Skip to content

Commit f7903e9

Browse files
github-actions[bot]github-actions[bot]
committed
meta(changelog): Update package versions
1 parent 59a022d commit f7903e9

File tree

24 files changed

+366
-60
lines changed

24 files changed

+366
-60
lines changed

‎.changeset/polite-dots-pump.md‎

Lines changed: 0 additions & 34 deletions
This file was deleted.

‎.changeset/purple-bikes-jam.md‎

Lines changed: 0 additions & 15 deletions
This file was deleted.

‎packages/astro-plugin/CHANGELOG.md‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,38 @@
11
# @codecov/astro-plugin
22

3+
## 2.0.0
4+
5+
### Major Changes
6+
7+
- 1950efe: Version 2.0.0 addresses critical security issues and dependency updates. It also drops support for Node 18
8+
9+
Bump `@actions/core` to ^3.0.0 and `@actions/github` to ^9.0.0, and set `engines.node` to `>=20.0.0` to match upstream. **Semver major** because supported Node.js drops below 20 (breaking for anyone still on Node 18).
10+
11+
**@actions/core** ([actions/toolkit `packages/core/RELEASES.md`](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md))
12+
13+
- **v3.0.0**: ESM-only release; apps that `require("@actions/core")` directly must use dynamic `import()`. **`@codecov/bundler-plugin-core` bundles `@actions/core` and `@actions/github` into `dist/index.cjs`**, so `require("@codecov/bundler-plugin-core")` (e.g. Rollup/Webpack CJS configs) keeps working.
14+
- **v2.x** (between 1.x and 3.x): Node 24 support and `@actions/http-client` upgrades (including 3.x in the 2.x line).
15+
16+
**@actions/github** ([actions/toolkit `packages/github/RELEASES.md`](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md))
17+
18+
- **v9.0.0**: ESM-only (same consideration as `@actions/core` for this package). Release notes also note improved TypeScript behavior with ESM and `@octokit/core/types`.
19+
- **v8.0.0**: **Minimum Node.js is now 20** (previously 18); Octokit dependencies move to current major lines (`@octokit/core`, REST plugins, request stack).
20+
- **v8.0.1**: Dependency updates (`undici`, `@actions/http-client`).
21+
22+
**Impact here**
23+
24+
- Runtime behavior we rely on is unchanged: `context` for GitHub Actions metadata and `getIDToken()` for OIDC uploads are still the supported APIs.
25+
- **Build**: unbuild inlines `@actions/*` (and their transitive deps) like `@sentry/core`; `failOnWarn: false` suppresses expected “inlined implicit external” noise. Published `dist` is larger (~9 MB CJS) but avoids `ERR_PACKAGE_PATH_NOT_EXPORTED` for CJS consumers.
26+
- **Node 18** is no longer a supported runtime for this package; use **Node 20+** (aligned with `@actions/github` 8+ and this repo’s Volta pin on Node 20).
27+
28+
### Patch Changes
29+
30+
- 866e31a: update GitHub Actions workflow permissions
31+
- Updated dependencies [1950efe]
32+
- Updated dependencies [866e31a]
33+
- @codecov/bundler-plugin-core@2.0.0
34+
- @codecov/vite-plugin@2.0.0
35+
336
## 1.9.1
437

538
### Patch Changes

‎packages/astro-plugin/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@codecov/astro-plugin",
3-
"version": "1.9.1",
3+
"version": "2.0.0",
44
"description": "Official Codecov Astro Plugin",
55
"author": "Codecov",
66
"license": "MIT",

‎packages/bundle-analyzer/CHANGELOG.md‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,37 @@
11
# @codecov/bundle-analyzer
22

