Merge pull request #1641 from crazy-max/ci-codecov-oidc

ci: use OIDC for Codecov uploads
2026-11-07 13:09:02 +08:00 · 2026-11-05 17:24:26 +01:00 · 2026-11-05 17:09:24 +01:00
2 changed files with 7 additions and 4 deletions
@@ -17,6 +17,9 @@ on:
 jobs:
  test:
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write # for Codecov authentication
    steps:
      -
        name: Checkout
@@ -32,4 +35,4 @@ jobs:
        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
        with:
          files: ./coverage/clover.xml
-          token: ${{ secrets.CODECOV_TOKEN }}
+          use_oidc: true
@@ -4960,12 +4960,12 @@ __metadata:
  linkType: hard

 "postcss-selector-parser@npm:^7.0.0":
-  version: 7.1.6
-  resolution: "postcss-selector-parser@npm:7.1.6"
+  version: 7.1.5
+  resolution: "postcss-selector-parser@npm:7.1.5"
  dependencies:
    cssesc: "npm:^3.0.0"
    util-deprecate: "npm:^1.0.2"
-  checksum: 10/8b00b63c8ae9eab8567bebf2710971dcd832a7a20a9cae7059d92aee3df38fbcd13ce454bdc09c54e777dbddd0df38966227000091c88002741b8575f3878f05
+  checksum: 10/ae66bbcb5d370a3f4b4660e23a208352a885c651f1b420f7b998faaa1034832b870066f49e295f73ee3da6a6c6312c56fea1b2039969f8d803438fa48232b307
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	562e519479	Merge pull request #1641 from crazy-max/ci-codecov-oidc ci: use OIDC for Codecov uploads	2026-11-05 17:24:26 +01:00
CrazyMax	5c9b57d629	ci: use OIDC for Codecov uploads Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-11-05 17:09:24 +01:00