python-test.yml

# Copyright © 2026 kogeler
# SPDX-License-Identifier: Apache-2.0

# Universal test gate for every Python project in the repository. A Python
# project is a top-level folder containing requirements-dev.txt (pinned test
# and lint dependencies); runtime dependencies come from requirements.txt
# when present. The workflow runs on pushes to any branch and on pull
# requests, building a job matrix of affected projects via the shared
# python-projects-matrix action.

name: Python Tests

on:
  push:
    branches:
      - '**'
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: python-tests-${{ github.ref }}
  cancel-in-progress: true

jobs:
  prepare:
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.projects.outputs.matrix }}
      has_targets: ${{ steps.projects.outputs.has_targets }}
    steps:
      - name: Check out repository
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Locate affected Python projects
        id: projects
        uses: ./.github/actions/python-projects-matrix
        with:
          mode: source-changes

      - name: Summary
        run: |
          if [ "${{ steps.projects.outputs.has_targets }}" = "true" ]; then
            echo "### 🧪 Python projects to test" >> $GITHUB_STEP_SUMMARY
            echo '${{ steps.projects.outputs.folders }}' | jq -r '.[]' | while read -r dir; do
              echo "- $dir" >> $GITHUB_STEP_SUMMARY
            done
          else
            echo "### ℹ️ No Python projects affected by this change" >> $GITHUB_STEP_SUMMARY
          fi

  test:
    needs: prepare
    if: needs.prepare.outputs.has_targets == 'true'
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        folder: ${{ fromJson(needs.prepare.outputs.matrix).folders }}
    steps:
      - name: Check out repository
        uses: actions/checkout@v7

      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          # Matches the python:3.14-alpine base image used by the containers.
          python-version: '3.14'
          cache: pip
          cache-dependency-path: ${{ matrix.folder }}/requirements*.txt

      - name: Install dependencies
        run: |
          set -euo pipefail
          python -m pip install --upgrade pip
          if [ -f requirements.txt ]; then
            pip install -r requirements.txt
          fi
          pip install -r requirements-dev.txt
        working-directory: ${{ matrix.folder }}

      - name: ruff check
        run: |
          set -euo pipefail
          if command -v ruff >/dev/null 2>&1; then
            ruff check .
          else
            echo "ruff is not in requirements-dev.txt; skipping lint"
          fi
        working-directory: ${{ matrix.folder }}

      - name: pytest
        run: python -m pytest -v
        working-directory: ${{ matrix.folder }}

      - name: shellcheck project scripts
        run: |
          set -euo pipefail
          mapfile -t scripts < <(git ls-files "${{ matrix.folder }}" | grep '\.sh$' || true)
          if [ "${#scripts[@]}" -gt 0 ]; then
            shellcheck "${scripts[@]}"
          else
            echo "No shell scripts in ${{ matrix.folder }}"
          fi