chore: migrate to codecov

.github/workflows/ci.yml

@@ -68,11 +68,11 @@ jobs:
           node-version: 24
       - run: just install install-styleguide build
       - run: EASYPOST_TEST_API_KEY=123 EASYPOST_PROD_API_KEY=123 just coverage
-      - name: Coveralls
+      - name: Coverage
         if: github.ref == 'refs/heads/master'
-        uses: coverallsapp/github-action@master
+        uses: codecov/codecov-action@v5
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.CODECOV_TOKEN }}
   docs:
     if: github.ref == 'refs/heads/master'
     runs-on: ubuntu-latest

README.md

@@ -1,7 +1,7 @@
 # EasyPost Node Client Library
 
 [![CI](https://github.com/EasyPost/easypost-node/workflows/CI/badge.svg)](https://github.com/EasyPost/easypost-node/actions?query=workflow%3ACI)
-[![Coverage Status](https://coveralls.io/repos/github/EasyPost/easypost-node/badge.svg?branch=master)](https://coveralls.io/github/EasyPost/easypost-node?branch=master)
+[![codecov](https://codecov.io/gh/EasyPost/easypost-node/graph/badge.svg?token=RhFfmXPeDW)](https://codecov.io/gh/EasyPost/easypost-node)
 [![npm version](https://badge.fury.io/js/%40easypost%2Fapi.svg)](https://badge.fury.io/js/%40easypost%2Fapi)
 
 EasyPost, the simple shipping solution. You can sign up for an account at <https://easypost.com>.

audit-ci.jsonc

@@ -3,5 +3,10 @@
   // Only fail the audit if there are critical vulnerabilities.
   "critical": true,
   // Can't update ESLint yet because we must support Node 16
-  "allowlist": ["GHSA-p5wg-g6qr-c7cg", "GHSA-2g4f-4pwh-qvx6", "GHSA-3ppc-4f35-3m26"],
+  "allowlist": [
+    "GHSA-p5wg-g6qr-c7cg",
+    "GHSA-2g4f-4pwh-qvx6",
+    "GHSA-3ppc-4f35-3m26",
+    "GHSA-mw96-cpmx-2vgc",
+  ],
 }