codecov-action/dist
CrepuscularIRIS e21c216315 fix: resolve CLI version before download to prevent sha256sum race condition
When CC_VERSION is 'latest', the binary and SHA256SUM checksum files were
downloaded in separate requests using the 'latest' redirect. If a new CLI
release deployed between those two requests, the binary and checksum would
be from different versions, causing sha256sum verification to fail.

Fix: query the version API before downloading the binary, resolve 'latest'
to a specific version tag, and use that tag for both the binary download
and the SHA256SUM download. Falls back to CC_VERSION if the API call fails.

Fixes #1940
2026-04-23 07:05:33 -04:00
..
codecov.sh fix: resolve CLI version before download to prevent sha256sum race condition 2026-04-23 07:05:33 -04:00