Skip to content

[MAINT]: Bump transitive dependencies with known vulnerabilities #518

[MAINT]: Bump transitive dependencies with known vulnerabilities

[MAINT]: Bump transitive dependencies with known vulnerabilities #518

Workflow file for this run

name: CI
on:
push:
branches: [main]
pull_request:
branches: [main]
concurrency:
group: ci-${{ github.ref }}
cancel-in-progress: true
permissions: {}
jobs:
lint:
name: Lint & Type Check
runs-on: ubuntu-latest
timeout-minutes: 10
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: false
- name: Set up Python
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
with:
python-version: "3.12"
- name: Set up uv
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
with:
enable-cache: true
- name: Install dependencies
run: uv sync --all-extras --frozen
- name: Ruff check
run: uv run ruff check .
- name: Ruff format check
run: uv run ruff format --check .
- name: RAMPART conventions (flake8-rampart)
run: uv run flake8
- name: ty
run: uv run ty check
- name: Trace schema drift
run: uv run python scripts/generate_trace_schema.py --check
- name: Trace compatibility decision
env:
TRACE_SCHEMA_BASE: ${{ github.event.pull_request.base.sha }}
run: uv run python scripts/check_trace_compatibility.py --base-ref "$TRACE_SCHEMA_BASE"
test:
name: Test (Python ${{ matrix.python-version }})
needs: lint
runs-on: ubuntu-latest
timeout-minutes: 10
permissions:
contents: read
strategy:
fail-fast: false
matrix:
python-version: ["3.11", "3.12", "3.13", "3.14"]
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
with:
python-version: ${{ matrix.python-version }}
- name: Set up uv
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
with:
enable-cache: true
cache-suffix: py${{ matrix.python-version }}
- name: Install dependencies
run: uv sync --all-extras --frozen
- name: Run tests
run: uv run pytest tests/unit