Create README.md

Merge pull request #440 from codecov/2.0.2-token-fixes
2.0.2 token fixes
2025-12-08 16:16:24 +00:00 · 2021-07-23 09:51:05 -07:00 · 2021-07-23 07:48:24 -07:00 · 2021-07-22 14:54:58 -07:00 · 2021-07-22 12:58:38 -07:00 · 2021-07-22 11:59:46 -07:00
13 changed files with 4318 additions and 43216 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,7 +1,12 @@
 version: 2
 updates:
 - package-ecosystem: npm
-  directory: "/"
+  directory: /
  schedule:
    interval: daily
  open-pull-requests-limit: 10
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: weekly
+  open-pull-requests-limit: 10
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,6 +1,27 @@
 name: Workflow for Codecov Action
 on: [push, pull_request]
 jobs:
+  no-deps:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [macos-latest, windows-latest, ubuntu-latest]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Upload coverage to Codecov (script)
+        uses: ./
+        with:
+          files: ./coverage/script/coverage-final.json
+          flags: script,${{ matrix.os }}
+          name: codecov-script
+      - name: Upload coverage to Codecov (demo)
+        uses: ./
+        with:
+          files: ./coverage/calculator/coverage-final.json,./coverage/coverage-test/coverage-final.json
+          file: ./coverage/coverage-final.json
+          flags: demo,${{ matrix.os }}
+          name: codecov-demo
  run:
    runs-on: ${{ matrix.os }}
    strategy:
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,13 @@
+## 2.0.2
+### Fixes
+- Underlying uploader fixes issues with tokens not being sent properly for users seeing
+  `Error!: Error: Error uploading to https://codecov.io: Error: Error uploading to Codecov: Error: Not Found`
+- #440 fix: Validation ordering
+
+## 2.0.1
+### Fixes
+- #424 fix: Issue in building all deep dependencies
+
 ## 2.0.0
 On February 1, 2022, the `v1` uploader will be full sunset and no longer function. This is due
 to the deprecation of the underlying bash uploader. This version uses the new [uploader](https://github.com/codecov/uploader).
--- a/6
+++ b/6
@@ -1,7 +1,7 @@
 deploy:
 	$(eval VERSION := $(shell cat package.json | grep '"version": ' | cut -d\" -f4))
-	git tag -d v1
-	git push origin :v1
-	git tag v1
+	git tag -d v2
+	git push origin :v2
+	git tag v2
 	git tag v$(VERSION) -m ""
 	git push origin --tags
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # Codecov GitHub Action

-[![GitHub Marketplace](https://img.shields.io/badge/Marketplace-v1-undefined.svg?logo=github&logoColor=white&style=flat)](https://github.com/marketplace/actions/codecov)
+[![GitHub Marketplace](https://img.shields.io/badge/Marketplace-v2-undefined.svg?logo=github&logoColor=white&style=flat)](https://github.com/marketplace/actions/codecov)
 [![FOSSA Status](https://app.fossa.com/api/projects/git%2Bgithub.com%2Fcodecov%2Fcodecov-action.svg?type=shield)](https://app.fossa.com/projects/git%2Bgithub.com%2Fcodecov%2Fcodecov-action?ref=badge_shield)
 [![Workflow for Codecov Action](https://github.com/codecov/codecov-action/actions/workflows/main.yml/badge.svg)](https://github.com/codecov/codecov-action/actions/workflows/main.yml)
 ### Easily upload coverage reports to Codecov from GitHub Actions
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/dist/sourcemap-register.js
+++ b/dist/sourcemap-register.js
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
  "name": "codecov-action",
-  "version": "2.0.0",
+  "version": "2.0.2",
  "lockfileVersion": 1,
  "requires": true,
  "dependencies": {
@@ -451,9 +451,9 @@
      }
    },
    "@eslint/eslintrc": {
-      "version": "0.4.2",
-      "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-0.4.2.tgz",
