chore(deps): bump codecov/codecov-action action from v4.6.0 to v5 (main)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
codecov/codecov-action	action	major	v4.6.0 -> v5.4.3

---

Release Notes

codecov/codecov-action (codecov/codecov-action)

v5.4.3

Compare Source

What's Changed

• build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1822
• fix: OIDC on forks by @​joseph-sentry in https://github.com/codecov/codecov-action/pull/1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

Compare Source

What's Changed

• fix: use the github core methods by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1807
• build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1803
• build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1797
• build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1798
• chore(release): wrapper -0.2.1 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1788
• build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

v5.4.0

Compare Source

What's Changed

• update wrapper submodule to 0.2.0, add recurse_submodules arg by @​matt-codecov in https://github.com/codecov/codecov-action/pull/1780
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1775
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1776
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1777
• Clarify in README that use_pypi bypasses integrity checks too by @​webknjaz in https://github.com/codecov/codecov-action/pull/1773
• Fix use of safe.directory inside containers by @​Flamefire in https://github.com/codecov/codecov-action/pull/1768
• Fix description for report_type input by @​craigscott-crascit in https://github.com/codecov/codecov-action/pull/1770
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1765
• Fix a typo in the example by @​miranska in https://github.com/codecov/codecov-action/pull/1758
• build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1757
• build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

v5.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

v5.3.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

v5.2.0

Compare Source

What's Changed

• Fix typo in README by @​tserg in https://github.com/codecov/codecov-action/pull/1747
• Th/add commands by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1745
• use correct audience when requesting oidc token by @​juho9000 in https://github.com/codecov/codecov-action/pull/1744
• build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1742
• build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1743
• chore(deps): bump wrapper to 0.0.32 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1740
• feat: add disable-telem feature by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1739
• fix: remove erroneous linebreak in readme by @​Vampire in https://github.com/codecov/codecov-action/pull/1734

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0

v5.1.2

Compare Source

What's Changed

• fix: update statment by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1726
• fix: update action script by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1725
• fix: prevent oidc on tokenless due to permissioning by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1724
• chore(release): wrapper-0.0.31 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1723
• Put quotes around ${{ inputs.token }} in action.yml by @​jwodder in https://github.com/codecov/codecov-action/pull/1721
• build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1722
• Remove mistake from options table by @​Acconut in https://github.com/codecov/codecov-action/pull/1718
• build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1717

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.1..v5.1.2

v5.1.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.0..v5.1.1

v5.1.0

Compare Source

What's Changed

• fix: hide unnecessary error on shasum by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1692
• build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1701
• chore(release): wrapper-0.0.29 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1713

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.7..v5.1.0

v5.0.7

Compare Source

What's Changed

• fix: use HEAD_REPO by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1690

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.6..v5.0.7

v5.0.6

Compare Source

What's Changed

• fix: update CODECOV_TOKEN and fix tokenless by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1688

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.5..v5.0.6

v5.0.5

Compare Source

What's Changed

• chore(release): wrapper-0.0.27 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1685

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.4..v5.0.5

v5.0.4

Compare Source

What's Changed

• chore(deps): bump wrapper to 0.0.26 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1681
• fix: strip out a trailing /n from input tokens by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1679
• fix: add action version by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1678

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.3..v5.0.4

v5.0.3

Compare Source

What's Changed

• fix: update OIDC audience by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1675
• fix: use double-quotes for OIDC by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1669
• fix: prevent always setting tokenless to be true by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1673
• fix: update CHANGELOG and automate by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1674
• fix: bump to v5 and update README by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1655
• build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1665
• fix: typo in inputs.disable_safe_directory by @​mkroening in https://github.com/codecov/codecov-action/pull/1666

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.2..v5.0.3

v5.0.2

Compare Source

What's Changed

• fix: override commit and pr values for PR cases by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1657

Full Changelog: codecov/codecov-action@v5.0.1...v5.0.2

v5.0.1

Compare Source

What's Changed

• fix: use marketplace v5 badge by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1646
• fix: update tokenless branch logic by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1650
• chore(release): 5.0.1 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1656

Full Changelog: codecov/codecov-action@v5.0.0...v5.0.1

v5.0.0

Compare Source

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

• file (this has been deprecated in favor of files)
• plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

• binary
• gcov_args
• gcov_executable
• gcov_ignore
• gcov_include
• report_type
• skip_validation
• swift_project

You can see their usage in the action.yml file.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) in timezone Europe/Vienna, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[st3iny]

Seems like the action's inputs changed slightly:

Warning: Unexpected input(s) 'file', valid inputs are ['base_sha', 'binary', 'codecov_yml_path', 'commit_parent', 'directory', 'disable_file_fixes', 'disable_search', 'disable_safe_directory', 'disable_telem', 'dry_run', 'env_vars', 'exclude', 'fail_ci_if_error', 'files', 'flags', 'force', 'git_service', 'gcov_args', 'gcov_executable', 'gcov_ignore', 'gcov_include', 'handle_no_reports_found', 'job_code', 'name', 'network_filter', 'network_prefix', 'os', 'override_branch', 'override_build', 'override_build_url', 'override_commit', 'override_pr', 'plugins', 'recurse_submodules', 'report_code', 'report_type', 'root_dir', 'run_command', 'skip_validation', 'slug', 'swift_project', 'token', 'url', 'use_legacy_upload_endpoint', 'use_oidc', 'use_pypi', 'verbose', 'version', 'working-directory']