3+
## 2.0.0
4+
5+
### Major Changes
6+
7+
- 1950efe: Version 2.0.0 addresses critical security issues and dependency updates. It also drops support for Node 18
8+
9+
Bump `@actions/core` to ^3.0.0 and `@actions/github` to ^9.0.0, and set `engines.node` to `>=20.0.0` to match upstream. **Semver major** because supported Node.js drops below 20 (breaking for anyone still on Node 18).
10+
11+
**@actions/core** ([actions/toolkit `packages/core/RELEASES.md`](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md))
12+
13+
- **v3.0.0**: ESM-only release; apps that `require("@actions/core")` directly must use dynamic `import()`. **`@codecov/bundler-plugin-core` bundles `@actions/core` and `@actions/github` into `dist/index.cjs`**, so `require("@codecov/bundler-plugin-core")` (e.g. Rollup/Webpack CJS configs) keeps working.
14+
- **v2.x** (between 1.x and 3.x): Node 24 support and `@actions/http-client` upgrades (including 3.x in the 2.x line).
15+
16+
**@actions/github** ([actions/toolkit `packages/github/RELEASES.md`](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md))
17+
18+
- **v9.0.0**: ESM-only (same consideration as `@actions/core` for this package). Release notes also note improved TypeScript behavior with ESM and `@octokit/core/types`.
19+
- **v8.0.0**: **Minimum Node.js is now 20** (previously 18); Octokit dependencies move to current major lines (`@octokit/core`, REST plugins, request stack).
20+
- **v8.0.1**: Dependency updates (`undici`, `@actions/http-client`).
21+
22+
**Impact here**
23+
24+
- Runtime behavior we rely on is unchanged: `context` for GitHub Actions metadata and `getIDToken()` for OIDC uploads are still the supported APIs.
25+
- **Build**: unbuild inlines `@actions/*` (and their transitive deps) like `@sentry/core`; `failOnWarn: false` suppresses expected “inlined implicit external” noise. Published `dist` is larger (~9 MB CJS) but avoids `ERR_PACKAGE_PATH_NOT_EXPORTED` for CJS consumers.
26+
- **Node 18** is no longer a supported runtime for this package; use **Node 20+** (aligned with `@actions/github` 8+ and this repo’s Volta pin on Node 20).
27+
28+
### Patch Changes
29+
30+
- 866e31a: update GitHub Actions workflow permissions
31+
- Updated dependencies [1950efe]
32+
- Updated dependencies [866e31a]
33+
- @codecov/bundler-plugin-core@2.0.0
34+
335
## 1.9.1
436

537
### Patch Changes

‎packages/bundle-analyzer/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@codecov/bundle-analyzer",
3-
"version": "1.9.1",
3+
"version": "2.0.0",
44
"description": "Official Codecov Bundle Analyzer",
55
"author": "Codecov",
66
"license": "MIT",

‎packages/bundler-plugin-core/CHANGELOG.md‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,34 @@
11
# @codecov/bundler-plugin-core
22

3+
## 2.0.0
4+
5+
### Major Changes
6+
7+
- 1950efe: Version 2.0.0 addresses critical security issues and dependency updates. It also drops support for Node 18
8+
9+
Bump `@actions/core` to ^3.0.0 and `@actions/github` to ^9.0.0, and set `engines.node` to `>=20.0.0` to match upstream. **Semver major** because supported Node.js drops below 20 (breaking for anyone still on Node 18).
10+
11+
**@actions/core** ([actions/toolkit `packages/core/RELEASES.md`](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md))
12+
13+
- **v3.0.0**: ESM-only release; apps that `require("@actions/core")` directly must use dynamic `import()`. **`@codecov/bundler-plugin-core` bundles `@actions/core` and `@actions/github` into `dist/index.cjs`**, so `require("@codecov/bundler-plugin-core")` (e.g. Rollup/Webpack CJS configs) keeps working.
14+
- **v2.x** (between 1.x and 3.x): Node 24 support and `@actions/http-client` upgrades (including 3.x in the 2.x line).
15+
16+
**@actions/github** ([actions/toolkit `packages/github/RELEASES.md`](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md))
17+
18+
- **v9.0.0**: ESM-only (same consideration as `@actions/core` for this package). Release notes also note improved TypeScript behavior with ESM and `@octokit/core/types`.
19+
- **v8.0.0**: **Minimum Node.js is now 20** (previously 18); Octokit dependencies move to current major lines (`@octokit/core`, REST plugins, request stack).
20+
- **v8.0.1**: Dependency updates (`undici`, `@actions/http-client`).
21+
22+
**Impact here**
23+
24+
- Runtime behavior we rely on is unchanged: `context` for GitHub Actions metadata and `getIDToken()` for OIDC uploads are still the supported APIs.
25+
- **Build**: unbuild inlines `@actions/*` (and their transitive deps) like `@sentry/core`; `failOnWarn: false` suppresses expected “inlined implicit external” noise. Published `dist` is larger (~9 MB CJS) but avoids `ERR_PACKAGE_PATH_NOT_EXPORTED` for CJS consumers.
26+
- **Node 18** is no longer a supported runtime for this package; use **Node 20+** (aligned with `@actions/github` 8+ and this repo’s Volta pin on Node 20).
27+
28+
### Patch Changes
29+
30+
- 866e31a: update GitHub Actions workflow permissions
31+
332
## 1.9.1
433

