-
1950efe: Version 2.0.0 addresses critical security issues and dependency updates. It also drops support for Node 18
Bump
@actions/coreto ^3.0.0 and@actions/githubto ^9.0.0, and setengines.nodeto>=20.0.0to match upstream. Semver major because supported Node.js drops below 20 (breaking for anyone still on Node 18).@actions/core (actions/toolkit
packages/core/RELEASES.md)- v3.0.0: ESM-only release; apps that
require("@actions/core")directly must use dynamicimport().@codecov/bundler-plugin-corebundles@actions/coreand@actions/githubintodist/index.cjs, sorequire("@codecov/bundler-plugin-core")(e.g. Rollup/Webpack CJS configs) keeps working. - v2.x (between 1.x and 3.x): Node 24 support and
@actions/http-clientupgrades (including 3.x in the 2.x line).
@actions/github (actions/toolkit
packages/github/RELEASES.md)- v9.0.0: ESM-only (same consideration as
@actions/corefor this package). Release notes also note improved TypeScript behavior with ESM and@octokit/core/types. - v8.0.0: Minimum Node.js is now 20 (previously 18); Octokit dependencies move to current major lines (
@octokit/core, REST plugins, request stack). - v8.0.1: Dependency updates (
undici,@actions/http-client).
Impact here
- Runtime behavior we rely on is unchanged:
contextfor GitHub Actions metadata andgetIDToken()for OIDC uploads are still the supported APIs. - Build: unbuild inlines
@actions/*(and their transitive deps) like@sentry/core;failOnWarn: falsesuppresses expected “inlined implicit external” noise. Publisheddistis larger (~9 MB CJS) but avoidsERR_PACKAGE_PATH_NOT_EXPORTEDfor CJS consumers. - Node 18 is no longer a supported runtime for this package; use Node 20+ (aligned with
@actions/github8+ and this repo’s Volta pin on Node 20).
- v3.0.0: ESM-only release; apps that
- 866e31a: update GitHub Actions workflow permissions
- 8a6f939: Fix typo in event type matching, add merge group handling
- 4b36ee2: Update
nextto 14.2.25
- 392003d: Inline @sentry/core dependency
- 043b250: Update normalizePath to handle Vite legacy builds as they currently are not being normalized
- 06f90eb: Remove minification from plugin build
- 553176a: Dependency updates to the lockfile
- 01de9e5: Add Sentry to the bundler plugins to start collecting issues and telemetry
- 01de9e5: Fix issue not using the correct webpack in the nextjs plugin
- d2e73a6: Add in support for Vite V6, Astro V5, and update related dependencies
- 90901a5: Export bundle analysis plugin return type from bundler plugin core
- 90901a5: Add new Astro Plugin to support BA uploads for Astro applications
- 6f2bebc: Collect dynamic imports for base bundler plugins, which apply to the extended meta-framework plugins.
- be672d0: Resolve issue with Local provider conditional check not being able to detect local values
- 072682c: Bump codecov plugin version for uploading stats
- 0efd87f: Update nuxt and related dependencies
- 9968698: Fix issue with bundle names not being reset in nextjs, rollup, vite, and webpack plugins.
- 8f89fd4: Remove unused regex character escape from normalizePath
- 2db57cc: Remove the org branch requirement for tokenless uploads
- b17f870: Bump vite versions
- ab1385e: Bump rollup versions
- 6552110: Bump nextjs versions
- 168610b: Add in debug logs for each param for each provider for better debugging.
- 590f0f1: Add GITHUB_JOB env var to list of env var names in GitHubActions provider util
- 0ea4d42: Fix issue with normalizing paths with a custom hash length is set
- 6c4377d: Add in better debug logging when fetching pre-signed url or uploading stats fail. Update current logs to have more details present.
- 875be0b: Add support for setups without a standard bundler through new Bundle Analyzer library and CLI
- 3bf96e4: Switch webpack import from top level to dynamic in the webpack base plugin
-
4b311c0: Release 1.0.0 of the plugins. You can read more about the plugins and bundle analysis in our docs.
The plugins currently support the following frameworks and meta-frameworks:
- NextJS (Webpack) - Docs
- Nuxt - Docs
- Remix (Vite) - Docs
- Rollup - Docs
- SolidStart - Docs
- SvelteKit - Docs
- Vite - Docs
- Webpack - Docs
The plugins have the following functionality:
- be89828: Update nuxt and related dependencies
- f290775: Add in new package for nextjs webpack
- 80dc4ee: Add the ability for users to use GH OIDC instead of explicit upload tokens
- f290775: Add in new extendable types from the plugin core so that we can further customize them in the plugins
- 4c6e863: Refactor webpack plugin to export utility functions that will be used in the upcoming NextJS plugin
- a2e576f: Fix SvelteKit plugin keywords
- 5ad4bfa: Update plugins to remove sourcemaps from bundle stats data
- da9b990: Preserve JSDoc comments during build process for the bundler plugins
- 94a46aa: Grab branch name inside Vercel helper so that we for sure have a branch value
- f0c0a79: Swap from using empty strings to null values for CI providers
- 33b335e: Normalize options to set default values as well as validate bundle names ensuring they follow the correct pattern.