-      "integrity": "sha512-8nmGq/4ycLpIwzvhI4tNDmQztZ8sp+hI7cyG8i1nQDhkAbRzHpXPidRAHlNvCZQpJTKw5ItIpMw9RSToGF00mg==",
+      "version": "0.4.3",
+      "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-0.4.3.tgz",
+      "integrity": "sha512-J6KFFz5QCYUJq3pf0mjEcCJVERbzv71PUIDczuh9JkwGEzced6CO5ADLHB1rbf/+oPBtoPfMYNOpGDzCANlbXw==",
      "dev": true,
      "requires": {
        "ajv": "^6.12.4",
@@ -467,24 +467,6 @@
        "strip-json-comments": "^3.1.1"
      },
      "dependencies": {
-        "ajv": {
-          "version": "6.12.6",
-          "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
-          "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
-          "dev": true,
-          "requires": {
-            "fast-deep-equal": "^3.1.1",
-            "fast-json-stable-stringify": "^2.0.0",
-            "json-schema-traverse": "^0.4.1",
-            "uri-js": "^4.2.2"
-          }
-        },
-        "fast-deep-equal": {
-          "version": "3.1.3",
-          "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
-          "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-          "dev": true
-        },
        "globals": {
          "version": "13.10.0",
          "resolved": "https://registry.npmjs.org/globals/-/globals-13.10.0.tgz",
@@ -986,9 +968,9 @@
      "dev": true
    },
    "@types/node": {
-      "version": "16.0.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-16.0.1.tgz",
-      "integrity": "sha512-hBOx4SUlEPKwRi6PrXuTGw1z6lz0fjsibcWCM378YxsSu/6+C30L6CR49zIBKHiwNWCYIcOLjg4OHKZaFeLAug==",
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-16.4.0.tgz",
+      "integrity": "sha512-HrJuE7Mlqcjj+00JqMWpZ3tY8w7EUd+S0U3L1+PQSWiXZbOgyQDvi+ogoUxaHApPJq5diKxYBQwA3iIlNcPqOg==",
      "dev": true
    },
    "@types/normalize-package-data": {
@@ -1025,13 +1007,13 @@
      "dev": true
    },
    "@typescript-eslint/eslint-plugin": {
-      "version": "4.28.3",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-4.28.3.tgz",
-      "integrity": "sha512-jW8sEFu1ZeaV8xzwsfi6Vgtty2jf7/lJmQmDkDruBjYAbx5DA8JtbcMnP0rNPUG+oH5GoQBTSp+9613BzuIpYg==",
+      "version": "4.28.4",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-4.28.4.tgz",
+      "integrity": "sha512-s1oY4RmYDlWMlcV0kKPBaADn46JirZzvvH7c2CtAqxCY96S538JRBAzt83RrfkDheV/+G/vWNK0zek+8TB3Gmw==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/experimental-utils": "4.28.3",
-        "@typescript-eslint/scope-manager": "4.28.3",
+        "@typescript-eslint/experimental-utils": "4.28.4",
+        "@typescript-eslint/scope-manager": "4.28.4",
        "debug": "^4.3.1",
        "functional-red-black-tree": "^1.0.1",
        "regexpp": "^3.1.0",
@@ -1060,15 +1042,15 @@
      }
    },
    "@typescript-eslint/experimental-utils": {
-      "version": "4.28.3",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/experimental-utils/-/experimental-utils-4.28.3.tgz",
-      "integrity": "sha512-zZYl9TnrxwEPi3FbyeX0ZnE8Hp7j3OCR+ELoUfbwGHGxWnHg9+OqSmkw2MoCVpZksPCZYpQzC559Ee9pJNHTQw==",
+      "version": "4.28.4",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/experimental-utils/-/experimental-utils-4.28.4.tgz",
+      "integrity": "sha512-OglKWOQRWTCoqMSy6pm/kpinEIgdcXYceIcH3EKWUl4S8xhFtN34GQRaAvTIZB9DD94rW7d/U7tUg3SYeDFNHA==",
      "dev": true,
      "requires": {
        "@types/json-schema": "^7.0.7",
-        "@typescript-eslint/scope-manager": "4.28.3",
-        "@typescript-eslint/types": "4.28.3",
-        "@typescript-eslint/typescript-estree": "4.28.3",
+        "@typescript-eslint/scope-manager": "4.28.4",
+        "@typescript-eslint/types": "4.28.4",
+        "@typescript-eslint/typescript-estree": "4.28.4",
        "eslint-scope": "^5.1.1",
        "eslint-utils": "^3.0.0"
      },
@@ -1085,17 +1067,58 @@
      }
    },
    "@typescript-eslint/parser": {
-      "version": "4.28.3",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-4.28.3.tgz",
-      "integrity": "sha512-ZyWEn34bJexn/JNYvLQab0Mo5e+qqQNhknxmc8azgNd4XqspVYR5oHq9O11fLwdZMRcj4by15ghSlIEq+H5ltQ==",
+      "version": "4.28.4",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-4.28.4.tgz",
+      "integrity": "sha512-4i0jq3C6n+og7/uCHiE6q5ssw87zVdpUj1k6VlVYMonE3ILdFApEzTWgppSRG4kVNB/5jxnH+gTeKLMNfUelQA==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/scope-manager": "4.28.3",
-        "@typescript-eslint/types": "4.28.3",
-        "@typescript-eslint/typescript-estree": "4.28.3",
+        "@typescript-eslint/scope-manager": "4.28.4",
+        "@typescript-eslint/types": "4.28.4",
+        "@typescript-eslint/typescript-estree": "4.28.4",
        "debug": "^4.3.1"
      },
      "dependencies": {
+        "@typescript-eslint/scope-manager": {
+          "version": "4.28.4",
+          "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-4.28.4.tgz",
+          "integrity": "sha512-ZJBNs4usViOmlyFMt9X9l+X0WAFcDH7EdSArGqpldXu7aeZxDAuAzHiMAeI+JpSefY2INHrXeqnha39FVqXb8w==",
+          "dev": true,
+          "requires": {
+            "@typescript-eslint/types": "4.28.4",
+            "@typescript-eslint/visitor-keys": "4.28.4"
+          }
+        },
+        "@typescript-eslint/types": {
+          "version": "4.28.4",
+          "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-4.28.4.tgz",
+          "integrity": "sha512-3eap4QWxGqkYuEmVebUGULMskR6Cuoc/Wii0oSOddleP4EGx1tjLnZQ0ZP33YRoMDCs5O3j56RBV4g14T4jvww==",
+          "dev": true
+        },
+        "@typescript-eslint/typescript-estree": {
+          "version": "4.28.4",
+          "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-4.28.4.tgz",
+          "integrity": "sha512-z7d8HK8XvCRyN2SNp+OXC2iZaF+O2BTquGhEYLKLx5k6p0r05ureUtgEfo5f6anLkhCxdHtCf6rPM1p4efHYDQ==",
+          "dev": true,
+          "requires": {
+            "@typescript-eslint/types": "4.28.4",
+            "@typescript-eslint/visitor-keys": "4.28.4",
+            "debug": "^4.3.1",
+            "globby": "^11.0.3",
+            "is-glob": "^4.0.1",
+            "semver": "^7.3.5",
+            "tsutils": "^3.21.0"
+          }
+        },
+        "@typescript-eslint/visitor-keys": {
+          "version": "4.28.4",
+          "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-4.28.4.tgz",
+          "integrity": "sha512-NIAXAdbz1XdOuzqkJHjNKXKj8QQ4cv5cxR/g0uQhCYf/6//XrmfpaYsM7PnBcNbfvTDLUkqQ5TPNm1sozDdTWg==",
+          "dev": true,
+          "requires": {
+            "@typescript-eslint/types": "4.28.4",
+            "eslint-visitor-keys": "^2.0.0"
+          }
+        },
        "debug": {
          "version": "4.3.2",
          "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.2.tgz",
@@ -1104,33 +1127,42 @@
          "requires": {
            "ms": "2.1.2"
          }
+        },
+        "semver": {
+          "version": "7.3.5",
+          "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.5.tgz",
+          "integrity": "sha512-PoeGJYh8HK4BTO/a9Tf6ZG3veo/A7ZVsYrSA6J8ny9nb3B1VrpkuN+z9OE5wfE5p6H4LchYZsegiQgbJD94ZFQ==",
+          "dev": true,
+          "requires": {
+            "lru-cache": "^6.0.0"
+          }
        }
      }
    },
    "@typescript-eslint/scope-manager": {
-      "version": "4.28.3",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-4.28.3.tgz",
-      "integrity": "sha512-/8lMisZ5NGIzGtJB+QizQ5eX4Xd8uxedFfMBXOKuJGP0oaBBVEMbJVddQKDXyyB0bPlmt8i6bHV89KbwOelJiQ==",
+      "version": "4.28.4",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-4.28.4.tgz",
