ci.yml

name: ci

on:
  push:
  pull_request:

jobs:
  test:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.9", "3.10", "3.11", "3.12"]

    steps:
      - uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}

      - name: Upgrade pip
        run: python -m pip install --upgrade pip

      - name: Install dependencies
        run: python -m pip install -e ".[dev,docs]"

      - name: Format (black)
        run: python -m black --check .

      - name: Imports (isort)
        run: python -m isort --check-only .

      - name: Lint (flake8)
        run: python -m flake8 .

      - name: Type check (mypy)
        run: python -m mypy hovercode/ --strict

      - name: Security (bandit)
        run: python -m bandit -r hovercode -q

      - name: Security (pip-audit)
        run: python -m pip_audit -r requirements.txt

      - name: Tests (pytest)
        run: python -m pytest -q --cov=hovercode --cov-report=term-missing

      - name: Build dist
        run: python -m build

      - name: Twine check
        run: python -m twine check dist/*

      - name: Docs build
        run: mkdocs build --strict