test mypy, unit test coverage

Author: davidteather

.github/workflows/package-test.yml

@@ -9,14 +9,16 @@ on:
       - nightly
       - "releases/*"
 
+permissions:
+  contents: read
+
 jobs:
   Unit-Tests:
     timeout-minutes: 10
-    runs-on: ${{ matrix.os }}
+    runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-latest, windows-latest, ubuntu-latest]
         python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
     steps:
       - uses: actions/checkout@v4
@@ -35,5 +37,19 @@ jobs:
       - name: Install dependencies
         run: poetry install --no-interaction
 
-      - name: Run Tests
-        run: poetry run pytest tests
+      - name: Type check (mypy)
+        run: poetry run mypy python_obfuscator
+
+      - name: Run unit tests with coverage
+        run: |
+          poetry run coverage run -m pytest
+          poetry run coverage report
+          poetry run coverage xml
+
+      - name: Upload coverage reports to Codecov
+        if: matrix.python-version == '3.12'
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: davidteather/python-obfuscator
+          files: ./coverage.xml

.gitignore

@@ -6,4 +6,7 @@ python_obfuscator.egg-info
 .pytest_cache
 .mypy_cache
 .ruff_cache
-obfuscated/
+obfuscated/
+.coverage
+coverage.xml
+htmlcov/

.pre-commit-config.yaml

@@ -24,6 +24,14 @@ repos:
 
   - repo: local
     hooks:
+      - id: mypy
+        name: mypy
+        entry: poetry run mypy python_obfuscator
+        language: system
+        pass_filenames: false
+        always_run: true
+        stages: [commit]
+
       - id: pytest-unit
         name: Run unit tests
         entry: poetry run pytest tests/ -v
@@ -32,6 +40,14 @@ repos:
         always_run: true
         stages: [commit]
 
+      - id: pytest-coverage-report
+        name: pytest coverage report (manual)
+        entry: poetry run pytest tests --cov=python_obfuscator --cov-report=term-missing --cov-report=html
+        language: system
+        pass_filenames: false
+        always_run: true
+        stages: [manual]
+
 default_language_version:
   python: python3
 

poetry.lock

@@ -16,6 +16,8 @@ black = "^25.1.0"
 isort = "^6.0.0"
 pytest = "^8.3.4"
 coverage = "^7.6.12"
+pytest-cov = "^7.1.0"
+types-regex = "^2026.3.32.20260329"
 
 [project]
 name = "python_obfuscator"
@@ -35,7 +37,15 @@ classifiers = [
 ]
 
 [project.optional-dependencies]
-dev = ["pytest", "black", "mypy", "coverage", "isort"]
+dev = [
+    "pytest",
+    "pytest-cov",
+    "black",
+    "mypy",
+    "types-regex",
+    "coverage",
+    "isort",
+]
 
 [project.scripts]
 pyobfuscate = "python_obfuscator.cli:cli"
@@ -47,7 +57,34 @@ line_length = 88
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 
+[tool.mypy]
+python_version = "3.10"
+packages = ["python_obfuscator"]
+explicit_package_bases = true
+warn_unused_ignores = true
+warn_return_any = true
+show_error_codes = true
+strict = false
+disallow_untyped_defs = false
+# TODO: Enable when more of the codebase is annotated:
+# check_untyped_defs = true
+ignore_missing_imports = false
+
+[tool.pyright]
+pythonVersion = "3.10"
+include = ["python_obfuscator"]
+exclude = ["tests", "build", "dist", ".venv"]
+typeCheckingMode = "basic"
+reportMissingImports = true
+reportMissingTypeStubs = false
+
 [tool.coverage.run]
 branch = true
 source = ["python_obfuscator"]
 omit = ["tests/*"]
+
+[tool.coverage.report]
+show_missing = true
+skip_empty = true
+precision = 1
+fail_under = 95