From 1fed88d53f60a491f878a36d08a709482e44a45b Mon Sep 17 00:00:00 2001
From: Ruaan Deysel <ruaan.deysel@gmail.com>
Date: Sun, 11 Oct 2026 15:24:55 +1000
Subject: [PATCH] chore(ci): configure Codecov workflow for tokenless coverage
 upload

---
 .github/workflows/build.yml | 7 ++++---
 CHANGELOG.md                | 3 +++
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 396cb65b..3573be5e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -54,7 +54,7 @@ jobs:
       - name: Upload Go coverage to Codecov
         uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: ${{ github.repository }}
           files: ./coverage.txt
           flags: backend
           disable_search: true
@@ -66,7 +66,7 @@ jobs:
       - name: Upload web coverage to Codecov
         uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: ${{ github.repository }}
           files: ./web/coverage/lcov.info
           flags: frontend
           disable_search: true
@@ -76,8 +76,9 @@ jobs:
         if: ${{ !cancelled() }}
         uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: ${{ github.repository }}
           files: ./web/test-report.junit.xml
+          fail_ci_if_error: false
 
       - name: Cross-compile Linux binary
         env:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 58de0afc..07f3ccc2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/), and this
 
 ## [Unreleased]
 
+### Changed
+- Configured Codecov GitHub Actions workflow for tokenless coverage uploads
+
 ### Fixed
 
 - **Logs page unresponsiveness and freeze when loading older entries (#454):** Fixed microtask starvation caused by concurrent older-page requests during initial mount and background loading loops (`loadAll` and search). Active older-load requests now share the in-flight Promise across callers, older requests are bound to the store context sequence to discard stale responses, and background loading loops terminate when no progress is made. Also added a store `dispose()` method, called from the synchronous `onMount` cleanup in `Logs.svelte`, to abort background activity on page navigation. Closes #454.