Fix codecov

[acroca]

Codecov has been failing silently for a while now, that's why all PRs get the red check, see: https://github.com/dapr/python-sdk/actions/runs/28903767566/job/85746334110

error - 2026-07-07 22:44:33,769 -- Upload queued for processing failed: {"message":"Token required because branch is protected"}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.12%. Comparing base (bffb749) to head (9005ef2).
⚠️ Report is 185 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1135      +/-   ##
==========================================
- Coverage   86.63%   82.12%   -4.51%     
==========================================
  Files          84      117      +33     
  Lines        4473     9537    +5064     
==========================================
+ Hits         3875     7832    +3957     
- Misses        598     1705    +1107     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

This PR aims to make Codecov reporting reliable again for the Dapr Python SDK by (1) configuring coverage collection so unimported files don’t artificially inflate totals and (2) fixing Codecov authentication on protected branches using GitHub OIDC.

Changes:

• Add coverage.py configuration (source, omit) in pyproject.toml to scope measured files to the SDK packages and exclude generated proto stubs.
• Grant id-token: write and enable Codecov OIDC uploads in the main CI workflow, failing CI on push if the upload fails to avoid a stale base report.
• Enable Codecov OIDC uploads in the tag/release workflow without blocking releases on Codecov outages.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
pyproject.toml	Adds coverage.py runtime configuration to control source/omit behavior for CI coverage reporting.
.github/workflows/build.yaml	Enables Codecov OIDC authentication and makes main-branch coverage upload failures visible.
.github/workflows/build-tag.yaml	Enables Codecov OIDC authentication for tag builds without making releases depend on Codecov availability.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sicoyle]

ty!!