Add coverage reporting and Qlty integration

- Add SimpleCov + simplecov-json for coverage (96.92%)
- Coverage runs on Ruby 3.3 + ActiveModel 8.0, uploads to Qlty
- Add Qlty code quality checks and bundle audit security job
- Add maintainability and coverage badges to README

Author: voltechs

.github/workflows/ci.yml

@@ -6,6 +6,12 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  actions: write
+  contents: read
+  id-token: write
+  packages: write
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -36,5 +42,64 @@ jobs:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true
 
-      - name: Run specs
+      - name: Run tests with coverage
         run: bundle exec rake spec
+        env:
+          COVERAGE: ${{ matrix.ruby == '3.3' && matrix.gemfile == 'gemfiles/Gemfile.activemodel-8.0' && 'true' || '' }}
+
+      - name: Upload coverage artifact
+        if: matrix.ruby == '3.3' && matrix.gemfile == 'gemfiles/Gemfile.activemodel-8.0'
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage-report
+          path: coverage/
+          retention-days: 1
+
+  coverage:
+    runs-on: ubuntu-latest
+    needs: test
+    if: always()
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download coverage artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: coverage-report
+          path: coverage/
+        continue-on-error: true
+
+      - name: Upload coverage to Qlty
+        uses: qltysh/qlty-action/coverage@v1
+        continue-on-error: true
+        env:
+          QLTY_COVERAGE_TOKEN: ${{ secrets.QLTY_COVERAGE_TOKEN }}
+        with:
+          oidc: true
+          files: coverage/coverage.json
+
+      - name: Run Qlty code quality checks
+        run: |
+          curl -sSfL https://qlty.sh | sh
+          echo "$HOME/.qlty/bin" >> $GITHUB_PATH
+          ~/.qlty/bin/qlty check || true
+        continue-on-error: true
+
+  security:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+
+      - name: Run bundle audit
+        run: |
+          gem install bundler-audit
+          bundle audit --update || true
+        continue-on-error: true

him.gemspec

@@ -22,6 +22,8 @@ Gem::Specification.new do |s|
 
   s.add_development_dependency "rake", ">= 13.0"
   s.add_development_dependency "rspec", "~> 3.5"
+  s.add_development_dependency "simplecov"
+  s.add_development_dependency "simplecov-json"
 
   s.add_runtime_dependency "activemodel", ">= 6.1"
   s.add_runtime_dependency "faraday", ">= 2.0"

spec/spec_helper.rb

@@ -1,5 +1,17 @@
 $LOAD_PATH.unshift File.join(File.dirname(__FILE__), "..", "lib")
 
+if ENV["COVERAGE"]
+  require "simplecov"
+  require "simplecov-json"
+  SimpleCov.start do
+    add_filter "spec"
+    SimpleCov.formatters = SimpleCov::Formatter::MultiFormatter.new([
+      SimpleCov::Formatter::HTMLFormatter,
+      SimpleCov::Formatter::JSONFormatter
+    ])
+  end
+end
+
 require "rspec"
 require "him"