+      "integrity": "sha512-ZJBNs4usViOmlyFMt9X9l+X0WAFcDH7EdSArGqpldXu7aeZxDAuAzHiMAeI+JpSefY2INHrXeqnha39FVqXb8w==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/types": "4.28.3",
-        "@typescript-eslint/visitor-keys": "4.28.3"
+        "@typescript-eslint/types": "4.28.4",
+        "@typescript-eslint/visitor-keys": "4.28.4"
      }
    },
    "@typescript-eslint/types": {
-      "version": "4.28.3",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-4.28.3.tgz",
-      "integrity": "sha512-kQFaEsQBQVtA9VGVyciyTbIg7S3WoKHNuOp/UF5RG40900KtGqfoiETWD/v0lzRXc+euVE9NXmfer9dLkUJrkA==",
+      "version": "4.28.4",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-4.28.4.tgz",
+      "integrity": "sha512-3eap4QWxGqkYuEmVebUGULMskR6Cuoc/Wii0oSOddleP4EGx1tjLnZQ0ZP33YRoMDCs5O3j56RBV4g14T4jvww==",
      "dev": true
    },
    "@typescript-eslint/typescript-estree": {
-      "version": "4.28.3",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-4.28.3.tgz",
-      "integrity": "sha512-YAb1JED41kJsqCQt1NcnX5ZdTA93vKFCMP4lQYG6CFxd0VzDJcKttRlMrlG+1qiWAw8+zowmHU1H0OzjWJzR2w==",
+      "version": "4.28.4",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-4.28.4.tgz",
+      "integrity": "sha512-z7d8HK8XvCRyN2SNp+OXC2iZaF+O2BTquGhEYLKLx5k6p0r05ureUtgEfo5f6anLkhCxdHtCf6rPM1p4efHYDQ==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/types": "4.28.3",
-        "@typescript-eslint/visitor-keys": "4.28.3",
+        "@typescript-eslint/types": "4.28.4",
+        "@typescript-eslint/visitor-keys": "4.28.4",
        "debug": "^4.3.1",
        "globby": "^11.0.3",
        "is-glob": "^4.0.1",
@@ -1159,19 +1191,19 @@
      }
    },
    "@typescript-eslint/visitor-keys": {
-      "version": "4.28.3",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-4.28.3.tgz",
-      "integrity": "sha512-ri1OzcLnk1HH4gORmr1dllxDzzrN6goUIz/P4MHFV0YZJDCADPR3RvYNp0PW2SetKTThar6wlbFTL00hV2Q+fg==",
+      "version": "4.28.4",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-4.28.4.tgz",
+      "integrity": "sha512-NIAXAdbz1XdOuzqkJHjNKXKj8QQ4cv5cxR/g0uQhCYf/6//XrmfpaYsM7PnBcNbfvTDLUkqQ5TPNm1sozDdTWg==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/types": "4.28.3",
+        "@typescript-eslint/types": "4.28.4",
        "eslint-visitor-keys": "^2.0.0"
      }
    },
    "@vercel/ncc": {
-      "version": "0.28.6",
-      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.28.6.tgz",
-      "integrity": "sha512-t4BoSSuyK8BZaUE0gV18V6bkFs4st7baumtFGa50dv1tMu2GDBEBF8sUZaKBdKiL6DzJ2D2+XVCwYWWDcQOYdQ==",
+      "version": "0.29.0",
+      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.29.0.tgz",
+      "integrity": "sha512-p+sB835wOSDdgm2mgFgSOcXJF84AqZ+vBEnnGS0sm8veA92Hia7sqH0qEnqeFilPl+cXtxbdh2er+WdlfbVCZA==",
      "dev": true
    },
    "abab": {
@@ -1209,12 +1241,12 @@
      "dev": true
    },
    "ajv": {
-      "version": "6.10.2",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.10.2.tgz",
-      "integrity": "sha512-TXtUUEYHuaTEbLZWIKUr5pmBuhDLy+8KYtPYdcV8qC+pOZL+NKqYwvWSRrVXHn+ZmRRAu8vJTAznH7Oag6RVRw==",
+      "version": "6.12.6",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
+      "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
      "dev": true,
      "requires": {
-        "fast-deep-equal": "^2.0.1",
+        "fast-deep-equal": "^3.1.1",
        "fast-json-stable-stringify": "^2.0.0",
        "json-schema-traverse": "^0.4.1",
        "uri-js": "^4.2.2"
@@ -2026,13 +2058,13 @@
      }
    },
    "eslint": {
-      "version": "7.30.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.30.0.tgz",
-      "integrity": "sha512-VLqz80i3as3NdloY44BQSJpFw534L9Oh+6zJOUaViV4JPd+DaHwutqP7tcpkW3YiXbK6s05RZl7yl7cQn+lijg==",
+      "version": "7.31.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.31.0.tgz",
