This repository has been archived by the owner on Oct 4, 2024. It is now read-only.
Merge pull request #440 from tjni/update-pyyaml #157
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Code CI | |
| on: | |
| push: | |
| pull_request: | |
| jobs: | |
| lint: | |
| # pull requests are a duplicate of a branch push if within the same repo. | |
| if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.repository | |
| runs-on: "ubuntu-latest" | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v2 | |
| - name: lint | |
| run: | | |
| pip install --upgrade pip | |
| pip install --user .[dev] | |
| tox -e pre-commit,mypy | |
| wheel: | |
| if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.repository | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: ["ubuntu-latest"] | |
| python: ["3.8"] | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Create Sdist and Wheel | |
| # Set SOURCE_DATE_EPOCH from git commit for reproducible build | |
| # https://reproducible-builds.org/ | |
| run: | | |
| SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct) pipx run build --sdist --wheel | |
| - name: Upload Wheel and Sdist as artifacts | |
| uses: actions/upload-artifact@v2 | |
| with: | |
| name: dist | |
| path: dist | |
| - name: Install minimum python version | |
| uses: actions/setup-python@v2 | |
| with: | |
| python-version: ${{ matrix.python }} | |
| - name: Install wheel in a venv and check cli works | |
| # ${GITHUB_REPOSITORY##*/} is the repo name without org | |
| # Replace this with the cli command if different to the repo name | |
| run: pipx run --python $(which python${{ matrix.python }}) --spec dist/*.whl ${GITHUB_REPOSITORY##*/} --version | |
| test: | |
| if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.repository | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: ["ubuntu-latest", "windows-latest", "macos-latest"] | |
| # keep matrix tight for now to avoid HTTP 429 errors | |
| # TODO: restore macos and 3.9 and 3.10 | |
| python: ["3.8", "3.9"] | |
| lock: [false] | |
| include: | |
| # Add an extra Python3.10 runner to use the lockfile | |
| - os: "ubuntu-latest" | |
| python: "3.10" | |
| lock: true | |
| runs-on: ${{ matrix.os }} | |
| env: | |
| # https://github.com/pytest-dev/pytest/issues/2042 | |
| PY_IGNORE_IMPORTMISMATCH: "1" | |
| # enable QT tests with no X Display | |
| QT_QPA_PLATFORM: "offscreen" | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 | |
| - name: setup python ${{ matrix.python }} | |
| uses: actions/setup-python@v2 | |
| with: | |
| python-version: ${{ matrix.python }} | |
| - name: install with locked dependencies | |
| if: matrix.lock | |
| run: | | |
| touch requirements.txt requirements_dev.txt | |
| pip install -r requirements.txt -e . | |
| pip freeze --exclude-editable > requirements.txt | |
| pip install -r requirements_dev.txt -e .[dev] | |
| pip freeze --exclude-editable > requirements_dev.txt | |
| - name: install with latest dependencies | |
| if: ${{ ! matrix.lock }} | |
| run: pip install -e .[dev] | |
| - name: run tests | |
| run: pytest tests | |
| - name: create requirements_dev.txt | |
| run: | | |
| pip freeze --exclude-editable > requirements_dev.txt | |
| - name: Upload coverage to Codecov | |
| uses: codecov/codecov-action@v2 | |
| with: | |
| name: ${{ matrix.python }}/${{ matrix.os }}/${{ matrix.lock }} | |
| files: cov.xml | |
| - name: Upload lockfiles | |
| if: matrix.lock | |
| uses: actions/upload-artifact@v2 | |
| with: | |
| name: lockfiles | |
| path: | | |
| requirements.txt | |
| requirements_dev.txt | |
| release: | |
| needs: [lint, wheel, test] | |
| runs-on: ubuntu-latest | |
| # upload to PyPI and make a release on every tag | |
| if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags') | |
| steps: | |
| - uses: actions/download-artifact@v2 | |
| with: | |
| path: artifacts | |
| - name: Github Release | |
| # We pin to the SHA, not the tag, for security reasons. | |
| # https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions | |
| uses: softprops/action-gh-release@1e07f4398721186383de40550babbdf2b84acfc5 # v0.1.14 | |
| with: | |
| files: | | |
| artifacts/dist/* | |
| artifacts/lockfiles/* | |
| generate_release_notes: true | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Publish to PyPI | |
| env: | |
| TWINE_USERNAME: __token__ | |
| TWINE_PASSWORD: ${{ secrets.pypi_token }} | |
| run: pipx run twine upload artifacts/dist/* | |
| make-container: | |
| needs: [lint, wheel, test] | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v2 | |
| - uses: actions/download-artifact@v2 | |
| with: | |
| name: dist | |
| path: dist | |
| - name: Cache Docker layers | |
| uses: actions/cache@v2 | |
| with: | |
| path: /tmp/.buildx-cache | |
| key: ${{ runner.os }}-buildx-${{ github.sha }} | |
| restore-keys: | | |
| ${{ runner.os }}-buildx- | |
| - name: Login to Docker Hub | |
| if: github.event_name != 'pull_request' | |
| uses: docker/login-action@v1 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Log in to GitHub Docker Registry | |
| if: github.event_name != 'pull_request' | |
| uses: docker/login-action@v1 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Docker meta | |
| id: meta | |
| uses: docker/metadata-action@v4 | |
| with: | |
| images: | | |
| ghcr.io/${{ github.repository }} | |
| # github repo and dockerhub tag must match for this to work | |
| ${{ github.repository }} | |
| tags: | | |
| type=ref,event=branch | |
| type=ref,event=tag | |
| type=raw,value=latest | |
| # required for multi-arch build | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v1 | |
| - name: Set up Docker Buildx | |
| id: buildx | |
| uses: docker/setup-buildx-action@v1 | |
| - name: Build runtime image | |
| uses: docker/build-push-action@v3 | |
| with: | |
| file: .devcontainer/Dockerfile | |
| context: . | |
| platforms: linux/amd64,linux/arm/v7,linux/arm64/v8 | |
| # only push tagged builds | |
| push: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags') }} | |
| build-args: BASE=python:3.10-slim | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| cache-from: type=local,src=/tmp/.buildx-cache | |
| cache-to: type=local,dest=/tmp/.buildx-cache |