security: high-severity dependency fixes and Node 20 engines #1096

Expected: { "assets": [ { "gzipSize": 27169, "name": "assets/index-320c8eaf.js", "normalized": "assets/index-*.js", "size": 73071, }, ], "builtAt": Any<Number>, "bundleName": StringContaining "test-vite-v4-esm", "bundler": { "name": "rollup", "version": "3.29.4", }, "chunks": [ { "dynamicImports": [], "entry": true, "files": [ "assets/index-320c8eaf.js", ], "id": "index", "initial": false, "names": [ "index", ], "uniqueId": "0-index", }, ], "duration": Any<Number>, "modules": [ { "chunkUniqueIds": [ "0-index", ], "name": "./vite/modulepreload-polyfill", "size": 1548, }, { "chunkUniqueIds": [ "0-index", ], "name": "./commonjsHelpers.js", "size": 334, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.17.21/node_modules/lodash/lodash.js?commonjs-module", "size": 27, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.17.21/node_modules/lodash/lodash.js", "size": 560242, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/getRandomNumber.js", "size": 98, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/main.js", "size": 163, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/index.html", "size": 0, }, ], "outputPath": StringContaining "/distV4", "plugin": { "name": StringMatching "@codecov/vite-plugin", "version": "1.9.1", }, "version": "3", } Received: { "assets": [ { "gzipSize": 27232, "name": "assets/index-Cqk0e8UX.js", "normalized": "assets/index-*.js", "size": 73329, }, ], "builtAt": Any<Number>, "bundleName": StringContaining "test-vite-v4-esm", "bundler": { "name": "rollup", "version": "4.59.1", }, "chunks": [ { "dynamicImports": [], "entry": true, "files": [ "assets/index-Cqk0e8UX.js", ], "id": "index", "initial": false, "names": [ "index", ], "uniqueId": "0-index", }, ], "duration": Any<Number>, "modules": [ { "chunkUniqueIds": [ "0-index", ], "name": "./vite/modulepreload-polyfill", "size": 1548, }, { "chunkUniqueIds": [ "0-index", ], "name": "./commonjsHelpers.js", "size": 334, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.18.1/node_modules/lodash/lodash.js?commonjs-module", "size": 27, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.18.1/node_modules/lodash/lodash.js", "size": 562020, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/getRandomNumber.js", "size": 98, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/main.js", "size": 163, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/index.html", "size": 0, }, ], "outputPath": StringContaining "/distV4", "plugin": { "name": StringMatching "@codecov/vite-plugin", "version": "1.9.1", }, "version": "3", } at /home/runner/work/codecov-javascript-bundler-plugins/codecov-javascript-bundler-plugins/integration-tests/fixtures/generate-bundle-stats/vite/vite-plugin.test.ts:65:9

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/vite/vite-plugin.test.ts#L65

Expected: { "assets": [ { "gzipSize": 26812, "name": "assets/index-7de22500.js", "normalized": "assets/index-*.js", "size": 72342, }, ], "builtAt": Any<Number>, "bundleName": StringContaining "test-vite-v4-cjs", "bundler": { "name": "rollup", "version": "3.29.4", }, "chunks": [ { "dynamicImports": [], "entry": true, "files": [ "assets/index-7de22500.js", ], "id": "index", "initial": false, "names": [ "index", ], "uniqueId": "0-index", }, ], "duration": Any<Number>, "modules": [ { "chunkUniqueIds": [ "0-index", ], "name": "./vite/modulepreload-polyfill", "size": 1548, }, { "chunkUniqueIds": [ "0-index", ], "name": "./commonjsHelpers.js", "size": 334, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.17.21/node_modules/lodash/lodash.js?commonjs-module", "size": 27, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.17.21/node_modules/lodash/lodash.js", "size": 560242, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/getRandomNumber.js", "size": 98, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/main.js", "size": 163, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/index.html", "size": 0, }, ], "outputPath": StringContaining "/distV4", "plugin": { "name": StringMatching "@codecov/vite-plugin", "version": "1.9.1", }, "version": "3", } Received: { "assets": [ { "gzipSize": 26855, "name": "assets/index-DHgrba2F.js", "normalized": "assets/index-*.js", "size": 72600, }, ], "builtAt": Any<Number>, "bundleName": StringContaining "test-vite-v4-cjs", "bundler": { "name": "rollup", "version": "4.59.1", }, "chunks": [ { "dynamicImports": [], "entry": true, "files": [ "assets/index-DHgrba2F.js", ], "id": "index", "initial": false, "names": [ "index", ], "uniqueId": "0-index", }, ], "duration": Any<Number>, "modules": [ { "chunkUniqueIds": [ "0-index", ], "name": "./vite/modulepreload-polyfill", "size": 1548, }, { "chunkUniqueIds": [ "0-index", ], "name": "./commonjsHelpers.js", "size": 334, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.18.1/node_modules/lodash/lodash.js?commonjs-module", "size": 27, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.18.1/node_modules/lodash/lodash.js", "size": 562020, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/getRandomNumber.js", "size": 98, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/main.js", "size": 163, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/index.html", "size": 0, }, ], "outputPath": StringContaining "/distV4", "plugin": { "name": StringMatching "@codecov/vite-plugin", "version": "1.9.1", }, "version": "3", } at /home/runner/work/codecov-javascript-bundler-plugins/codecov-javascript-bundler-plugins/integration-tests/fixtures/generate-bundle-stats/vite/vite-plugin.test.ts:65:9