+      "integrity": "sha512-vafgJpSh2ia8tnTkNUkwxGmnumgckLh5aAbLa1xRmIn9+owi8qBNGKL+B881kNKNTy7FFqTEkpNkUvmw0n6PkA==",
      "dev": true,
      "requires": {
        "@babel/code-frame": "7.12.11",
-        "@eslint/eslintrc": "^0.4.2",
+        "@eslint/eslintrc": "^0.4.3",
        "@humanwhocodes/config-array": "^0.5.0",
        "ajv": "^6.10.0",
        "chalk": "^4.0.0",
@@ -2099,12 +2131,6 @@
          "integrity": "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",
          "dev": true
        },
-        "fast-deep-equal": {
-          "version": "3.1.3",
-          "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
-          "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-          "dev": true
-        },
        "globals": {
          "version": "13.10.0",
          "resolved": "https://registry.npmjs.org/globals/-/globals-13.10.0.tgz",
@@ -2506,9 +2532,9 @@
      "dev": true
    },
    "fast-deep-equal": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-2.0.1.tgz",
-      "integrity": "sha1-ewUhjd+WZ79/Nwv3/bLLFf3Qqkk=",
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
      "dev": true
    },
    "fast-glob": {
@@ -2594,9 +2620,9 @@
      }
    },
    "flatted": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.2.0.tgz",
-      "integrity": "sha512-XprP7lDrVT+kE2c2YlfiV+IfS9zxukiIOvNamPNsImNhXadSsQEbosItdL9bUQlCZXR13SvPk20BjWSWLA7m4A==",
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.2.1.tgz",
+      "integrity": "sha512-OMQjaErSFHmHqZe+PSidH5n8j3O0F2DdnVh8JB4j4eUQ2k6KvB0qGfrKIhapvez5JerBbmWkaLYUYWISaESoXg==",
      "dev": true
    },
    "for-in": {
@@ -2744,7 +2770,8 @@
    "graceful-fs": {
      "version": "4.2.4",
      "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.4.tgz",
-      "integrity": "sha512-WjKPNJF79dtJAVniUlGGWHYGz2jWxT6VhN/4m1NdkbZ2nOsEF+cI1Edgql5zCRhs/VsQYRvrXctxktVXZUkixw=="
+      "integrity": "sha512-WjKPNJF79dtJAVniUlGGWHYGz2jWxT6VhN/4m1NdkbZ2nOsEF+cI1Edgql5zCRhs/VsQYRvrXctxktVXZUkixw==",
+      "dev": true
    },
    "growly": {
      "version": "1.3.0",
@@ -2940,7 +2967,8 @@
    "imurmurhash": {
      "version": "0.1.4",
      "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
-      "integrity": "sha1-khi5srkoojixPcT7a21XbyMUU+o="
+      "integrity": "sha1-khi5srkoojixPcT7a21XbyMUU+o=",
+      "dev": true
    },
    "inflight": {
      "version": "1.0.6",
@@ -4165,26 +4193,6 @@
      "integrity": "sha1-h6kGXNs1XTGC2PlM4RGIuCXGijs=",
      "dev": true
    },
-    "node-localstorage": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/node-localstorage/-/node-localstorage-1.3.1.tgz",
-      "integrity": "sha512-NMWCSWWc6JbHT5PyWlNT2i8r7PgGYXVntmKawY83k/M0UJScZ5jirb61TLnqKwd815DfBQu+lR3sRw08SPzIaQ==",
-      "requires": {
-        "write-file-atomic": "^1.1.4"
-      },
-      "dependencies": {
-        "write-file-atomic": {
-          "version": "1.3.4",
-          "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-1.3.4.tgz",
-          "integrity": "sha1-+Aek8LHZ6ROuekgRLmzDrxmRtF8=",
-          "requires": {
-            "graceful-fs": "^4.1.11",
-            "imurmurhash": "^0.1.4",
-            "slide": "^1.1.5"
-          }
-        }
-      }
-    },
    "node-modules-regexp": {
      "version": "1.0.0",
      "resolved": "https://registry.npmjs.org/node-modules-regexp/-/node-modules-regexp-1.0.0.tgz",
@@ -4341,13 +4349,11 @@
      }
    },
    "openpgp": {
-      "version": "4.10.10",
-      "resolved": "https://registry.npmjs.org/openpgp/-/openpgp-4.10.10.tgz",
-      "integrity": "sha512-Ub48OogGPjNsr0G/wnJ/SyAQzt/tfcXZTWVZdjKFpXCQV1Ca+upFdSPPkBlGG3lb9EQGOKZJ2tzYNH6ZyKMkDQ==",
+      "version": "5.0.0-4",
+      "resolved": "https://registry.npmjs.org/openpgp/-/openpgp-5.0.0-4.tgz",
