build(deps): bump github/codeql-action from 4.37.3 to 4.37.6 #1695
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Python CI | |
| on: | |
| pull_request: | |
| branches: | |
| - '**' | |
| push: | |
| branches: | |
| - main | |
| concurrency: | |
| group: python-ci-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| run-ci: | |
| runs-on: ${{ matrix.os }} | |
| defaults: | |
| run: | |
| shell: bash | |
| strategy: | |
| matrix: | |
| # Pull requests use the three Linux versions plus one representative | |
| # macOS lane. Exact main retains the complete two-OS matrix. | |
| os: ${{ fromJSON(github.event_name == 'pull_request' && '["ubuntu-latest"]' || '["ubuntu-latest", "macos-latest"]') }} | |
| python-version: ['3.10', '3.11', '3.12'] | |
| include: | |
| # On pull requests, add the one representative macOS lane. On main | |
| # this matches an existing full-matrix entry rather than adding one. | |
| - os: macos-latest | |
| python-version: '3.12' | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v7 | |
| - name: Set up Python ${{ matrix.python-version }} | |
| uses: actions/setup-python@v7 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| cache: pip | |
| cache-dependency-path: pyproject.toml | |
| - name: Install dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| # Sibling packages are installed explicitly so the | |
| # cross-package seam tests (tests/test_import_integrity.py and | |
| # the cmd_serve contract in tests/test_cli_smoke.py) run | |
| # instead of skipping. Issue #999 shipped because the | |
| # openadapt-ml seam was never tested in CI; the lazy | |
| # __getattr__ in openadapt/__init__.py imports from all of | |
| # these. | |
| pip install -e ".[dev]" openadapt-ml openadapt-capture \ | |
| openadapt-evals openadapt-viewer openadapt-grounding \ | |
| openadapt-retrieval | |
| - name: Lint with ruff | |
| run: | | |
| ruff check openadapt/ | |
| ruff format --check openadapt/ | |
| - name: Verify package imports | |
| run: | | |
| python -c "from openadapt.cli import main; print('CLI import OK')" | |
| python -c "from openadapt.version import __version__; print(f'Version: {__version__}')" | |
| - name: Run tests | |
| run: pytest tests/ -v | |
| - name: Build release artifacts and reject workstation state | |
| run: | | |
| python -m build | |
| python scripts/verify_release_artifacts.py | |
| tar -tzf dist/*.tar.gz > /tmp/openadapt-sdist-files.txt | |
| ! grep -E '/(\.env|\.cache/|[^/]+\.db$|output\.png$|\.claude/|\.worktrees/)' /tmp/openadapt-sdist-files.txt | |
| unzip -l dist/*.whl > /tmp/openadapt-wheel-files.txt | |
| ! grep -E '(\.env|\.cache/|[^/]+\.db$|output\.png$|\.claude/|\.worktrees/)' /tmp/openadapt-wheel-files.txt |