Merge branch 'main' into codex/context7-transport-hardening #261
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - '**' | |
| - '!integrated/**' | |
| - '!stl-preview-head/**' | |
| - '!stl-preview-base/**' | |
| - '!generated' | |
| - '!codegen/**' | |
| - 'codegen/stl/**' | |
| pull_request: | |
| branches-ignore: | |
| - 'stl-preview-head/**' | |
| - 'stl-preview-base/**' | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ci-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| lint: | |
| timeout-minutes: 15 | |
| name: Lint & Licensing | |
| runs-on: ubuntu-24.04 | |
| if: github.event_name == 'pull_request' || github.event.head_commit.message != 'codegen metadata' | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 | |
| with: | |
| enable-cache: false | |
| version: "0.11.6" | |
| - name: Install dependencies | |
| run: uv sync --locked --all-extras | |
| - name: Run lints | |
| run: ./scripts/lint | |
| - name: Check licensing | |
| uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0 | |
| build: | |
| if: github.event_name == 'pull_request' || github.event.head_commit.message != 'codegen metadata' | |
| timeout-minutes: 10 | |
| name: Build & Reproducibility | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 | |
| with: | |
| enable-cache: false | |
| version: "0.11.6" | |
| - name: Verify reproducible distributions | |
| run: ./scripts/check-reproducible | |
| - name: Build distributions | |
| run: SOURCE_DATE_EPOCH=946684800 uv build | |
| - name: Check package metadata | |
| run: uvx --from twine==6.2.0 twine check dist/* | |
| test: | |
| timeout-minutes: 20 | |
| name: Tests & Coverage | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 | |
| with: | |
| enable-cache: false | |
| version: "0.11.6" | |
| - name: Bootstrap | |
| run: ./scripts/bootstrap | |
| - name: Run tests | |
| run: ./scripts/test | |
| - name: Enforce coverage | |
| run: ./scripts/coverage | |
| security: | |
| timeout-minutes: 15 | |
| name: Dependency Security | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 | |
| with: | |
| enable-cache: false | |
| version: "0.11.6" | |
| - name: Audit locked dependencies | |
| run: ./scripts/audit |