We have a public repo with the upload token stored in plaintext in GitHub Actions YAML configuration (because that's the best we can do given how secrets and even vars are working). We send PRs from public forks. v0.7.0, released several hours ago, broke our uploads:

• Failure: https://github.com/FerretDB/FerretDB/actions/runs/9608047064/job/26500174828?pr=4368
• Fix: Fix codecov CLI version FerretDB/FerretDB#4379

I think the reason is somewhere between #447, codecov/codecov-action#1410, and codecov/codecov-action#1471. Weirdly, the last PR should supposedly fix our situation, but we still saw "Fork detected, tokenless uploading used" message in logs.