Skip to content

Remove Codecov integration and add dependency diff workflow#226

Merged
bartveneman merged 2 commits into
mainfrom
claude/remove-codecov-e2e-bundles-kxqm5u
Jul 10, 2026
Merged

Remove Codecov integration and add dependency diff workflow#226
bartveneman merged 2 commits into
mainfrom
claude/remove-codecov-e2e-bundles-kxqm5u

Conversation

@bartveneman

@bartveneman bartveneman commented Jul 10, 2026

Copy link
Copy Markdown
Member

Summary

Mirrors projectwallace/stylelint-plugin#232:

  • Removed: Codecov upload step from the test job, CODECOV_TOKEN env var from the build job, and the @codecov/rollup-plugin dependency (including its usage in tsdown.config.ts)
  • Added: New dependency-diff.yml workflow that packs the base and PR branches and runs e18e/action-dependency-diff to comment on PRs with a dependency/bundle size diff

Test plan

  • pnpm test passes (254 tests)
  • pnpm run build succeeds without the Codecov plugin
  • pnpm run check (typecheck) passes
  • pnpm run lint passes
  • No remaining codecov/CODECOV references in the repo
  • Dependency Diff workflow runs on this PR and posts a bundle size comparison

Generated by Claude Code

Mirrors projectwallace/stylelint-plugin#232: drop the Codecov upload
step, CODECOV_TOKEN env var, and @codecov/rollup-plugin (no longer
needed), and add a dependency-diff.yml workflow that packs base/PR
branches and runs e18e/action-dependency-diff to surface dependency
and bundle size changes on pull requests.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015F7NAapJWqo3k5bYoUmJbu
@github-actions

github-actions Bot commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

⚠️ Duplicate Dependencies (found: 22, threshold: 1)

📦 Package 📋 Versions
@babel/parser
2 versions
  • root@
    • @vitest/coverage-v8@4.1.9
      • magicast@0.5.3
        • @babel/parser@7.29.7

  • root@
    • tsdown@0.22.3
      • rolldown-plugin-dts@0.26.0
        • @babel/generator@8.0.0
          • @babel/parser@8.0.0

@babel/types
2 versions
  • root@
    • @vitest/coverage-v8@4.1.9
      • magicast@0.5.3
        • @babel/parser@7.29.7
          • @babel/types@7.29.7

  • root@
    • tsdown@0.22.3
      • rolldown-plugin-dts@0.26.0
        • @babel/generator@8.0.0
          • @babel/parser@8.0.0
            • @babel/types@8.0.0

@babel/helper-string-parser
2 versions
  • root@
    • @vitest/coverage-v8@4.1.9
      • magicast@0.5.3
        • @babel/parser@7.29.7
          • @babel/types@7.29.7
            • @babel/helper-string-parser@7.29.7

  • root@
    • tsdown@0.22.3
      • ...
        • @babel/parser@8.0.0
          • @babel/types@8.0.0
            • @babel/helper-string-parser@8.0.0

@babel/helper-validator-identifier
2 versions
  • root@
    • @vitest/coverage-v8@4.1.9
      • magicast@0.5.3
        • @babel/parser@7.29.7
          • @babel/types@7.29.7
            • @babel/helper-validator-identifier@7.29.7

  • root@
    • tsdown@0.22.3
      • ...
        • @babel/parser@8.0.0
          • @babel/types@8.0.0
            • @babel/helper-validator-identifier@8.0.2

@rolldown/binding-wasm32-wasi
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-wasm32-wasi@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-wasm32-wasi@1.1.5

picomatch
2 versions
  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • tinyglobby@0.2.17
          • fdir@6.5.0
            • picomatch@4.0.4

  • root@
    • @vitest/coverage-v8@4.1.9
      • vitest@4.1.9
        • @vitest/mocker@4.1.9
          • vite@8.1.4
            • picomatch@4.0.5

rolldown
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • vitest@4.1.9
        • @vitest/mocker@4.1.9
          • vite@8.1.4
            • rolldown@1.1.5

@oxc-project/types
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @oxc-project/types@0.137.0

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @oxc-project/types@0.139.0

@rolldown/binding-android-arm64
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-android-arm64@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-android-arm64@1.1.5

@rolldown/binding-darwin-arm64
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-darwin-arm64@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-darwin-arm64@1.1.5

@rolldown/binding-darwin-x64
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-darwin-x64@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-darwin-x64@1.1.5

@rolldown/binding-freebsd-x64
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-freebsd-x64@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-freebsd-x64@1.1.5

@rolldown/binding-linux-arm-gnueabihf
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-linux-arm-gnueabihf@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-linux-arm-gnueabihf@1.1.5

@rolldown/binding-linux-arm64-gnu
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-linux-arm64-gnu@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-linux-arm64-gnu@1.1.5

@rolldown/binding-linux-arm64-musl
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-linux-arm64-musl@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-linux-arm64-musl@1.1.5

@rolldown/binding-linux-ppc64-gnu
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-linux-ppc64-gnu@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-linux-ppc64-gnu@1.1.5

@rolldown/binding-linux-s390x-gnu
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-linux-s390x-gnu@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-linux-s390x-gnu@1.1.5

@rolldown/binding-linux-x64-gnu
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-linux-x64-gnu@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-linux-x64-gnu@1.1.5

@rolldown/binding-linux-x64-musl
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-linux-x64-musl@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-linux-x64-musl@1.1.5

@rolldown/binding-openharmony-arm64
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-openharmony-arm64@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-openharmony-arm64@1.1.5

@rolldown/binding-win32-arm64-msvc
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-win32-arm64-msvc@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-win32-arm64-msvc@1.1.5

@rolldown/binding-win32-x64-msvc
2 versions
  • root@
    • tsdown@0.22.3
      • rolldown@1.1.3
        • @rolldown/binding-win32-x64-msvc@1.1.3

  • root@
    • @vitest/coverage-v8@4.1.9
      • ...
        • vite@8.1.4
          • rolldown@1.1.5
            • @rolldown/binding-win32-x64-msvc@1.1.5

💡 To find out what depends on a specific package, run: pnpm -r why example-package

🎉 Package Size Decrease

📦 Package 📏 Base Size 📏 Source Size 📈 Size Change
@projectwallace/format-css 8.6 kB 8.6 kB -19 B

…e version

vitest's dependency chain (via @vitest/mocker/@vitest/coverage-v8) was
resolving a vulnerable vite@8.0.10 (GHSA-fx2h-pf6j-xcff) separately from
any pinned version, tripping `pnpm audit --audit-level=high` in CI.
Pinning vite@^8.1.4 directly makes pnpm dedupe to the single patched
version across the tree.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015F7NAapJWqo3k5bYoUmJbu
@bartveneman bartveneman merged commit d7620b9 into main Jul 10, 2026
8 checks passed
@bartveneman bartveneman deleted the claude/remove-codecov-e2e-bundles-kxqm5u branch July 10, 2026 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants