ci: enforce coverage quality gates

Signed-off-by: Pouyanpi <13303554+Pouyanpi@users.noreply.github.com>

Author: Pouyanpi

.github/codecov.yml

@@ -2,15 +2,19 @@ coverage:
   status:
     project:
       default:
-        informational: true
+        target: auto
+        threshold: 0.25%
+        informational: false
     patch:
       default:
+        target: 90%
+        threshold: 0%
         informational: true
 
 comment:
   layout: " diff, flags, files"
   behavior: default
-  require_changes: false # if true: only post the comment if coverage changes
+  require_changes: "coverage_drop OR uncovered_patch"
   require_base: false # [true :: must have a base report to post]
   require_head: true # [true :: must have a head report to post]
   hide_project_coverage: false # [true :: only show coverage on the git diff aka patch coverage]

.github/workflows/_test.yml

@@ -77,7 +77,7 @@ jobs:
           # Enable the langchain-community provider drift canary only when
           # testing upgraded dependencies (the scheduled latest-deps job).
           LANGCHAIN_PROVIDER_DRIFT_CHECK: ${{ inputs.upgrade-deps && '1' || '' }}
-        run: make test-coverage
+        run: make test-coverage ARGS="--cov-fail-under=85 --cov-report=term"
 
       - name: Run pytest without coverage
         if: inputs.with-coverage == false