100 Commits
Author SHA1 Message Date
Tom HuandCursor fb8b3582c8 chore(release): 7.0.0 (#1957)
Bump the wrapper submodule (src/scripts) to the latest main
(bad8df5), which fetches the Codecov Uploader PGP key from the
codecovsecops Keybase account, and cut a new major version.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-06 20:43:45 -05:00
Tom Hu ca0a928a4c ci: remove Enforce License Compliance workflow (#1950)
Removes the Enforce License Compliance GitHub Actions workflow.
2026-05-22 06:26:10 -06:00
Tom Hu e79a6962e0 chore(release): 6.0.1 (#1949) 2026-05-19 03:35:56 +09:00
Tom Hu 51e64229ac fix: prevent template injection in run: steps (VULN-1652) (#1947)
Replace direct ${{ inputs.skip_validation }}, ${{ inputs.use_oidc }},
${{ inputs.token }}, and ${{ env.CODECOV_TOKEN }} interpolation inside
run: shell scripts with env-var indirection. GitHub Actions resolves
template expressions before the shell sees the script, so any consumer
workflow that passes user-controlled data into these inputs could
achieve arbitrary command execution on the runner. Moving the values
into env: entries and referencing them as $INPUT_* shell variables
ensures the shell always treats them as data, not code.
2026-05-14 03:59:22 +09:00
Tom HuandTom Hu 57e3a136b7 Th/6.0.0 (#1928)
* chore(release): 5.5.4

* chore(release): 6.0.0

* fix: small fixes

---------

Co-authored-by: Tom Hu <tomhu1096@gmail.com>
2026-03-26 23:00:19 +09:00
Tom Hu f67d33dda8 Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" (#1929)
Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" …"

This reverts commit 87d39f4a2c.
2026-03-26 22:54:10 +09:00
Tom HuandTom Hu 75cd11691c chore(release): 5.5.4 (#1927)
Co-authored-by: Tom Hu <tomhu1096@gmail.com>
2026-03-26 22:45:27 +09:00
Tom Hu 87d39f4a2c Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" (#1926)
Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0 (#1874)"

This reverts commit c143300dea.
2026-03-26 22:45:05 +09:00
Tom HuandTom Hu 1af58845a9 chore(release): bump to 5.5.3 (#1922)
Co-authored-by: Tom Hu <tomhu1096@gmail.com>
2026-03-19 03:19:01 +09:00
Tom Hu 671740ac38 chore(release): 5.5.2 (#1902) 2025-12-10 03:20:06 +08:00
Tom Hu 5a1091511a chore(release): 5.5.1 (#1873) 2025-09-04 16:35:45 +02:00
Tom Hu 3e0ce21cac fix: overwrite pr number on fork (#1871) 2025-09-04 16:28:19 +02:00
Tom Hu 18fdacf0ce fix: update to use local app/ dir (#1872)
* fix: update to use local app/ dir

* fix: update if statement on macos xlarge
2025-09-04 16:18:57 +02:00
Tom Hu fdcc847654 chore(release): 5.5.0 (#1865) 2025-08-19 22:38:54 +02:00
Tom Hu 18283e04ce chore(release): 5.4.3 (#1827) 2025-05-15 13:38:33 -07:00
Tom Hu ad3126e916 fix: hotfix oidc (#1813) 2025-04-14 13:01:35 -07:00
Tom Hu cf3f51a67d chore(release): 5.4.1 (#1810) 2025-04-14 11:42:48 -07:00
Tom Hu e4cdaba82f fix: use the github core methods (#1807) 2025-04-14 11:34:33 -07:00
Tom Hu 0565863a31 chore(release): 5.4.0 (#1781) 2025-02-26 20:40:17 -03:00
Tom Hu 04351de6bb Update README.md 2025-02-03 14:15:10 -03:00
Tom Hu 3e26040980 fix: add docs and copy over dist (#1752) 2025-01-24 13:08:13 -03:00
Tom Hu 0da7aa657d chore(release): 5.3.0 (#1751) 2025-01-23 16:10:33 -03:00
Tom Hu 65baa5fcb6 Update README with reqs (#1749)
* Update README.md

* Update README.md
2025-01-23 08:25:38 -03:00
Tom Hu 5a605bd927 chore(release): bump to 5.2.0 (#1748) 2025-01-22 13:33:10 -03:00
Tom Hu b1a63834ce Th/add commands (#1745)
* chore(deps): bump wrapper to 0.0.33

