v4 fails to upload: pass CODECOV_TOKEN via env, not the with block
After upgrading codecov/codecov-action to v4, uploads fail (connection error/timeout) if you pass the token through the with: block. Fix: pass CODECOV_TOKEN via env instead. Add env: CODECOV_TOKEN - ${{ secrets.CODECOV_TOKEN }} to the upload step and remove any with: token - line. Passing the token via with: breaks the v4 uploader's commit creation; moving it to env fixed the upload for the reporter.
_Source: gh:codecov/codecov-action#1274 (Codecov)_