Remove Coveralls tooling and add inline coverage report

[kasparsd]

What?

• Remove php-coveralls packages since we're no longer pushing coverage to https://coveralls.io/github/WordPress/two-factor (it was last active when Travis was still used). Note that WP core has switched to Codecov https://app.codecov.io/github/wordpress/wordpress-develop

• Enable phpunit coverage during local and CI runs.

Why?

How?

Testing Instructions

Screenshots or screencast

Changelog Entry

Added - New feature.
Changed - Existing functionality.
Deprecated - Soon-to-be removed feature.
Removed - Feature.
Fixed - Bug fix.
Security - Vulnerability.

[kasparsd]

@dd32 I noticed that WP core has switched to Codecov for coverage reporting. Could we have this enabled for this repository as well?

[kasparsd]

This package doesn't support PHP 8.1 or later until php-coveralls/php-coveralls#359 is merged.

[kasparsd]

This now prints a nice summary:

Code Coverage Report:       
  2025-09-05 08:44:35       
                            
 Summary:                   
  Classes:  8.33% (1/12)    
  Methods: 46.29% (81/175)  
  Lines:   58.21% (801/1376)

@Two.Factor::Two_Factor_Totp
  Methods:  76.19% (16/21)   Lines:  91.41% (117/128)
@Two_Factor::Two_Factor_Backup_Codes
  Methods:  76.92% (10/13)   Lines:  96.34% ( 79/ 82)
@Two_Factor::Two_Factor_Core
  Methods:  45.45% (30/66)   Lines:  59.79% (394/659)
@Two_Factor::Two_Factor_Dummy
  Methods: 100.00% ( 5/ 5)   Lines: 100.00% (  9/  9)
@Two_Factor::Two_Factor_Email
  Methods:  57.89% (11/19)   Lines:  64.38% ( 47/ 73)
@Two_Factor::Two_Factor_FIDO_U2F
  Methods:   6.67% ( 1/15)   Lines:  40.68% ( 48/118)
@Two_Factor::Two_Factor_Provider
  Methods:  54.55% ( 6/11)   Lines:  73.33% ( 22/ 30)
\u2flib_server::u2flib_server\U2F
  Methods:  18.18% ( 2/11)   Lines:  62.04% ( 85/137)

[kasparsd]

Converting to the new format supported by phpunit v9 and later.

[dd32]

@dd32 I noticed that WP core has switched to Codecov for coverage reporting. Could we have this enabled for this repository as well?

@kasparsd Sure, I've set it up with a repo secret per https://app.codecov.io/github/WordPress/two-factor here's the instructions it provided:

Install requirements in your terminal:
npm install --save-dev jest

In a GitHub Action, run tests and generate a coverage report:
npx jest --coverage

After tests run, this will upload your coverage report to Codecov:

- name: Upload coverage reports to Codecov
    uses: codecov/codecov-action@v5
    with:
      token: ${{ secrets.CODECOV_TOKEN }}
      slug: WordPress/two-factor