+      "integrity": "sha512-PGfI4arJwXakJKfbb+weVBQ1OFxDfHiX5XmpCWeyTMjYRofU2UsynLxaJo9vs3xKv87eEPHFbVcIvrVCYnfEkQ==",
      "requires": {
-        "asn1.js": "^5.0.0",
-        "node-fetch": "^2.1.2",
-        "node-localstorage": "~1.3.0"
+        "asn1.js": "^5.0.0"
      }
    },
    "optionator": {
@@ -5042,11 +5048,6 @@
        "is-fullwidth-code-point": "^3.0.0"
      }
    },
-    "slide": {
-      "version": "1.1.6",
-      "resolved": "https://registry.npmjs.org/slide/-/slide-1.1.6.tgz",
-      "integrity": "sha1-VusCfWW00tzmyy4tMsTUr8nh1wc="
-    },
    "snapdragon": {
      "version": "0.8.2",
      "resolved": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz",
@@ -5412,9 +5413,9 @@
      },
      "dependencies": {
        "ajv": {
-          "version": "8.6.1",
-          "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.6.1.tgz",
-          "integrity": "sha512-42VLtQUOLefAvKFAQIxIZDaThq6om/PrfP0CYk3/vn+y4BMNkKnbli8ON2QCiHov4KkzOSJ/xSoBJdayiiYvVQ==",
+          "version": "8.6.2",
+          "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.6.2.tgz",
+          "integrity": "sha512-9807RlWAgT564wT+DjeyU5OFMPjmzxVobvDFmNAhY+5zD6A2ly3jDp6sgnfyDtlIQ+7H97oc/DGCzzfu9rjw9w==",
          "dev": true,
          "requires": {
            "fast-deep-equal": "^3.1.1",
@@ -5423,12 +5424,6 @@
            "uri-js": "^4.2.2"
          }
        },
-        "fast-deep-equal": {
-          "version": "3.1.3",
-          "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
-          "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-          "dev": true
-        },
        "json-schema-traverse": {
          "version": "1.0.0",
          "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
--- a/package.json
+++ b/package.json
@@ -1,10 +1,10 @@
 {
  "name": "codecov-action",
-  "version": "2.0.0",
+  "version": "2.0.2",
  "description": "Upload coverage reports to Codecov from GitHub Actions",
  "main": "index.js",
  "scripts": {
-    "build": "ncc build src/index.ts",
+    "build": "ncc build src/index.ts --source-map",
    "lint": "eslint src/**/*.ts",
    "test": "npm run test-script && npm run test-calculator && npm run test-coverage",
    "test-calculator": "jest --testPathPattern=demo/calculator/ --coverage --coverageDirectory=coverage/calculator",
@@ -27,15 +27,15 @@
    "@actions/exec": "^1.1.0",
    "@actions/github": "^5.0.0",
    "node-fetch": "^2.6.1",
-    "openpgp": "^4.10.10"
+    "openpgp": "^5.0.0-4"
  },
  "devDependencies": {
    "@types/jest": "^26.0.24",
-    "@types/node": "^16.0.1",
-    "@typescript-eslint/eslint-plugin": "^4.28.3",
-    "@typescript-eslint/parser": "^4.28.3",
-    "@vercel/ncc": "^0.28.6",
-    "eslint": "^7.30.0",
+    "@types/node": "^16.4.0",
+    "@typescript-eslint/eslint-plugin": "^4.28.4",
+    "@typescript-eslint/parser": "^4.28.4",
+    "@vercel/ncc": "^0.29.0",
+    "eslint": "^7.31.0",
    "eslint-config-google": "^0.14.0",
    "jest": "^26.6.3",
    "jest-junit": "^12.2.0",
--- a/src/buildExec.ts
+++ b/src/buildExec.ts
@@ -1,8 +1,7 @@
 import * as core from '@actions/core';
 import * as github from '@actions/github';

-/* eslint-disable  @typescript-eslint/no-var-requires */
-const {version} = require('../package.json');
+import {version} from '../package.json';

 const context = github.context;

--- a/src/validate.ts
+++ b/src/validate.ts
@@ -31,37 +31,42 @@ const verify = async (filename: string) => {

    // Verify shasum
    const verified = await openpgp.verify({
-      message: await openpgp.cleartext.fromText(shasum),
-      signature: await openpgp.signature.readArmored(shaSig),
-      publicKeys: (await openpgp.key.readArmored(publicKeyArmored)).keys,
