Skip to content

build(deps): bump codecov/codecov-action from 5 to 6 #589

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

build(deps): bump codecov/codecov-action from 5 to 6 #589

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/upload-coverage.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:
run-id: ${{ github.event.workflow_run.id }}

- name: Upload to Codecov
uses: codecov/codecov-action@v5
uses: codecov/codecov-action@v6
Copy link

@coderabbitai coderabbitai bot Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

codecov-action v6 migration guide breaking changes from v5

💡 Result:

No v6 version of codecov-action exists as of 2026-03-26. The latest release is v5.5.3 (March 2026). The most recent major version is v5.0.0, which introduced breaking changes from v4, but there are no v6 migration guides or breaking changes because v6 has not been released. For reference, v5 breaking changes from v4 (detailed in official CHANGELOG and README): - Uses Codecov Wrapper (encapsulates CLI for faster updates). - Deprecated file → use files; plugin → use plugins. - New inputs: binary, gcov_args, gcov_executable, gcov_ignore, gcov_include, report_type, skip_validation, swift_project. - Tokenless uploads for public repos (opt-out in Codecov settings); forks/PRs supported automatically. - Dependabot needs CODECOV_TOKEN secret access. Continue using @v5 (e.g., uses: codecov/codecov-action@v5) for the latest stable features. Check https://github.com/codecov/codecov-action/releases for updates.

Citations:

🏁 Script executed:

#!/bin/bash
# Description: Find all uses of codecov/codecov-action to ensure consistent updates

# Search for codecov-action usage across all workflow files
rg -n 'codecov/codecov-action' --glob '.github/workflows/*.yml' --glob '.github/workflows/*.yaml'

Repository: codeready-toolchain/registration-service

Length of output: 232

🏁 Script executed:

#!/bin/bash
# Verify the file exists and check its content
ls -la .github/workflows/upload-coverage.yml 2>/dev/null && echo "=== File found ===" || echo "File not found"

# List all files in .github/workflows to understand structure
echo "=== Workflow files available ==="
find .github/workflows -type f 2>/dev/null | head -20

# Search for codecov-action without glob restrictions
echo "=== Searching for codecov-action usage ==="
rg 'codecov/codecov-action' --max-count 20

Repository: codeready-toolchain/registration-service

Length of output: 581

🏁 Script executed:

#!/bin/bash
# Read the actual file to see what's on line 22
echo "=== Full content of upload-coverage.yml ==="
cat -n .github/workflows/upload-coverage.yml

Repository: codeready-toolchain/registration-service

Length of output: 1305

Revert codecov/codecov-action to v5—v6 does not exist.

The change to codecov/codecov-action@v6 references a non-existent version. As of March 2026, the latest release is v5.5.3. Version 6 has never been released. Update line 22 back to v5 (e.g., uses: codecov/codecov-action@v5 or pin to @v5.5.3 for stability).

🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In @.github/workflows/upload-coverage.yml at line 22, The workflow currently
references a non-existent action version "codecov/codecov-action@v6"; update the
uses entry in the GitHub Actions workflow (the line containing uses:
codecov/codecov-action@v6) to a valid v5 release (e.g., uses:
codecov/codecov-action@v5 or pin to uses: codecov/codecov-action@v5.5.3) to
restore a real, supported version.

with:
token: ${{ secrets.CODECOV_TOKEN }}
# The 'files' attribute consists of 'coverage/coverage.txt'.
Expand Down
Loading