-
1950efe: Version 2.0.0 addresses critical security issues and dependency updates. It also drops support for Node 18
Bump
@actions/coreto ^3.0.0 and@actions/githubto ^9.0.0, and setengines.nodeto>=20.0.0to match upstream. Semver major because supported Node.js drops below 20 (breaking for anyone still on Node 18).@actions/core (actions/toolkit
packages/core/RELEASES.md)- v3.0.0: ESM-only release; apps that
require("@actions/core")directly must use dynamicimport().@codecov/bundler-plugin-corebundles@actions/coreand@actions/githubintodist/index.cjs, sorequire("@codecov/bundler-plugin-core")(e.g. Rollup/Webpack CJS configs) keeps working. - v2.x (between 1.x and 3.x): Node 24 support and
@actions/http-clientupgrades (including 3.x in the 2.x line).
@actions/github (actions/toolkit
packages/github/RELEASES.md)- v9.0.0: ESM-only (same consideration as
@actions/corefor this package). Release notes also note improved TypeScript behavior with ESM and@octokit/core/types. - v8.0.0: Minimum Node.js is now 20 (previously 18); Octokit dependencies move to current major lines (
@octokit/core, REST plugins, request stack). - v8.0.1: Dependency updates (
undici,@actions/http-client).
Impact here
- Runtime behavior we rely on is unchanged:
contextfor GitHub Actions metadata andgetIDToken()for OIDC uploads are still the supported APIs. - Build: unbuild inlines
@actions/*(and their transitive deps) like@sentry/core;failOnWarn: falsesuppresses expected “inlined implicit external” noise. Publisheddistis larger (~9 MB CJS) but avoidsERR_PACKAGE_PATH_NOT_EXPORTEDfor CJS consumers. - Node 18 is no longer a supported runtime for this package; use Node 20+ (aligned with
@actions/github8+ and this repo’s Volta pin on Node 20).
- v3.0.0: ESM-only release; apps that
- 866e31a: update GitHub Actions workflow permissions
- Updated dependencies [1950efe]
- Updated dependencies [866e31a]
- @codecov/bundler-plugin-core@2.0.0
- 1db06c3: Bump vite version
- 8a6f939: Fix typo in event type matching, add merge group handling
- 4b36ee2: Update
nextto 14.2.25 - Updated dependencies [8a6f939]
- Updated dependencies [4b36ee2]
- @codecov/bundler-plugin-core@1.9.1
- 392003d: Inline @sentry/core dependency
- 043b250: Update normalizePath to handle Vite legacy builds as they currently are not being normalized
- 06f90eb: Remove minification from plugin build
- 553176a: Dependency updates to the lockfile
- Updated dependencies [392003d]
- Updated dependencies [06f90eb]
- Updated dependencies [043b250]
- Updated dependencies [553176a]
- @codecov/bundler-plugin-core@1.9.0
- 01de9e5: Add Sentry to the bundler plugins to start collecting issues and telemetry
- Updated dependencies [01de9e5]
- Updated dependencies [01de9e5]
- @codecov/bundler-plugin-core@1.8.0
- d2e73a6: Add in support for Vite V6, Astro V5, and update related dependencies
- Updated dependencies [d2e73a6]
- @codecov/bundler-plugin-core@1.7.0
- 90901a5: Export bundle analysis plugin return type from bundler plugin core
- 90901a5: Add new Astro Plugin to support BA uploads for Astro applications
- 6f2bebc: Collect dynamic imports for base bundler plugins, which apply to the extended meta-framework plugins.
- be672d0: Resolve issue with Local provider conditional check not being able to detect local values
- Updated dependencies [be672d0]
- Updated dependencies [90901a5]
- Updated dependencies [90901a5]
- Updated dependencies [6f2bebc]
- @codecov/bundler-plugin-core@1.6.0
- 072682c: Bump codecov plugin version for uploading stats
- Updated dependencies [072682c]
- @codecov/bundler-plugin-core@1.5.1
- 0efd87f: Update nuxt and related dependencies
- 9968698: Fix issue with bundle names not being reset in nextjs, rollup, vite, and webpack plugins.
- 8f89fd4: Remove unused regex character escape from normalizePath
- Updated dependencies [9968698]
- Updated dependencies [8f89fd4]
- Updated dependencies [0efd87f]
- @codecov/bundler-plugin-core@1.5.0
- 2db57cc: Remove the org branch requirement for tokenless uploads
- b17f870: Bump vite versions
- ab1385e: Bump rollup versions
- 6552110: Bump nextjs versions
- Updated dependencies [2db57cc]
- Updated dependencies [ab1385e]
- Updated dependencies [b17f870]
- Updated dependencies [6552110]
- @codecov/bundler-plugin-core@1.4.0
- 168610b: Add in debug logs for each param for each provider for better debugging.
- 590f0f1: Add GITHUB_JOB env var to list of env var names in GitHubActions provider util
- Updated dependencies [168610b]
- Updated dependencies [590f0f1]
- @codecov/bundler-plugin-core@1.3.0
- 0ea4d42: Fix issue with normalizing paths with a custom hash length is set
- Updated dependencies [0ea4d42]
- @codecov/bundler-plugin-core@1.2.1
- 6c4377d: Add in better debug logging when fetching pre-signed url or uploading stats fail. Update current logs to have more details present.
- Updated dependencies [6c4377d]
- @codecov/bundler-plugin-core@1.2.0
- 875be0b: Add support for setups without a standard bundler through new Bundle Analyzer library and CLI
- Updated dependencies [875be0b]
- @codecov/bundler-plugin-core@1.1.0