+      message: await openpgp.createMessage({text: shasum}),
+      signature: await openpgp.readSignature({armoredSignature: shaSig}),
+      verificationKeys: await openpgp.readKeys({armoredKeys: publicKeyArmored}),
    });
-    const {valid} = verified.signatures[0];
+    const valid = await verified.signatures[0].verified;
    if (valid) {
      core.info('==> SHASUM file signed by key id ' +
-          verified.signatures[0].keyid.toHex(),
+          verified.signatures[0].keyID.toHex(),
      );
    } else {
      setFailure('Codecov: Error validating SHASUM signature', true);
    }

-    // Verify uploader
-    const uploaderSha = crypto.createHash(`sha256`);
+    const calculateHash = async (filename: string) => {
      const stream = fs.createReadStream(filename);
-    await stream
-        .on('data', (data) => {
-          uploaderSha.update(data);
-        }).on('end', async () => {
-          const hash = `${uploaderSha.digest('hex')}  ${uploaderName}`;
-          if (hash !== shasum) {
+      const uploaderSha = crypto.createHash(`sha256`);
+      stream.pipe(uploaderSha);
+
+      return new Promise((resolve, reject) => {
+        stream.on('end', () => resolve(
+            `${uploaderSha.digest('hex')}  ${uploaderName}`,
+        ));
+        stream.on('error', reject);
+      });
+    };
+
+    const hash = await calculateHash(filename);
+    if (hash === shasum) {
+      core.info(`==> Uploader SHASUM verified (${hash})`);
+    } else {
      setFailure(
-                'Codecov: Uploader shasum does not match ' +
+          'Codecov: Uploader shasum does not match -- ' +
            `uploader hash: ${hash}, public hash: ${shasum}`,
          true,
      );
-          } else {
-            core.info('==> Uploader SHASUM verified');
    }
-        });
  } catch (err) {
    setFailure(`Codecov: Error validating uploader: ${err.message}`, true);
  }
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -2,9 +2,11 @@
  "compilerOptions": {
    "esModuleInterop": true,
    "moduleResolution": "node",
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "sourceMap": true
+    "outDir": "dist/",
+    "resolveJsonModule": true,
+    "rootDir": ".",
+    "sourceMap": true,
+    "target": "es2015"
  },
  "include": [
    "src/**/*.ts"
Author	SHA1	Message	Date
Tom Hu	07b62770b8	Create README.md	2021-07-23 09:51:05 -07:00
Tom Hu	51d810878b	Merge pull request #440 from codecov/2.0.2-token-fixes 2.0.2 token fixes	2021-07-23 07:48:24 -07:00
Tom Hu	88c796db18	Merge pull request #438 from mmorel-35/chore/dependabot Set up Dependabot for github-actions dependencies	2021-07-22 14:54:58 -07:00
Tom Hu	0bbb08247a	fix: Update validation	2021-07-22 12:58:38 -07:00
Tom Hu	53f686aaf8	fix: Update validation	2021-07-22 11:59:46 -07:00
Tom Hu	6ab08a75e2	Bump to 2.0.2	2021-07-22 11:21:24 -07:00
Tom Hu	f2242e1815	Merge pull request #425 from codecov/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-4.28.4 build(deps-dev): bump @typescript-eslint/eslint-plugin from 4.28.3 to 4.28.4	2021-07-21 14:53:30 -07:00
dependabot[bot]	fc2878a530	build(deps-dev): bump @typescript-eslint/eslint-plugin Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 4.28.3 to 4.28.4. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.28.4/packages/eslint-plugin) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2021-07-21 21:53:25 +00:00
Tom Hu	e00e953908	Merge pull request #426 from codecov/dependabot/npm_and_yarn/typescript-eslint/parser-4.28.4 build(deps-dev): bump @typescript-eslint/parser from 4.28.3 to 4.28.4	2021-07-21 14:52:29 -07:00
Tom Hu	8dcb1d2117	Merge pull request #433 from codecov/dependabot/npm_and_yarn/types/node-16.4.0 build(deps-dev): bump @types/node from 16.3.3 to 16.4.0	2021-07-21 14:52:23 -07:00
