From 3fce5df5ec9b7f4332e76ae7fd00d9ac9f221275 Mon Sep 17 00:00:00 2001
From: Justintime50 <39606064+Justintime50@users.noreply.github.com>
Date: Thu, 26 Feb 2026 11:02:28 -0700
Subject: [PATCH 1/2] chore: migrate to codecov

---
 .github/workflows/ci.yml | 8 ++++----
 README.md                | 2 +-
 composer.json            | 1 -
 3 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 80aa051f..c49bea66 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,11 +44,11 @@ jobs:
         run: just install
       - name: test with phpunit on ${{ matrix.phpversion }}
         run: EASYPOST_TEST_API_KEY=123 EASYPOST_PROD_API_KEY=123 just coverage
-      - name: Coveralls
+      - name: Coverage
         if: github.ref == 'refs/heads/master'
-        env:
-          COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: ./bin/php-coveralls --coverage_clover=build/logs/clover.xml -v
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
   docs:
     if: github.ref == 'refs/heads/master'
     runs-on: ubuntu-latest
diff --git a/README.md b/README.md
index 96c4fd10..5c9a579e 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 # EasyPost PHP Client Library
 
 [![CI](https://github.com/EasyPost/easypost-php/workflows/CI/badge.svg)](https://github.com/EasyPost/easypost-php/actions?query=workflow%3ACI)
-[![Coverage Status](https://coveralls.io/repos/github/EasyPost/easypost-php/badge.svg?branch=master)](https://coveralls.io/github/EasyPost/easypost-php?branch=master)
+[![codecov](https://codecov.io/gh/EasyPost/easypost-php/graph/badge.svg?token=R7J7l4S24a)](https://codecov.io/gh/EasyPost/easypost-php)
 [![PHP version](https://badge.fury.io/ph/easypost%2Feasypost-php.svg)](https://badge.fury.io/ph/easypost%2Feasypost-php)
 
 EasyPost, the simple shipping solution. You can sign up for an account at <https://easypost.com>.
diff --git a/composer.json b/composer.json
index 5cea95c2..50a8ed8a 100644
--- a/composer.json
+++ b/composer.json
@@ -24,7 +24,6 @@
   },
   "require-dev": {
     "allejo/php-vcr-sanitizer": "^1.1",
-    "php-coveralls/php-coveralls": "^2.7",
     "php-vcr/php-vcr": "^1.8.2",
     "phpunit/phpunit": "^10",
     "squizlabs/php_codesniffer": "^3.11",

From 0c735aa0c93fee05799ebb63b77de07d9b5d51f9 Mon Sep 17 00:00:00 2001
From: Justintime50 <39606064+Justintime50@users.noreply.github.com>
Date: Thu, 26 Feb 2026 11:12:30 -0700
Subject: [PATCH 2/2] fix: lint

---
 lib/EasyPost/Util/Util.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/EasyPost/Util/Util.php b/lib/EasyPost/Util/Util.php
index 8d6bdcdb..90b7016d 100644
--- a/lib/EasyPost/Util/Util.php
+++ b/lib/EasyPost/Util/Util.php
@@ -99,6 +99,7 @@ public static function validateWebhook(mixed $eventBody, mixed $headers, string
         $easypostHmacSignature = $headers['X-Hmac-Signature'] ?? null;
 
         if ($easypostHmacSignature != null) {
+            /** @var string $normalizedSecret */
             $normalizedSecret = Normalizer::normalize($webhookSecret, Normalizer::FORM_KD);
             /** @var string $encodedSecret */
             $encodedSecret = mb_convert_encoding($normalizedSecret, 'UTF-8') ?: '';
@@ -192,7 +193,7 @@ public static function getLowestStatelessRate(array $statelessRates, array $carr
             }
 
             if (!$lowestStatelessRate || floatval($statelessRates[$i]->rate) < floatval($lowestStatelessRate->rate)) {
-                $lowestStatelessRate = clone ($statelessRates[$i]);
+                $lowestStatelessRate = clone($statelessRates[$i]);
             }
         }