chore(release): 7.0.0 (#1957)
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Workflow for Codecov Action / run (macos-latest) (push) Has been cancelled
Workflow for Codecov Action / run (ubuntu-latest) (push) Has been cancelled
Workflow for Codecov Action / run (windows-latest) (push) Has been cancelled
Workflow for Codecov Action / run-macos-latest-xlarge (push) Has been cancelled
Workflow for Codecov Action / run-container (push) Has been cancelled
Workflow for Codecov Action / run-alpine-missing-deps (push) Has been cancelled
Workflow for Codecov Action / run-alpine-success (push) Has been cancelled
Workflow for Codecov Action / run-alpine-partial-deps (push) Has been cancelled
Scorecards supply-chain security / Scorecards analysis (push) Has been cancelled

Bump the wrapper submodule (src/scripts) to the latest main
(bad8df5), which fetches the Codecov Uploader PGP key from the
codecovsecops Keybase account, and cut a new major version.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Tom Hu 2026-06-06 19:43:45 -06:00 committed by GitHub
parent ca0a928a4c
commit fb8b3582c8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 18 additions and 8 deletions

12
dist/codecov.sh vendored
View file

@ -37,7 +37,7 @@ g="\033[0;32m" # info/debug
r="\033[0;31m" # errors
x="\033[0m"
retry="--retry 5 --retry-delay 2"
CC_WRAPPER_VERSION="0.2.7"
CC_WRAPPER_VERSION="0.2.9"
CC_VERSION="${CC_VERSION:-latest}"
CC_FAIL_ON_ERROR="${CC_FAIL_ON_ERROR:-false}"
CC_RUN_CMD="${CC_RUN_CMD:-upload-coverage}"
@ -69,7 +69,13 @@ then
exit_if_error "Could not install via pypi."
exit
fi
CC_COMMAND="${CC_CLI_TYPE}"
if [[ "$CC_CLI_TYPE" == "codecov-cli" ]]; then
CC_COMMAND="codecovcli"
elif [[ "$CC_CLI_TYPE" == "sentry-prevent-cli" ]]; then
CC_COMMAND="sentry-prevent-cli"
else
CC_COMMAND="${CC_CLI_TYPE}"
fi
else
if [ -n "$CC_OS" ];
then
@ -110,7 +116,7 @@ then
chmod +x "$CC_COMMAND"
fi
else
echo "$(curl -s https://keybase.io/codecovsecurity/pgp_keys.asc)" | \
echo "$(curl -s https://keybase.io/codecovsecops/pgp_keys.asc)" | \
gpg --no-default-keyring --import
# One-time step
say "$g==>$x Verifying GPG signature integrity"