* feat: allow for new commands

* fix: bump to 0.0.34
2025-01-22 13:08:22 -03:00
Tom Hu 25fe46e17d chore(deps): bump wrapper to 0.0.32 (#1740) 2025-01-17 18:15:05 -03:00
Tom Hu 54a0566d1c feat: add disable-telem feature (#1739) 2025-01-15 14:32:42 -03:00
Tom Hu 1e68e06f1d chore(release): 5.1.2 (#1727) 2024-12-18 15:44:32 -03:00
Tom Hu 277db52c20 fix: update statment (#1726) 2024-12-18 15:33:42 -03:00
Tom Hu c77245a013 fix: update action script (#1725) 2024-12-18 14:57:16 -03:00
Tom Hu 9b01a34191 fix: prevent oidc on tokenless due to permissioning (#1724) 2024-12-17 11:37:41 -03:00
Tom Hu c2fcb216de chore(release): 5.1.0 (#1714) 2024-12-05 15:19:55 -03:00
Tom Hu cda5e552ba fix: hide unnecessary error on shasum (#1692) 2024-12-04 13:11:59 -03:00
Tom Hu 015f24e681 chore(release): 5.0.7 (#1691) 2024-11-20 19:02:34 -05:00
Tom Hu a76271d959 fix: use HEAD_REPO (#1690) 2024-11-20 18:55:06 -05:00
Tom Hu d168679d44 chore(release): 5.0.6 (#1689) 2024-11-20 15:16:16 -05:00
Tom Hu 373fd71a64 fix: update CODECOV_TOKEN and fix tokenless (#1688)
* fix: add space

* fix: update CODECOV_TOKEN if set with env
2024-11-20 15:11:41 -05:00
Tom Hu 288befbd10 chore(release): 5.0.5 (#1686) 2024-11-20 10:37:30 -05:00
Tom Hu 985343d705 chore(release): 5.0.4 (#1682) 2024-11-19 21:16:06 -05:00
Tom Hu 31d1900980 chore(deps): bump wrapper to 0.0.26 (#1681)
* chore(deps): bump wrapper to 0.0.25

* chore(deps): bump to 0.0.26
2024-11-19 21:11:53 -05:00
Tom Hu 095cfe09c6 fix: strip out a trailing \/n from input tokens (#1679) 2024-11-19 18:21:13 -05:00
Tom Hu b542d5a35c fix: add action version (#1678)
* fix: add action version

* fix: use GITHUB_ACTION_PATH

* fix: forgot a pipe
2024-11-19 17:40:08 -05:00
Tom Hu 05f5a9cfad chore(release): 5.0.3 (#1676) 2024-11-19 15:39:28 -05:00
Tom Hu 28b3165f92 fix: update OIDC audience (#1675)
* dnm: whats the token

* fix: show the url

* fix: do the echo

* fix: just echo

* fix: true == true

* fix get the action

* fix: use audience
2024-11-19 15:20:22 -05:00
Tom Hu e8603fa307 fix: use double-quotes for OIDC (#1669)
* fix: get log for use oidc

* fix: add oidc run

* fix: move the oidc call

* fix: update to use double quote on oidc
2024-11-19 14:14:58 -05:00
Tom Hu 9c78078f59 fix: prevent always setting tokenless to be true (#1673) 2024-11-19 12:56:18 -05:00
Tom Hu 8754828e79 fix: update CHANGELOG and automate (#1674)
* fix: update CHANGELOG and automate

* chore(release): v5.0.3
2024-11-19 12:45:11 -05:00
Tom HuandJoe Becher fb6775daf7 fix: bump to v5 and update README (#1655)
* fix: bump to v5 and update README

* Update README.md

* Update README.md

Co-authored-by: Joe Becher <joe.becher@sentry.io>

* Update README.md

---------

Co-authored-by: Joe Becher <joe.becher@sentry.io>
2024-11-19 10:35:56 -05:00
Tom Hu 5c47607acb fix: override commit and pr values for PR cases (#1657)
* fix: override commit and pr values for PR cases

* fix: remove unnecessary env vars

* fix: add back in with env

* fix: try no env

* fix: do we need them at all?

