Fix npm audit and codecov CI (#328)

* npm audit fix
* Use CodeCov GitHub Action in CI instead of npx codecov
* Update checkout and setupnode actions to v4

Author: cmoesel

.github/workflows/ci-workflow.yml

@@ -7,8 +7,8 @@ jobs:
     name: Check npm audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: '18.x'
       - run: npm audit
@@ -18,8 +18,8 @@ jobs:
     name: Check cql4browsers
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: '18.x'
       - run: ./bin/validate_cql4browsers.sh
@@ -29,8 +29,8 @@ jobs:
     name: Check lint and prettier
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: '18.x'
       - run: npm install
@@ -42,8 +42,8 @@ jobs:
     name: Test on node 18 and ubuntu-latest
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: '18.x'
       - name: Set timezone to America/New_York
@@ -53,6 +53,10 @@ jobs:
       - run: date +"%Y-%m-%d %T"
       - run: npm install
       - run: ./bin/check_for_nonassertive_tests.sh
-      - run: npx nyc --reporter=lcov npm test && npx codecov
+      - run: npx nyc --reporter=lcov npm test
         env:
           CI: true
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}