534
### Patch Changes

‎packages/bundler-plugin-core/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@codecov/bundler-plugin-core",
3-
"version": "1.9.1",
3+
"version": "2.0.0",
44
"description": "Official Codecov Bundler Plugin Core",
55
"author": "Codecov",
66
"license": "MIT",

‎packages/nextjs-webpack-plugin/CHANGELOG.md‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,38 @@
11
# @codecov/nextjs-webpack-plugin
22

3+
## 2.0.0
4+
5+
### Major Changes
6+
7+
- 1950efe: Version 2.0.0 addresses critical security issues and dependency updates. It also drops support for Node 18
8+
9+
Bump `@actions/core` to ^3.0.0 and `@actions/github` to ^9.0.0, and set `engines.node` to `>=20.0.0` to match upstream. **Semver major** because supported Node.js drops below 20 (breaking for anyone still on Node 18).
10+
11+
**@actions/core** ([actions/toolkit `packages/core/RELEASES.md`](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md))
12+
13+
- **v3.0.0**: ESM-only release; apps that `require("@actions/core")` directly must use dynamic `import()`. **`@codecov/bundler-plugin-core` bundles `@actions/core` and `@actions/github` into `dist/index.cjs`**, so `require("@codecov/bundler-plugin-core")` (e.g. Rollup/Webpack CJS configs) keeps working.
14+
- **v2.x** (between 1.x and 3.x): Node 24 support and `@actions/http-client` upgrades (including 3.x in the 2.x line).
15+
16+
**@actions/github** ([actions/toolkit `packages/github/RELEASES.md`](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md))
17+
18+
- **v9.0.0**: ESM-only (same consideration as `@actions/core` for this package). Release notes also note improved TypeScript behavior with ESM and `@octokit/core/types`.
19+
- **v8.0.0**: **Minimum Node.js is now 20** (previously 18); Octokit dependencies move to current major lines (`@octokit/core`, REST plugins, request stack).
20+
- **v8.0.1**: Dependency updates (`undici`, `@actions/http-client`).
21+
22+
**Impact here**
23+
24+
- Runtime behavior we rely on is unchanged: `context` for GitHub Actions metadata and `getIDToken()` for OIDC uploads are still the supported APIs.
25+
- **Build**: unbuild inlines `@actions/*` (and their transitive deps) like `@sentry/core`; `failOnWarn: false` suppresses expected “inlined implicit external” noise. Published `dist` is larger (~9 MB CJS) but avoids `ERR_PACKAGE_PATH_NOT_EXPORTED` for CJS consumers.
26+
- **Node 18** is no longer a supported runtime for this package; use **Node 20+** (aligned with `@actions/github` 8+ and this repo’s Volta pin on Node 20).
27+
28+
### Patch Changes
29+
30+
- 866e31a: update GitHub Actions workflow permissions
31+
- Updated dependencies [1950efe]
32+
- Updated dependencies [866e31a]
33+
- @codecov/bundler-plugin-core@2.0.0
34+
- @codecov/webpack-plugin@2.0.0
35+
336
## 1.9.1
437

538
### Patch Changes

‎packages/nextjs-webpack-plugin/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@codecov/nextjs-webpack-plugin",
3-
"version": "1.9.1",
3+
"version": "2.0.0",
44
"description": "Official Codecov NextJS (Webpack) plugin",
55
"author": "Codecov",
66
"license": "MIT",

0 commit comments

Comments
 (0)