actions/.github/workflows/ci-tests.yml at master · LizardByte/actions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
---
name: CI Tests
permissions: {}

on:
  pull_request:
  push:
    branches:
      - master
  workflow_dispatch:

concurrency:
  group: "${{ github.workflow }}-${{ github.ref }}"
  cancel-in-progress: true

jobs:
  tests:
    permissions:
      contents: write  # write is required for release_setup
    runs-on: ${{ matrix.runner }}
    env:
      DEFAULT_PYTHON_VERSION: '3.14'
    strategy:
      fail-fast: false
      matrix:
        runner:
          - macos-latest
          - ubuntu-latest
          - windows-latest
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1

      - name: Setup Python
        id: setup-python
        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
        with:
          python-version: ${{ env.DEFAULT_PYTHON_VERSION }}

      - name: Setup uv
        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
        with:
          enable-cache: true

      - name: Setup Node
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # v7.0.0
        with:
          node-version: latest

      - name: Install Python Dependencies
        shell: bash
        run: |
          uv sync \
            --frozen \
            --extra dev \
            --no-build \
            --no-install-local \
            --no-python-downloads \
            --python "${{ steps.setup-python.outputs.python-path }}"

      - name: Install Node Dependencies
        shell: bash
        run: npm ci --ignore-scripts

      - name: Setup Homebrew
        if: runner.os != 'Windows'
        uses: Homebrew/actions/setup-homebrew@main  # NOSONAR(githubactions:S7637) homebrew release cadence is too fast
        with:
          stable: true

      - name: Backup CA
        if: runner.os == 'macOS'
        shell: bash
        run: |
          # `brew test-bot --only-cleanup-before` removes the CA bundle, so make a backup
          uv run --frozen --extra dev --no-build --no-sync python -c \
            'import certifi, shutil; shutil.copyfile(certifi.where(), "cacert.pem")'
          echo "REQUESTS_CA_BUNDLE=cacert.pem" >> "${GITHUB_ENV}"

      - name: Test with pytest
        id: pytest
        env:
          INPUT_GITHUB_TOKEN: ${{ github.actor == 'dependabot[bot]' && secrets.GH_BOT_TOKEN || secrets.GITHUB_TOKEN }}
        shell: bash
        run: |
          echo "::group::Setup Homebrew PATH"
          if [[ "${{ runner.os }}" == "Linux" ]]; then
            # https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2204-Readme.md#homebrew-note
            echo "Adding Homebrew to PATH"
            eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
          fi
          echo "::endgroup::"

          echo "::group::Run Python Tests"
          uv run --frozen --extra dev --no-build --no-sync python -m pytest
          echo "::endgroup::"

      - name: Test with Jest
        id: jest
        if: >-
          always() &&
          (steps.pytest.outcome == 'success' || steps.pytest.outcome == 'failure')
        env:
          FORCE_COLOR: true
        shell: bash
        run: npm test

      - name: Upload coverage
        # any except canceled or skipped
        if: >-
          always() &&
          (
            steps.pytest.outcome == 'success' ||
            steps.pytest.outcome == 'failure' ||
            steps.jest.outcome == 'success' ||
            steps.jest.outcome == 'failure'
          ) &&
          startsWith(github.repository, 'LizardByte/')
        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v7.0.0
        with:
          fail_ci_if_error: true
          files: ./coverage/python-coverage.xml,./coverage/coverage-final.json
          flags: ${{ runner.os }}
          report_type: coverage
          token: ${{ secrets.CODECOV_TOKEN }}
          verbose: true

      - name: Upload test results
        # any except canceled or skipped
        if: >-
          always() &&
          (
            steps.pytest.outcome == 'success' ||
            steps.pytest.outcome == 'failure' ||
            steps.jest.outcome == 'success' ||
            steps.jest.outcome == 'failure'
          ) &&
          startsWith(github.repository, 'LizardByte/')
        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v7.0.0
        with:
          fail_ci_if_error: true
          files: ./junit-python.xml,./junit.xml
          flags: ${{ runner.os }}
          report_type: test_results
          token: ${{ secrets.CODECOV_TOKEN }}
          verbose: true