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/vite/vite-plugin.test.ts#L65

Expected: { "assets": [ { "gzipSize": 26821, "name": "assets/index-b7a309be.js", "normalized": "assets/index-*.js", "size": 72360, }, ], "builtAt": Any<Number>, "bundleName": StringContaining "test-vite-v4-amd", "bundler": { "name": "rollup", "version": "3.29.4", }, "chunks": [ { "dynamicImports": [], "entry": true, "files": [ "assets/index-b7a309be.js", ], "id": "index", "initial": false, "names": [ "index", ], "uniqueId": "0-index", }, ], "duration": Any<Number>, "modules": [ { "chunkUniqueIds": [ "0-index", ], "name": "./vite/modulepreload-polyfill", "size": 1548, }, { "chunkUniqueIds": [ "0-index", ], "name": "./commonjsHelpers.js", "size": 334, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.17.21/node_modules/lodash/lodash.js?commonjs-module", "size": 27, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.17.21/node_modules/lodash/lodash.js", "size": 560242, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/getRandomNumber.js", "size": 98, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/main.js", "size": 163, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/index.html", "size": 0, }, ], "outputPath": StringContaining "/distV4", "plugin": { "name": StringMatching "@codecov/vite-plugin", "version": "1.9.1", }, "version": "3", } Received: { "assets": [ { "gzipSize": 26883, "name": "assets/index-vfcGCMvt.js", "normalized": "assets/index-*.js", "size": 72618, }, ], "builtAt": Any<Number>, "bundleName": StringContaining "test-vite-v4-amd", "bundler": { "name": "rollup", "version": "4.59.1", }, "chunks": [ { "dynamicImports": [], "entry": true, "files": [ "assets/index-vfcGCMvt.js", ], "id": "index", "initial": false, "names": [ "index", ], "uniqueId": "0-index", }, ], "duration": Any<Number>, "modules": [ { "chunkUniqueIds": [ "0-index", ], "name": "./vite/modulepreload-polyfill", "size": 1548, }, { "chunkUniqueIds": [ "0-index", ], "name": "./commonjsHelpers.js", "size": 334, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.18.1/node_modules/lodash/lodash.js?commonjs-module", "size": 27, }, { "chunkUniqueIds": [ "0-index", ], "name": "../node_modules/.pnpm/lodash@4.18.1/node_modules/lodash/lodash.js", "size": 562020, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/getRandomNumber.js", "size": 98, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/src/main.js", "size": 163, }, { "chunkUniqueIds": [ "0-index", ], "name": "./test-apps/vite/index.html", "size": 0, }, ], "outputPath": StringContaining "/distV4", "plugin": { "name": StringMatching "@codecov/vite-plugin", "version": "1.9.1", }, "version": "3", } at /home/runner/work/codecov-javascript-bundler-plugins/codecov-javascript-bundler-plugins/integration-tests/fixtures/generate-bundle-stats/vite/vite-plugin.test.ts:65:9

ShellError: Failed with exit code 1: integration-tests#L234

at new ShellError (:12:31) at new ShellPromise (:64:31) at BunShell (:184:69) at /home/runner/work/codecov-javascript-bundler-plugins/codecov-javascript-bundler-plugins/integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts:171:15

