Update Codecov

.github/workflows/build.yml

@@ -2,6 +2,8 @@ name: Build
 on: workflow_call
 jobs:
   combinations:
+    permissions:
+      id-token: write
     name: ${{ matrix.os }}, Node.js ${{matrix.node}}
     # git push --tags does not create any commits so should not trigger a new
     # workflow. There are no ways to skip workflows, so we skip jobs instead
@@ -39,4 +41,6 @@ jobs:
       - name: Tests
         run: npx gulp unit
       - name: Upload test coverage
-        run: npx gulp uploadCoverage
+        uses: codecov/codecov-action@v4
+        with:
+          use_oidc: true

README.md

@@ -152,11 +152,6 @@ Release a new patch/minor/major version on npm and GitHub using
 
 Only the repository owner can perform these tasks.
 
-## `gulp uploadCoverage`
-
-In CI ([GitHub actions](https://github.com/features/actions)), upload test
-coverage (produced by `c8 ava`) to [codecov](https://codecov.io/).
-
 ## `gulp checkCoverage`
 
 Ensures that files are fully covered by tests using

gulpfile.js

@@ -5,4 +5,3 @@
 import './src/tasks/builder/register.js'
 
 export * from './src/main.js'
-export { download } from './gulp/download.js'

src/main.js

@@ -3,7 +3,7 @@ export { build, buildWatch } from './tasks/builder/main.js'
 export { check, checkWatch } from './tasks/check/main.js'
 export { unit, unitWatch } from './tasks/unit/main.js'
 export { type, typeWatch } from './tasks/type.js'
-export { uploadCoverage, checkCoverage } from './tasks/cover/main.js'
+export { checkCoverage } from './tasks/cover/main.js'
 export { warn, warnWatch } from './tasks/warn.js'
 export {
   releaseMajor,

src/tasks/cover/main.js

@@ -1,13 +1,7 @@
 import { checkCoverage } from './check.js'
-import { uploadCoverage } from './upload.js'
-
-// eslint-disable-next-line fp/no-mutation
-uploadCoverage.description = 'Upload test coverage to CI'
 
 // eslint-disable-next-line fp/no-mutation
 checkCoverage.description = 'Ensure source files are fully covered by tests'
 
-// eslint-disable-next-line no-duplicate-imports
-export { uploadCoverage } from './upload.js'
 // eslint-disable-next-line no-duplicate-imports
 export { checkCoverage } from './check.js'