Try to upload codedov reports even if forked branches

Forks won't have access to the token. Rather than allowing tokenless
uploads for everyone, we run it in a different workflow which hopefully
does have the token.

Author: oalders

.github/workflows/codecov.yml

@@ -0,0 +1,32 @@
+---
+name: Upload coverage to Codecov
+
+on:
+  workflow_run:
+    workflows: ["test"]
+    types: [completed]
+
+permissions: {}
+
+jobs:
+  upload:
+    runs-on: ubuntu-24.04
+    if: github.event.workflow_run.conclusion == 'success'
+    permissions: {}
+    steps:
+      - name: Download coverage artifacts
+        uses: actions/download-artifact@v4
+        with:
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ github.token }}
+          path: coverage
+      - name: Upload to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          fail_ci_if_error: true
+          files: >-
+            coverage/playwright-coverage/codecov.json,
+            coverage/test-coverage/codecov.json
+          token: ${{ secrets.CODECOV_TOKEN }}
+          override_commit: ${{ github.event.workflow_run.head_sha }}
+          override_pr: ${{ github.event.workflow_run.pull_requests[0].number }}

.github/workflows/test.yml

@@ -107,20 +107,23 @@ jobs:
           docker stop ${{ steps.start-container.outputs.container_id }}
           docker cp ${{ steps.start-container.outputs.container_id }}:/app/cover_db ./cover_db
       - name: Install Codecovbash
-        if: secrets.CODECOV_TOKEN != ''
         uses: perl-actions/install-with-cpm@v1
         with:
           install: |
             Devel::Cover
             Devel::Cover::Report::Codecovbash
           sudo: true
       - name: Generate Codecov report
-        if: secrets.CODECOV_TOKEN != ''
         run: cover -report codecovbash
+      - name: Upload coverage artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-coverage
+          path: ./cover_db/codecov.json
       - uses: codecov/codecov-action@v5
         if: secrets.CODECOV_TOKEN != ''
         with:
-          fail_ci_if_error: true
+          fail_ci_if_error: false
           file: ./cover_db/codecov.json
           token: ${{ secrets.CODECOV_TOKEN }}
   test:
@@ -143,9 +146,7 @@ jobs:
     steps:
       - name: Enable coverage
         id: coverage
-        if: >
-          matrix.resolver == 'snapshot'
-          && secrets.CODECOV_TOKEN != ''
+        if: matrix.resolver == 'snapshot'
         run: echo "enabled=1" >> "$GITHUB_OUTPUT"
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
@@ -183,9 +184,15 @@ jobs:
       - name: Generate Codecov report
         if: steps.coverage.outputs.enabled
         run: cover -report codecovbash
-      - uses: codecov/codecov-action@v5
+      - name: Upload coverage artifact
         if: steps.coverage.outputs.enabled
+        uses: actions/upload-artifact@v4
+        with:
+          name: test-coverage
+          path: ./cover_db/codecov.json
+      - uses: codecov/codecov-action@v5
+        if: steps.coverage.outputs.enabled && secrets.CODECOV_TOKEN != ''
         with:
-          fail_ci_if_error: true
+          fail_ci_if_error: false
           file: ./cover_db/codecov.json
           token: ${{ secrets.CODECOV_TOKEN }}