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts#L65

Expected: { "assets": ExpectArrayContaining {}, "builtAt": Any<Number>, "bundleName": StringContaining "test-remix-v2-client-esm", "bundler": { "name": "rollup", "version": "4.40.1", }, "chunks": ExpectArrayContaining {}, "duration": Any<Number>, "modules": ExpectArrayContaining {}, "outputPath": StringContaining "build", "plugin": { "name": StringMatching "@codecov/remix-vite-plugin", "version": "1.9.1", }, "version": "3", } Received: { "assets": ExpectArrayContaining {}, "builtAt": Any<Number>, "bundleName": StringContaining "test-remix-v2-client-esm", "bundler": { "name": "rollup", "version": "4.60.1", }, "chunks": ExpectArrayContaining {}, "duration": Any<Number>, "modules": ExpectArrayContaining {}, "outputPath": StringContaining "build", "plugin": { "name": StringMatching "@codecov/remix-vite-plugin", "version": "1.9.1", }, "version": "3", } at /home/runner/work/codecov-javascript-bundler-plugins/codecov-javascript-bundler-plugins/integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts:65:11

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts#L65

Expected: { "assets": ExpectArrayContaining {}, "builtAt": Any<Number>, "bundleName": StringContaining "test-remix-v2-client-cjs", "bundler": { "name": "rollup", "version": "4.40.1", }, "chunks": ExpectArrayContaining {}, "duration": Any<Number>, "modules": ExpectArrayContaining {}, "outputPath": StringContaining "build", "plugin": { "name": StringMatching "@codecov/remix-vite-plugin", "version": "1.9.1", }, "version": "3", } Received: { "assets": ExpectArrayContaining {}, "builtAt": Any<Number>, "bundleName": StringContaining "test-remix-v2-client-cjs", "bundler": { "name": "rollup", "version": "4.60.1", }, "chunks": ExpectArrayContaining {}, "duration": Any<Number>, "modules": ExpectArrayContaining {}, "outputPath": StringContaining "build", "plugin": { "name": StringMatching "@codecov/remix-vite-plugin", "version": "1.9.1", }, "version": "3", } at /home/runner/work/codecov-javascript-bundler-plugins/codecov-javascript-bundler-plugins/integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts:65:11

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts#L65

Expected: { "assets": ExpectArrayContaining {}, "builtAt": Any<Number>, "bundleName": StringContaining "test-remix-v2-client-amd", "bundler": { "name": "rollup", "version": "4.40.1", }, "chunks": ExpectArrayContaining {}, "duration": Any<Number>, "modules": ExpectArrayContaining {}, "outputPath": StringContaining "build", "plugin": { "name": StringMatching "@codecov/remix-vite-plugin", "version": "1.9.1", }, "version": "3", } Received: { "assets": ExpectArrayContaining {}, "builtAt": Any<Number>, "bundleName": StringContaining "test-remix-v2-client-amd", "bundler": { "name": "rollup", "version": "4.60.1", }, "chunks": ExpectArrayContaining {}, "duration": Any<Number>, "modules": ExpectArrayContaining {}, "outputPath": StringContaining "build", "plugin": { "name": StringMatching "@codecov/remix-vite-plugin", "version": "1.9.1", }, "version": "3", } at /home/runner/work/codecov-javascript-bundler-plugins/codecov-javascript-bundler-plugins/integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts:65:11

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/vite/vite-plugin.test.ts#L65

ShellError: Failed with exit code 1: integration-tests#L234

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts#L65

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/vite/vite-plugin.test.ts#L65

ShellError: Failed with exit code 1: integration-tests#L234

error: expect(received).toMatchSnapshot(expected): integration-tests/fixtures/generate-bundle-stats/remix/remix-plugin.test.ts#L65

Install deps

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, pnpm/action-setup@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Run Lint

Test docs build

Run Type Checker

Run Unit Tests

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, codecov/test-results-action@v1, pnpm/action-setup@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Run Unit Tests

This action is being deprecated in favor of 'codecov-action'. Please update CI accordingly to use 'codecov-action@v5' with 'report_type: test_results'. The 'codecov-action' should and can be run at least once for coverage and once for test results

Run Unit Tests

Run integration tests (Node 24.x)

Run integration tests (Node 20.x)

Run integration tests (Node 22.x)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

security: high-severity dependency fixes and Node 20 engines #1096

Summary

security: high-severity dependency fixes and Node 20 engines #1096

Uh oh!

ci.yml

Annotations