Update codecov setup

.github/codecov.yml

@@ -0,0 +1,27 @@
+# This is the configuration for codecov.yml -- remember to validate it.
+#
+# cat .github/codecov.yml | curl --data-binary @- https://codecov.io/validate
+
+codecov:
+  notify:
+    wait_for_ci: false
+  require_ci_to_pass: false
+
+coverage:
+  status:
+    patch:
+      default:
+        target: 90%
+    project:
+      default: false
+      exif_stripper:
+        target: 90%
+        paths:
+          - "!tests/.*"
+      tests:
+        target: 100%
+        paths:
+          - "tests/.*"
+
+comment:
+  layout: "reach, diff, files"

.github/workflows/ci.yml

@@ -63,4 +63,6 @@ jobs:
         run: pytest
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v4.2.0
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/codecov-validate.yml

@@ -0,0 +1,34 @@
+# This workflow checks that the codecov.yml file is valid, if it is included in the PR.
+#
+# Author: Stefanie Molin
+
+name: Validate codecov config
+
+on:
+  pull_request:
+    paths:
+      - '.github/codecov.yml'
+  schedule:
+    - cron: '21 21 21 * *'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  # check that the codecov.yml configuration is valid
+  codecov:
+    runs-on: ubuntu-latest
+    name: Validate codecov.yml
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Validate with codecov API
+        run: |
+          response=$(cat .github/codecov.yml | curl --data-binary @- https://codecov.io/validate)
+          echo $response
+          if [[ $response = Error* ]]; then
+            exit 1
+          fi