Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pin codecov/codecov-action to v3.1.5 #7776

Merged
merged 1 commit into from
Feb 4, 2024

Conversation

hugovk
Copy link
Member

@hugovk hugovk commented Feb 3, 2024

There's a breaking change in #7770 from bumping codecov/codecov-action to v4 which affects us, requiring setting a token due to rate limiting:

https://github.com/codecov/codecov-action/releases/tag/v4.0.0

Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This doc shows instructions on how to add the Codecov token.

v4 doesn't need a token for PRs from forks, but does for merges. This is why coverage has dropped to ~50% for merges, because it's only recording the coverage from AppVeyor:

https://app.codecov.io/gh/python-pillow/Pillow/commits

image

See:

I think we should stick to v3 for a while, to see what happens.

This PR uses v3.1.5, which also bumped to Node.js 20 to fix the deprecation warnings. (v3=v3.1.6 went back down to Node.js 16.)

We could adjust the threshold for Codecov to "fail", so we don't miss huge drops like this in #7770:

image

@radarhere
Copy link
Member

Thanks for catching this. Apologies for not noticing it in #7770

I find this interesting - codecov/feedback#112 (comment)

As of now, there are no plans to drop support for v3.

but if we're pinning to 3.1.5 for nodejs20, it is not as relevant as it could be.

It occurs to me that we could keep v4 for pushes and workflow dispatches, and only downgrade for pull requests? hugovk#111

@hugovk
Copy link
Member Author

hugovk commented Feb 4, 2024

Thanks for catching this. Apologies for not noticing it in #7770

No problem, it wasn't obvious and I only noticed after merging the same thing in some other projects!

I find this interesting - codecov/feedback#112 (comment)

Yes, that might what we need to do in the end. I've not see rate-limiting cause problems for us, so I think it's better to stick to v3 for a bit longer to give time for things to settle, it might be that things will change.

As of now, there are no plans to drop support for v3.

but if we're pinning to 3.1.5 for nodejs20, it is not as relevant as it could be.

We can go back to v3=v3.1.6 if we don't mind the Node.js 16 warnings. In any case, I don't see pinning to v3.1.5 as a long-term solution, rather a stopgap for the time being.

It occurs to me that we could keep v4 for pushes and workflow dispatches, and only downgrade for pull requests? hugovk#111

This seems to add more complexity than we need right now, and will be extra work to make sure Renovate doesn't update the wrong bit. And hopefully we can choose only v3 or v4 or something soonish.

@radarhere radarhere merged commit fe09f0d into python-pillow:main Feb 4, 2024
56 checks passed
@hugovk hugovk deleted the codecov/codecov-action@v3.1.5 branch February 5, 2024 07:52
@radarhere
Copy link
Member

This pin was later removed in #8041

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants