v3 #1410

feat: add support for tokenless v3 #1410

joseph-sentry commented May 6, 2024 •

edited

Loading

codecov bot commented May 6, 2024 •

edited

Loading

thomasrockhu-codecov May 7, 2024

thomasrockhu-codecov May 8, 2024

thomasrockhu-codecov left a comment

thomasrockhu-codecov commented Jun 5, 2024

feat: add support for tokenless v3 #1410

feat: add support for tokenless v3 #1410

Conversation

joseph-sentry commented May 6, 2024 • edited Loading

codecov bot commented May 6, 2024 • edited Loading

Codecov Report

thomasrockhu-codecov May 7, 2024

Choose a reason for hiding this comment

thomasrockhu-codecov May 8, 2024

Choose a reason for hiding this comment

thomasrockhu-codecov left a comment

Choose a reason for hiding this comment

thomasrockhu-codecov commented Jun 5, 2024

joseph-sentry commented May 6, 2024 •

edited

Loading

codecov bot commented May 6, 2024 •

edited

Loading