- 834dd14: Update Vercel env helper function to create full git slug
- f5cae1c: Move packages into beta
- e6f3e66: Refactor bundler-plugin-core to be a set of utility/helper functions, and refactor subsequent plugins to use these functions. This will make the plugins composable and easier to maintain in the future.
- 9038f06: feat: send metrics to sentry
- f0fd4ce: Add codecov prefix to log messages
- ec6b13a: Remove requirement for uploadToken being present adding support for tokenless uploads.
- 297cd29: Add in support for bundle analysis for SvelteKit through new SvelteKit plugin
- cb90ab7: Add in a new plugin specifically for Nuxt
- 4e1516a: Modify output formats to be consistent across aliases and bundlers
- 7bc7183: Add more detailed logging for upload stats
- dfb26db: Adjust asset type to contain gzipSize, add new function to collect gzip values
- 297cd29: Update license to 2024
- 153f684: Add in debug option that will enable more in-depth logs
- a34fb57: Add in better debug logging around choosing the commit sha
- a2e576f: Add in new Remix Vite plugin
- c6dc57c: Remove Sentry stats upload from the plugins, as the project has been put on hold
- dfb26db: Set version from passed output arg, and collect gzip information in plugins
- fe21d8a: Update normalizePath function to handle [hash][extname] case.
- f290775: Fix jsdoc lint rule issue in solidstart plugin
- d74a176: When a user submits a invalid bundle name, we will hard fail and exit the bundle process now.
- 6c02b73: Fix normalizePath not handling all base64 characters and dashes
- b1967b1: Swap over to using @actions/github to grab head and base commit sha's in GHA
- dfb26db: Update meta-framework plugins to collect version generated in output arg
- f0c0a79: Swap from using empty strings to null values for CI providers
- dfb26db: Adjust asset type to contain gzipSize, add new function to collect gzip values
- dfb26db: Set version from passed output arg, and collect gzip information in plugins
- dfb26db: Update meta-framework plugins to collect version generated in output arg
- a2e576f: Fix SvelteKit plugin keywords
- a2e576f: Add in new Remix Vite plugin
- 297cd29: Add in support for bundle analysis for SvelteKit through new SvelteKit plugin
- 297cd29: Update license to 2024
- fe21d8a: Update normalizePath function to handle [hash][extname] case.
- d74a176: When a user submits a invalid bundle name, we will hard fail and exit the bundle process now.
- a34fb57: Add in better debug logging around choosing the commit sha
- e6f3e66: Refactor bundler-plugin-core to be a set of utility/helper functions, and refactor subsequent plugins to use these functions. This will make the plugins composable and easier to maintain in the future.
- cb90ab7: Add in a new plugin specifically for Nuxt
- 153f684: Add in debug option that will enable more in-depth logs
- 5ad4bfa: Update plugins to remove sourcemaps from bundle stats data
- 4e1516a: Modify output formats to be consistent across aliases and bundlers
- c6dc57c: Remove Sentry stats upload from the plugins, as the project has been put on hold
- 6c02b73: Fix normalizePath not handling all base64 characters and dashes
- 9038f06: feat: send metrics to sentry
- da9b990: Preserve JSDoc comments during build process for the bundler plugins
- 33b335e: Normalize options to set default values as well as validate bundle names ensuring they follow the correct pattern.
- 94a46aa: Grab branch name inside Vercel helper so that we for sure have a branch value
- 7bc7183: Add more detailed logging for upload stats
- 834dd14: Update Vercel env helper function to create full git slug
- f0fd4ce: Add codecov prefix to log messages
- f5cae1c: Move packages into beta
- becd728: Add duration to webpack bundler plugin directly
- 543a526: Update dependencies before moving package out of alpha
- 4f1183e: Remove references to Webpack 4, as we currently on support Node 18+.
- c1fdbd6: Fix retry when fetching by throwing custom error if response is not okay
- d28a2e4: Break from retry loop when the response is ok
- 7c55993: Rename uploaderOverrides to uploadOverrides, remove url from uploadOverrides, and removal of repoToken/globalUploadToken in favour of just uploadToken.
- 36ed299: Alpha release of Codecov bundler plugins
- 562ac0c: Adjust peer dep versions to use x-range instead of caret
- 48b6e90: Move bundler-core test deps to dev deps
- c755a5c: Add missing outputPath to output stats file
- 543a526: Update dependencies before moving package out of alpha
- c1fdbd6: Fix retry when fetching by throwing custom error if response is not okay
- d28a2e4: Break from retry loop when the response is ok
- 562ac0c: Adjust peer dep versions to use x-range instead of caret
- c755a5c: Add missing outputPath to output stats file
- becd728: Add duration to webpack bundler plugin directly
- 7c55993: Rename uploaderOverrides to uploadOverrides, remove url from uploadOverrides, and removal of repoToken/globalUploadToken in favour of just uploadToken.
- 4f1183e: Remove references to Webpack 4, as we currently on support Node 18+.
- 48b6e90: Move bundler-core test deps to dev deps
- 36ed299: Alpha release of Codecov bundler plugins