Compare commits

...

2 Commits
v6.0.1 ... v5.x

Author SHA1 Message Date
Tom Hu
0fb7174895 chore(release): 5.5.5
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-08 18:18:38 -06:00
Tom Hu
f00ac4b766 fix: fetch Codecov PGP key from keybase.io/codecovsecops
The Codecov security PGP key moved from keybase.io/codecovsecurity to
keybase.io/codecovsecops. Update the bundled uploader script so GPG
signature validation imports the key from the correct location.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-08 18:18:37 -06:00
3 changed files with 10 additions and 2 deletions

View File

@@ -1,3 +1,11 @@
## v5.5.5
### What's Changed
* fix: fetch Codecov PGP key from keybase.io/codecovsecops
**Full Changelog**: https://github.com/codecov/codecov-action/compare/v5.5.4..v5.5.5
## v5.5.2 ## v5.5.2
### What's Changed ### What's Changed

2
dist/codecov.sh vendored
View File

@@ -110,7 +110,7 @@ then
chmod +x "$CC_COMMAND" chmod +x "$CC_COMMAND"
fi fi
else else
echo "$(curl -s https://keybase.io/codecovsecurity/pgp_keys.asc)" | \ echo "$(curl -s https://keybase.io/codecovsecops/pgp_keys.asc)" | \
gpg --no-default-keyring --import gpg --no-default-keyring --import
# One-time step # One-time step
say "$g==>$x Verifying GPG signature integrity" say "$g==>$x Verifying GPG signature integrity"

View File

@@ -1 +1 @@
5.5.4 5.5.5