ci.yaml

name: 🔂 Continuous Integration

env:
  COLUMNS: 120 # Makes the error summary table printed by pytest-pretty much easier to read
  PROJECT_NAME: "strawchemy"
  UV_PYTHON_INSTALL_DIR: ${{ github.workspace }}/.uv-python

on:
  push:
    branches: [ main, ci/*, dependabot/*, renovate/* ]
    tags:
      - "v*.*.*"
  pull_request:
    branches: [ main ]

concurrency:
  group: ${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

jobs:
  pre:
    runs-on: ubuntu-latest
    # Map a step output to a job output. Also skip the redundant branch run for
    # cocogitto version-bump commits; the tag push still runs CI because the jobs
    # below bypass should_skip when github.ref_type == 'tag'.
    outputs:
      should_skip: ${{ steps.skip_check.outputs.should_skip == 'true' || (github.event_name == 'push' && contains(github.event.head_commit.message, '[ci-skip]')) }}
    steps:
      - name: Skip check
        id: skip_check
        uses: step-security/skip-duplicate-actions@4eef6ae57f2ca5ea100e5c1da2ead9138483f53c # v5
        with:
          concurrent_skipping: "never"
          skip_after_successful_duplicate: "true"
          paths_ignore: '["**/**.md", "**/.vscode/**", "**/.idea/**"]'
          paths: '["src/**", "tests/**", "uv.lock", "pyproject.toml", ".github/workflows/ci.yaml", "noxfile.py", "mise.toml"]'

  generate-jobs-tests:
    name: 💻 Generate test matrix
    needs: pre
    if: github.ref_type == 'tag' || needs.pre.outputs.should_skip != 'true'
    runs-on: ubuntu-latest
    outputs:
      sessions: ${{ steps.set-matrix.outputs.sessions }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

      - name: Setup mise
        uses: jdx/mise-action@dba19683ed58901619b14f395a24841710cb4925 # v4
        with:
          cache: true
          log_level: debug
          github_token: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup uv
        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
        with:
          enable-cache: true

      - name: Generate test matrix
        id: set-matrix
        shell: bash
        run: |
          echo sessions=$(mise run ci:test-matrix) | tee --append $GITHUB_OUTPUT

  tests:
    name: 🔬 ${{ matrix.session.job_name }}
    needs: [ pre, generate-jobs-tests ]
    if: github.ref_type == 'tag' || needs.pre.outputs.should_skip != 'true'
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        session: ${{ fromJson(needs.generate-jobs-tests.outputs.sessions) }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

      - name: Set up Docker Buildx
        if: contains(matrix.session.tags, 'docker')
        id: docker-buildx
        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4

      - name: nox cache
        id: cache
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
        with:
          path: |
            ~/.nox
            .nox
            ${{ github.workspace }}/.uv-python
          key:
            ${{ runner.os }}-nox-${{ matrix.session.session }}-${{
            hashFiles('**/uv.lock') }}-${{ hashFiles('**/noxfile.py') }}
          restore-keys: |
            ${{ runner.os }}-nox-${{ matrix.session.session }}

      - name: Setup uv
        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
        with:
          enable-cache: true

      - name: Setup mise
        uses: jdx/mise-action@dba19683ed58901619b14f395a24841710cb4925 # v4
        with:
          cache: true
          log_level: debug
          github_token: ${{ secrets.GITHUB_TOKEN }}

      - name: Run tests
        run: mise run ci:test "${{ matrix.session.session }}"

      - name: Rename coverage and junit files
        run: |
          mv .coverage* .coverage.${{ matrix.session.session }}
          mv junit* junit-${{ matrix.session.session }}.xml

      - name: Upload coverage data
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
        id: upload-coverage-data
        if: ${{ always() }}
        with:
          name: coverage-${{ matrix.session.session }}
          path: .coverage.${{ matrix.session.session }}
          include-hidden-files: true

      - name: Upload test results data
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
        id: upload-test-results-data
        if: ${{ always() }}
        with:
          name: test-results-${{ matrix.session.session }}
          path: junit-${{ matrix.session.session }}.xml

  upload-coverage:
    name: 🆙 Upload Coverage
    needs: [ tests, generate-jobs-tests ]
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

      - name: Download test artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
        with:
          pattern: coverage-*
          merge-multiple: true

      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
        with:
          python-version: "3.14"

      - name: Combine coverage files
        run: |
          python -Im pip install coverage covdefaults
          python -Im coverage combine
          python -Im coverage xml -i

      - name: Upload coverage to Codeocv
        id: upload-coverage
        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7
        with:
          name: ${{env.PROJECT_NAME}}-tests
          report_type: coverage
          token: ${{ secrets.CODECOV_TOKEN }}
          fail_ci_if_error: true
          verbose: true

  upload-test-results:
    name: 📊 Upload test results
    needs: [ tests, generate-jobs-tests ]
    runs-on: ubuntu-latest
    strategy:
      matrix:
        session: ${{ fromJson(needs.generate-jobs-tests.outputs.sessions) }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

      - name: Download test artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
        with:
          pattern: test-results-*

      - name: Upload test results to Codecov
        id: upload-test-results
        if: ${{ !cancelled() }}
        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7
        with:
          name: ${{env.PROJECT_NAME}}-test-results
          report_type: test_results
          token: ${{ secrets.CODECOV_TOKEN }}
          flags: ${{ matrix.session.session }}
          verbose: true

  lint:
    name: ✨ Lint
    needs: pre
    if: github.ref_type == 'tag' || needs.pre.outputs.should_skip != 'true'
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

      - name: Setup mise
        uses: jdx/mise-action@dba19683ed58901619b14f395a24841710cb4925 # v4
        with:
          cache: true
          log_level: debug
          github_token: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup uv
        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
        with:
          enable-cache: true

      - name: Install dependencies
        run: mise run uv:install

      - name: Run linting
        run: mise run lint

  # Ensure the workflow is successful only if all job in matrixes are successful
  result:
    name: ✅ Result
    if: (github.ref_type == 'tag' || needs.pre.outputs.should_skip != 'true') && always()
    runs-on: ubuntu-latest
    needs:
      - pre
      - tests
      - lint
    steps:
      - name: Mark workflow as failed if lint or test did not pass or were cancelled
        if: contains(fromJson('["failure", "cancelled"]'), needs.tests.result) || contains(fromJson('["failure", "cancelled"]'), needs.lint.result)
        run: exit 1
      - name: Invoke release workflow
        if: github.ref_type == 'tag'
        uses: benc-uk/workflow-dispatch@e2e5e9a103e331dad343f381a29e654aea3cf8fc # v1
        with:
          workflow: 🚀 Continuous Deployment