* fix: dollar curlies

* fix: wrap github_env

* fix: remove dollar curlies

* fix: remove
2024-11-15 10:27:07 -05:00
Tom Hu 3b1354a6c4 chore(release): 5.0.1 (#1656) 2024-11-15 08:33:30 -05:00
Tom Hu 2e2a9c6d58 fix: update tokenless branch logic (#1650)
* fix: update tokenless branch logic

* fix: use the github context

* fix: use double quotes

* fix: lots of quotes

* fix: ai fixes

* fix: just shove it in

* fix: more ai fixes

* fix: missing double quote

* fix: more clenaup

* fix: add CC_BRANCH setting for not forks

* fix: cleanup

* fix: more cleanup
2024-11-15 07:50:22 -05:00
Tom Hu cfc521b7a1 Update README.md 2024-11-14 20:55:33 -05:00
Tom Hu 06425412c8 fix: use marketplace v5 badge (#1646) 2024-11-14 12:44:36 -05:00
Tom Hu 968872560f Update README.md 2024-11-14 11:05:47 -05:00
Tom Hu 2112eaec1b chore(deps): bump wrapper to 0.0.23 (#1644) 2024-11-14 10:28:53 -05:00
Tom Hu 193421c5b3 fixL use the correct source (#1642)
* fixL use the correct source

* fix: use github action path

* fix: bonus slash

* fix: use GITHUB_ACTION_PATH

* fix: slashy

* Update action.yml
2024-11-13 14:16:55 -05:00
Tom Hu 6018df70b0 fix: update container builds (#1640) 2024-11-13 13:18:54 -05:00
Tom Hu eff1a643d6 fix: add missing vars (#1638)
* fix: add missing vars

* fix: add VERSION file
2024-11-13 13:18:24 -05:00
Tom Hu 4582d54fd3 Update README.md (#1639)
* Update README.md

* Add in the deprecated args
2024-11-13 13:18:13 -05:00
Tom HuandJoe Becher bb7467c2bc feat: use wrapper (#1621)
* feat: use wrapper

* fix: submodules

* fix: >>

* fix: container with python

* fix: oidc

* fix: latex

* fix: latex in the container

* fix: no sudo

* fix: container to python

* fix: submodule stuff

* fix: just dont coverage

* fix: apt install git

* fix: no sudo

* fix: apt-get

* fix: use the oidc token

* fix: cut the token

* fix: small changes

* fix: set the token

* fix: add defaults

* fix: bump to latest wrapper

* fix: 0.0.20

* fix: 0.8.0

* Update action.yml

* Update action.yml

* Update action.yml

* Update action.yml

Co-authored-by: Joe Becher <joe.becher@sentry.io>

* Update action.yml

Co-authored-by: Joe Becher <joe.becher@sentry.io>

* Update dist/codecov.sh

* Update action.yml

* feat: use wrapper

fix: submodules

fix: >>

fix: container with python

fix: oidc

fix: latex

fix: latex in the container

fix: no sudo

fix: container to python

fix: submodule stuff

fix: just dont coverage

fix: apt install git

fix: no sudo

fix: apt-get

fix: use the oidc token

fix: cut the token

fix: small changes

fix: set the token

fix: add defaults

fix: bump to latest wrapper

fix: 0.0.20

fix: 0.8.0

* chore(deps): 0.0.21

---------

Co-authored-by: Joe Becher <joe.becher@sentry.io>
2024-11-11 10:54:09 -05:00
Tom Hu ef609d6cb5 chore(deps): bump to eslint9+ and remove eslint-config-google (#1591)
* chore(deps): remove eslint-google as not supported by eslint9

* fix: actually remove eslint-config-google
2024-10-03 10:47:20 -05:00
Tom Hu b9fd7d16f6 chore(release):4.6.0 (#1587) 2024-10-01 09:51:13 -05:00
Tom Hu 6f7612c64d fix: bump eslint parser deps (#1586) 2024-10-01 09:44:31 -05:00
Tom Hu 992fc4eb1f chore(ci): restrict scorecards to codecov/codecov-action (#1512) 2024-07-16 16:44:50 +02:00
Tom Hu e28ff129e5 chore(release): bump to 4.5.0 (#1477) 2024-06-13 01:59:44 +08:00
Tom Hu 125fc84a9a chore(release): 4.4.1 (#1441) 2024-05-20 20:53:35 +07:00
Tom Hu d42a336584 fix: prevent xlarge from running on forks (#1432)
* fix: prevent xlarge from running on forks

* fix: dont run on main CI

* fix: single quotes

* fix: get context

* fix: a thing

* fix: update head repo full name
2024-05-16 21:10:52 +07:00
Tom Hu 6d798873df chore(release): 4.4.0 (#1430) 2024-05-14 22:00:11 +07:00
Tom Hu 2791a5c4fe fix: remove GPG and run on spawn (#1426)
* fix: first pass remove gpg

* fix: import key

* fix: break validation

* fix: fail ci

* fix: make it the right signature file

* fix: perhaps console

* fix: cleanup

* fix: io the import

* fix: remove from container for now
2024-05-14 21:26:56 +07:00
Tom Hu 5ecb98a3c6 chore(release): 4.3.1. (#1405) 2024-05-01 22:34:30 +08:00
Tom Hu 5a299d1127 fix: bypass token checks for forks and OIDC (#1404)
* chore(log): dump context

