chore(deps): update codecov/codecov-action action to v7 by renovate-bot · Pull Request #342 · google/pprof-nodejs

renovate-bot · 2026-07-01T00:28:42Z

This PR contains the following updates:

Package	Type	Update	Change
codecov/codecov-action	action	major	`v4` → `v7`

Release Notes

codecov/codecov-action (codecov/codecov-action)

`v7.0.0`

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

`v7`

Compare Source

`v6.0.2`

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

What's Changed

fix: prevent template injection in run: steps (VULN-1652) by @thomasrockhu-codecov in #1947
chore(release): 6.0.1 by @thomasrockhu-codecov in #1949

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in #1929
Th/6.0.0 by @thomasrockhu-codecov in #1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

`v6`

Compare Source

`v5.5.5`

Compare Source

This release only contains the keybase.io change as described here.

Full Changelog: codecov/codecov-action@v5.5.4...v5.5.5

`v5.5.4`

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @thomasrockhu-codecov in #1926
chore(release): 5.5.4 by @thomasrockhu-codecov in #1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

`v5.5.3`

Compare Source

What's Changed

build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #1874
chore(release): bump to 5.5.3 by @thomasrockhu-codecov in #1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

`v5.5.0`

Compare Source

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in #1864
Pin actions/github-script by Git SHA by @martincostello in #1859
fix: check reqs exist by @joseph-sentry in #1835
fix: Typo in README by @spalmurray in #1838
docs: Refine OIDC docs by @spalmurray in #1837
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in #1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

`v5.4.3`

Compare Source

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in #1822
fix: OIDC on forks by @joseph-sentry in #1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

`v5.4.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

`v5.4.1`

Compare Source

What's Changed

fix: use the github core methods by @thomasrockhu-codecov in #1807
build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @app/dependabot in #1803
build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @app/dependabot in #1797
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @app/dependabot in #1798
chore(release): wrapper -0.2.1 by @app/codecov-releaser-app in #1788
build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @app/dependabot in #1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

`v5.4.0`

Compare Source

What's Changed

update wrapper submodule to 0.2.0, add recurse_submodules arg by @matt-codecov in #1780
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @app/dependabot in #1775
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @app/dependabot in #1776
build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @app/dependabot in #1777
Clarify in README that use_pypi bypasses integrity checks too by @webknjaz in #1773
Fix use of safe.directory inside containers by @Flamefire in #1768
Fix description for report_type input by @craigscott-crascit in #1770
build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @app/dependabot in #1765
Fix a typo in the example by @miranska in #1758
build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @app/dependabot in #1757
build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @app/dependabot in #1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

`v5.3.1`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

`v5.3.0`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

`v5.2.0`

Compare Source

What's Changed

Fix typo in README by @tserg in #1747
Th/add commands by @thomasrockhu-codecov in #1745
use correct audience when requesting oidc token by @juho9000 in #1744
build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by @app/dependabot in #1742
build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by @app/dependabot in #1743
chore(deps): bump wrapper to 0.0.32 by @thomasrockhu-codecov in #1740
feat: add disable-telem feature by @thomasrockhu-codecov in #1739
fix: remove erroneous linebreak in readme by @Vampire in #1734

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0

`v5.1.2`

Compare Source

What's Changed

fix: update statment by @thomasrockhu-codecov in #1726
fix: update action script by @thomasrockhu-codecov in #1725
fix: prevent oidc on tokenless due to permissioning by @thomasrockhu-codecov in #1724
chore(release): wrapper-0.0.31 by @app/codecov-releaser-app in #1723
Put quotes around ${{ inputs.token }} in action.yml by @jwodder in #1721
build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by @app/dependabot in #1722
Remove mistake from options table by @Acconut in #1718
build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @app/dependabot in #1717

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.1..v5.1.2

`v5.1.1`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.0..v5.1.1

`v5.1.0`

Compare Source

What's Changed

fix: hide unnecessary error on shasum by @thomasrockhu-codecov in #1692
build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @app/dependabot in #1701
chore(release): wrapper-0.0.29 by @app/codecov-releaser-app in #1713

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.7..v5.1.0

`v5.0.7`

Compare Source

What's Changed

fix: use HEAD_REPO by @thomasrockhu-codecov in #1690

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.6..v5.0.7

`v5.0.6`

Compare Source

What's Changed

fix: update CODECOV_TOKEN and fix tokenless by @thomasrockhu-codecov in #1688

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.5..v5.0.6

`v5.0.5`

Compare Source

What's Changed

chore(release): wrapper-0.0.27 by @app/codecov-releaser-app in #1685

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.4..v5.0.5

`v5.0.4`

Compare Source

What's Changed

chore(deps): bump wrapper to 0.0.26 by @thomasrockhu-codecov in #1681
fix: strip out a trailing /n from input tokens by @thomasrockhu-codecov in #1679
fix: add action version by @thomasrockhu-codecov in #1678

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.3..v5.0.4

`v5.0.3`

Compare Source

What's Changed

fix: update OIDC audience by @thomasrockhu-codecov in #1675
fix: use double-quotes for OIDC by @thomasrockhu-codecov in #1669
fix: prevent always setting tokenless to be true by @thomasrockhu-codecov in #1673
fix: update CHANGELOG and automate by @thomasrockhu-codecov in #1674
fix: bump to v5 and update README by @thomasrockhu-codecov in #1655
build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 by @app/dependabot in #1665
fix: typo in inputs.disable_safe_directory by @mkroening in #1666

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.2..v5.0.3

`v5.0.2`

Compare Source

What's Changed

fix: override commit and pr values for PR cases by @thomasrockhu-codecov in #1657

Full Changelog: codecov/codecov-action@v5.0.1...v5.0.2

`v5.0.1`

Compare Source

What's Changed

fix: use marketplace v5 badge by @thomasrockhu-codecov in #1646
fix: update tokenless branch logic by @thomasrockhu-codecov in #1650
chore(release): 5.0.1 by @thomasrockhu-codecov in #1656

Full Changelog: codecov/codecov-action@v5.0.0...v5.0.1

`v5.0.0`

Compare Source

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

file (this has been deprecated in favor of files)

plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

binary
gcov_args
gcov_executable
gcov_ignore
gcov_include
report_type
skip_validation
swift_project

You can see their usage in the action.yml file.

`v5`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov-commenter · 2026-07-01T16:25:28Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.58%. Comparing base (dead429) to head (ada700e).
⚠️ Report is 14 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #342      +/-   ##
==========================================
- Coverage   41.92%   38.58%   -3.34%     
==========================================
  Files          14       14              
  Lines        2092     2340     +248     
  Branches       42       42              
==========================================
+ Hits          877      903      +26     
- Misses       1197     1419     +222     
  Partials       18       18

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

chore(deps): update codecov/codecov-action action to v7

c64450f

renovate-bot force-pushed the renovate/codecov-codecov-action-7.x branch from ada700e to c64450f Compare July 1, 2026 18:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update codecov/codecov-action action to v7#342

chore(deps): update codecov/codecov-action action to v7#342
renovate-bot wants to merge 1 commit into
google:mainfrom
renovate-bot:renovate/codecov-codecov-action-7.x

renovate-bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

codecov-commenter commented Jul 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate-bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

v5 Release

Migration Guide

What's Changed

Configuration

Uh oh!

codecov-commenter commented Jul 1, 2026

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate-bot commented Jul 1, 2026 •

edited

Loading