Bump codecov/codecov-action from 3 to 4 (#224)

* Bump codecov/codecov-action from 3 to 4

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v3...v4)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* Fix coverage report job

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Peter M. Stahl <[email protected]>

.github/workflows/rust-build.yml

@@ -120,16 +120,25 @@ jobs:
         if: ${{ matrix.os == 'macos-latest' }}
         run: wasm-pack test --headless --safari -- --no-default-features
 
-      - name: Create code coverage report
-        if: ${{ matrix.os == 'ubuntu-latest' && github.event_name == 'push' }}
-        # NOTE: actions-rs is unmaintained, using fork with fix for update to node 16
-        #       https://github.com/actions-rs/tarpaulin/pull/22
-        uses: FreeMasen/tarpaulin-action@9f7e03f06fea8f374c85a95c2ecff6a4d5805845
-        with:
-          version: '0.22.0'
-          args: '--ignore-config --ignore-panics --ignore-tests --exclude-files src/main.rs src/wasm.rs'
-          timeout: 900 # increase timeout for long-running property tests
+  coverage-report:
+    name: Coverage Report
+    needs: rust-build
+    if: ${{ github.event_name == 'push' }}
+
+    runs-on: ubuntu-latest
+
+    container:
+      image: xd009642/tarpaulin:develop-nightly
+      options: --security-opt seccomp=unconfined
 
-      - name: Upload code coverage report to Codecov
-        if: ${{ matrix.os == 'ubuntu-latest' && github.event_name == 'push' }}
-        uses: codecov/codecov-action@v3
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Generate coverage report
+        run: cargo +nightly tarpaulin --lib --ignore-config --ignore-panics --ignore-tests --exclude-files src/python.rs src/main.rs src/wasm.rs --verbose --timeout 900 --out xml
+
+      - name: Upload coverage report
+        uses: codecov/codecov-action@v4
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}