* fix: add logic to bypass token for forks

* fix: running the same things

* fix: more logging

* fix: more core info

* fix: run the func

* fix: cleanup
2024-05-01 15:34:25 +08:00
Tom Hu 84508663e9 chore(release): v4.3.0 (#1366) 2024-04-09 10:58:54 -07:00
Tom Hu 363a65ad48 feat: add network params (#1365) 2024-04-09 10:53:53 -07:00
Tom Hu 55e8381a3e fix: automatically detect if using GitHub enterprise (#1356) 2024-04-05 11:12:44 -07:00
Tom Hu 7afa10ed9b fix: use_oidc shoudl be required false (#1353) 2024-04-03 15:47:35 -07:00
Tom HuandCristian Le d820d60619 feat: allow for authentication via OIDC token (#1330)
* fix: allow for oidc token

* chore(docs): update docs with use_oidc argument

* Update action.yml

Co-authored-by: Cristian Le <github@lecris.me>

* chore(release): 4.2.0

---------

Co-authored-by: Cristian Le <github@lecris.me>
2024-04-03 15:41:48 -07:00
Tom Hu 3a20752bdd chore(deps): update deps (#1351) 2024-04-02 09:06:24 -07:00
Tom Hu c16abc29c9 chore(release): 4.1.1 (#1344) 2024-03-26 10:58:49 -04:00
Tom Hu 4621ecce09 fix: force version (#1329) 2024-03-19 08:19:47 -04:00
Tom Hu 54bcd8715e chore(release): v4.1.0 (#1307) 2024-02-26 11:44:43 -08:00
Tom Hu 2fc4847d3f fix: set safe directory (#1304)
* fix: set safe directory

* fix: naming

* fix: update tests

* fix: dont even check

* fix: add set safe directory

* fix: write test for setSafeDirectory
2024-02-26 11:31:39 -08:00
Tom Hu 0cfda1dd0a chore(release): bump to 4.0.2 (#1302) 2024-02-23 08:17:38 -08:00
Tom Hu 8c40c8cd55 Update README.md 2024-02-01 15:44:10 -08:00
Tom Hu 781907b2be Update README.md 2024-02-01 15:42:02 -08:00
Tom Hu 93b3dea0bf Update action.yml 2024-02-01 15:33:11 -08:00
Tom Hu 82ab52d110 Update README.md (#1251) 2024-02-01 14:26:09 -08:00
Tom Hu e0b68c6749 fix: show both token uses in readme (#1250) 2024-02-01 14:13:53 -08:00
Tom Hu 1f9f5573d1 Add all args (#1245)
* fix: add all args from cli

* chore(release): bump to 4.0.1
2024-02-01 09:05:17 -08:00
Tom Hu 09686fcfcb Update README.md (#1243) 2024-01-31 12:44:28 -08:00
Tom Hu f30e4959ba fix: update action.yml (#1240) 2024-01-31 10:05:05 -08:00
Tom Hu a7b945cea4 fix: allow for other archs (#1239)
* fix: allow for other archs

* fix: platform tests
2024-01-31 09:18:52 -08:00
Tom Hu 98ab2c591b Update package.json (#1238)
* Update package.json

* fix: bump to v4
2024-01-30 10:05:16 -08:00
Tom Hu 43235cc5ae Update README.md (#1237)
* Update README.md

* Update README.md
2024-01-30 10:05:06 -08:00
Tom Hu 0cf8684c82 chore(ci): bump to node20 (#1236) 2024-01-30 08:31:31 -08:00
Tom Hu 347aed814d chore(ci): add fossa workflow (#1216) 2024-01-19 09:28:20 -08:00
Tom Hu 240e6ae968 fix: remove openpgp dep due to licensing and use gpg (#1218) 2024-01-19 12:23:04 -05:00
Tom Hu 22b99ac1d7 fix: downgrade undici as it has a breaking change (#1219) 2024-01-19 12:13:47 -05:00
Tom Hu 83d30f0e41 chore(deps): move from node-fetch to undici (#1148)
* chore(deps): move from node-fetch to undici

* fix: lint

* test: see if this is actually running

* test: skeptical

* test: post-install
2023-10-25 06:08:39 -07:00
Tom Hu 428cda1b1c feat: add plugins (#1099)
* feat: add plugins

* fix: add test
2023-09-22 17:29:50 -05:00
Tom Hu c4cf8a4f03 4.0.0-beta.2 (#1086) 2023-09-13 09:29:07 -07:00