build-and-inspect-python-package/.github/workflows/ci.yml at main · hynek/build-and-inspect-python-package · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
---
name: CI

on:
  push:
    branches: [main]
  pull_request:
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions: {}

env:
  FORCE_COLOR: "1" # Make tools pretty.
  SETUPTOOLS_SCM_PRETEND_VERSION: "1.0" # avoid warnings about shallow checkout
  UV_SYSTEM_PYTHON: "true"  # ensure action can deal with this set

jobs:
  check-argon2-cffi-bindings:
    name: Build & verify the argon2-cffi-bindings package.
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          repository: hynek/argon2-cffi-bindings
          submodules: recursive
          path: hynek/argon2-cffi-bindings
          persist-credentials: false

      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          path: action
          persist-credentials: false

      - uses: ./action
        id: baipp
        with:
          path: hynek/argon2-cffi-bindings
          skip-wheel: 'true'

  check-structlog:
    name: Build & verify the structlog package.
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os:
          - ubuntu-22.04
          - ubuntu-24.04

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          repository: hynek/structlog
          path: structlog
          persist-credentials: false

      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          path: action
          persist-credentials: false

      - uses: ./action
        id: baipp
        with:
          path: structlog
          upload-name-suffix: "-structlog-${{ matrix.os }}"

      - run: >  # zizmor: ignore[template-injection] -- structlog is not gonna hack us
          echo "Packages for ${{ steps.baipp.outputs.package_name }} (${{ steps.baipp.outputs.package_version }})
          can be found at ${{ steps.baipp.outputs.dist }}
          and in artifact ${{ steps.baipp.outputs.artifact-name }}"

  check-configure-python:
    name: Build attrs with an older Python version.
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          repository: python-attrs/attrs
          path: attrs
          persist-credentials: false

      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          path: action
          persist-credentials: false

      - uses: ./action
        id: baipp
        with:
          path: attrs
          python-version: "3.13"
          upload-name-suffix: "-attrs"

  check-pytest:
    name: Build & verify the pytest package.
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          repository: pytest-dev/pytest
          path: pytest
          persist-credentials: false

      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          path: action
          persist-credentials: false

      - uses: ./action
        id: baipp
        with:
          path: pytest
          upload-name-suffix: "-pytest"

      - run: echo Packages can be found at ${STEPS_BAIPP_OUTPUTS_DIST} and in artifact ${STEPS_BAIPP_OUTPUTS_ARTIFACT_NAME}
        env:
          STEPS_BAIPP_OUTPUTS_DIST: ${{ steps.baipp.outputs.dist }}
          STEPS_BAIPP_OUTPUTS_ARTIFACT_NAME: ${{ steps.baipp.outputs.artifact-name }}

  required-checks-pass:
    name: Ensure everything required is passing for branch protection
    if: always()

    needs:
      - check-argon2-cffi-bindings
      - check-structlog
      - check-pytest
      - check-configure-python

    runs-on: ubuntu-latest

    steps:
      - name: Decide whether the needed jobs succeeded or failed
        uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
        with:
          jobs: ${{ toJSON(needs) }}