mirror of
https://github.com/codecov/codecov-action.git
synced 2026-05-23 19:05:53 +00:00
When CC_VERSION is 'latest', the binary and SHA256SUM checksum files were downloaded in separate requests using the 'latest' redirect. If a new CLI release deployed between those two requests, the binary and checksum would be from different versions, causing sha256sum verification to fail. Fix: query the version API before downloading the binary, resolve 'latest' to a specific version tag, and use that tag for both the binary download and the SHA256SUM download. Falls back to CC_VERSION if the API call fails. Fixes #1940 |
||
|---|---|---|
| .. | ||
| codecov.sh | ||