fix(ci): update codecov-action to v5

[agilgur5]

Summary

Per #112 (comment) and https://docs.codecov.com/docs/codecov-tokens#uploading-without-a-token, it seems a newer version of the action is required now for tokenless uploads due to GH rate limiting etc

Details

• codecov-action from v2 to v5

Notes to Reviewers

• also had to change a setting in Codecov per below comment

[agilgur5]

Drilling into the coverage action's logs:

error - 2024-12-31 20:33:40,005 -- Upload failed: {"message":"Token required because branch is protected"}

[agilgur5]

https://docs.codecov.com/docs/codecov-tokens#uploading-without-a-token

Ok according to https://docs.codecov.com/docs/codecov-tokens#tokenless-on-unprotected-branches, a "protected" branch is any "unprefixed" branch (has a name without a colon :), which would include both main and this branch, fix-ci-codecov. Prefixes are auto-added for PRs from forks.
I could make a new PR from a different branch (as I can't rename the branch without closing the PR) with a prefix which should work, but I also need uploads from main to work so that its coverage is tracked, so that doesn't fix the problem per se 😕
I guess I need to add a token, which is not ideal from a security perspective (leakage, theft, etc)

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (cb09cf7) to head (cf55fc4).
Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #114   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines           75        75           
  Branches         9         9           
=========================================
  Hits            75        75           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[agilgur5]

but I also need uploads from main to work so that its coverage is tracked, so that doesn't fix the problem per se 😕
I guess I need to add a token, which is not ideal from a security perspective (leakage, theft, etc)

one more correction, apparently it can work without tokens if you change a setting in Codecov. It's default on in newer Codecov orgs but off for older ones (mine's quite old). Confusingly though, this exact settings screen doesn't specifically say the setting only impacts "public repositories only" unlike the docs page 😕 :

I did get it working with and without a token now though per the above comment from the Codecov bot and the passing GH check now.

[agilgur5]

✅ Codecov is working now