Skip to content

ci: dependabot, release-please, coverage, pyright, uv and community f… #57

ci: dependabot, release-please, coverage, pyright, uv and community f…

ci: dependabot, release-please, coverage, pyright, uv and community f… #57

Workflow file for this run

name: Static analysis
on:
push:
branches:
- main
- devel
pull_request:
branches:
- main
- devel
jobs:
ruff:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: astral-sh/setup-uv@v6
with:
python-version: "3.12"
- name: Lint
run: uvx ruff check .
- name: Check formatting
run: uvx ruff format --check .
pyright:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: astral-sh/setup-uv@v6
with:
python-version: "3.12"
enable-cache: true
- name: Install project
run: uv sync --extra dev
- name: Type check
run: uv run pyright src/
readme:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up Quarto
uses: quarto-dev/quarto-actions/setup@v2
- name: Check that README.md is rendered from README.qmd
run: make readme-check
audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: astral-sh/setup-uv@v6
with:
python-version: "3.12"
- name: Audit the locked dependencies
run: |
uv export --all-extras --no-emit-project --format requirements-txt > requirements-audit.txt
uvx pip-audit --strict --no-deps --requirement requirements-audit.txt