Tom Hu	c5857ba40c	Merge pull request #434 from RA80533/fix/openpgp fix: openpgp and asn1.js	2021-07-21 14:52:15 -07:00
Tom Hu	d680b4c7af	Regenerate index.js	2021-07-21 14:49:08 -07:00
Matthieu MOREL	da21aa9fb6	Update dependabot.yml	2021-07-21 23:49:05 +02:00
Tom Hu	0c50b7bcf4	Regenerate index.js	2021-07-21 14:47:45 -07:00
Tom Hu	3375d62f3d	Merge pull request #432 from RA80533/fix/import-json fix: use `import` to destructure package.json	2021-07-21 14:01:14 -07:00
RA80533	b0b3438bb4	Regenerate index.js	2021-07-21 05:20:20 -04:00
RA80533	9426b0fd6a	Fix lint errors	2021-07-21 05:13:39 -04:00
RA80533	7474287922	Untrack node_modules	2021-07-21 05:06:32 -04:00
RA80533	51773137e8	Migrate to v5	2021-07-21 04:52:37 -04:00
RA80533	16bc085eaf	Install openpgp@5.0.0-4	2021-07-21 04:50:17 -04:00
RA80533	37cfa1ca0a	Regenerate index.js	2021-07-21 03:14:08 -04:00
RA80533	4322a1979b	Fix lint errors	2021-07-21 03:08:43 -04:00
dependabot[bot]	a558bcf782	build(deps-dev): bump @types/node from 16.3.3 to 16.4.0 Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.3.3 to 16.4.0. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2021-07-21 04:02:48 +00:00
RA80533	a96e9cbd13	WIP	2021-07-20 19:27:28 -04:00
RA80533	c4b374fc52	Use `import` to destructure package.json	2021-07-20 18:54:56 -04:00
RA80533	48b5a1f06e	Enable `resolveJsonModule`	2021-07-20 18:49:20 -04:00
dependabot[bot]	66926ef901	build(deps-dev): bump @typescript-eslint/parser from 4.28.3 to 4.28.4 Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 4.28.3 to 4.28.4. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.28.4/packages/parser) --- updated-dependencies: - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2021-07-20 04:03:26 +00:00
Tom Hu	eac41f1afd	Merge pull request #420 from codecov/dependabot/npm_and_yarn/eslint-7.31.0 Bump eslint from 7.30.0 to 7.31.0	2021-07-19 13:49:38 -07:00
dependabot[bot]	4c95c92d70	Bump eslint from 7.30.0 to 7.31.0 Bumps [eslint](https://github.com/eslint/eslint) from 7.30.0 to 7.31.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v7.30.0...v7.31.0) --- updated-dependencies: - dependency-name: eslint dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2021-07-19 16:08:17 +00:00
Tom Hu	c585afe366	Merge pull request #424 from codecov/2.0.1-fix-deps fix: Add deep deps	2021-07-19 09:05:35 -07:00
Tom Hu	852cffb352	Remove dist/coverage	2021-07-19 09:00:12 -07:00
Tom Hu	d910efb490	Update CHANGELOG	2021-07-19 08:54:22 -07:00
Tom Hu	439c1e508e	Remove coverage folder	2021-07-19 08:46:25 -07:00
Tom Hu	fc5d663f82	fix: Hack to force asn1.js	2021-07-19 08:44:22 -07:00
Tom Hu	5c832aefb8	Force the dep	2021-07-19 08:33:09 -07:00
Tom Hu	71fa76a9e4	fix: Add job to test no deps	2021-07-19 08:21:05 -07:00
Tom Hu	672fbdc6af	Merge pull request #421 from codecov/dependabot/npm_and_yarn/types/node-16.3.3 Bump @types/node from 16.0.1 to 16.3.3	2021-07-19 08:08:26 -07:00
Tom Hu	1691a31d13	Merge pull request #422 from codecov/dependabot/npm_and_yarn/vercel/ncc-0.29.0 Bump @vercel/ncc from 0.28.6 to 0.29.0	2021-07-19 08:08:08 -07:00
Tom Hu	ad2b0032e0	fix: Add deep deps	2021-07-19 08:05:59 -07:00
dependabot[bot]	51db270fe4	Bump @types/node from 16.0.1 to 16.3.3 Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.0.1 to 16.3.3. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2021-07-19 14:29:46 +00:00
dependabot[bot]	e2a75c9ff3	Bump @vercel/ncc from 0.28.6 to 0.29.0 Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.28.6 to 0.29.0. - [Release notes](https://github.com/vercel/ncc/releases) - [Commits](https://github.com/vercel/ncc/compare/0.28.6...0.29.0) --- updated-dependencies: - dependency-name: "@vercel/ncc" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2021-07-19 04:06:09 +00:00