ci-tests.yml

---
name: CI Tests
permissions: {}

on:
  pull_request:
  push:
    branches:
      - master
  workflow_dispatch:

concurrency:
  group: "${{ github.workflow }}-${{ github.ref }}"
  cancel-in-progress: true

jobs:
  powershell:
    name: PowerShell
    permissions:
      contents: read
    runs-on: windows-latest
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1

      - name: Run Pester tests
        id: pester
        shell: powershell
        run: |
          New-Item -ItemType Directory -Path ./build/tests -Force | Out-Null

          Import-Module Pester -RequiredVersion 5.9.0 -Force
          $config = New-PesterConfiguration
          $config.Run.Path = "./tests/powershell"
          $config.Run.Exit = $true
          $config.Output.Verbosity = "Detailed"
          $config.TestResult.Enabled = $true
          $config.TestResult.OutputFormat = "JUnitXml"
          $config.TestResult.OutputPath = "./build/tests/test_results.xml"
          $config.CodeCoverage.Enabled = $true
          $config.CodeCoverage.Path = "./actions/screenshot/screenshot.ps1"
          $config.CodeCoverage.OutputFormat = "Cobertura"
          $config.CodeCoverage.OutputPath = "./build/coverage.xml"

          Invoke-Pester -Configuration $config

      - name: Upload PowerShell coverage
        if: >-
          always() &&
          (steps.pester.outcome == 'success' || steps.pester.outcome == 'failure') &&
          startsWith(github.repository, 'LizardByte/')
        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5  # v7.1.1
        with:
          disable_search: true
          fail_ci_if_error: true
          files: ./build/coverage.xml
          flags: PowerShell
          report_type: coverage
          token: ${{ secrets.CODECOV_TOKEN }}
          verbose: true

      - name: Upload PowerShell test results
        if: >-
          always() &&
          (steps.pester.outcome == 'success' || steps.pester.outcome == 'failure') &&
          startsWith(github.repository, 'LizardByte/')
        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5  # v7.1.1
        with:
          disable_search: true
          fail_ci_if_error: true
          files: ./build/tests/test_results.xml
          flags: PowerShell
          report_type: test_results
          token: ${{ secrets.CODECOV_TOKEN }}
          verbose: true

  tests:
    permissions:
      contents: write  # write is required for release_setup
    runs-on: ${{ matrix.runner }}
    env:
      DEFAULT_PYTHON_VERSION: '3.14'
    strategy:
      fail-fast: false
      matrix:
        runner:
          - macos-latest
          - ubuntu-latest
          - windows-latest
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1

      - name: Setup Python
        id: setup-python
        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
        with:
          python-version: ${{ env.DEFAULT_PYTHON_VERSION }}

      - name: Setup uv
        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2  # v10.3.3
        with:
          enable-cache: true

      - name: Setup Node
        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1  # v7.1.0
        with:
          node-version: latest

      - name: Install Python Dependencies
        shell: bash
        run: |
          uv sync \
            --frozen \
            --extra dev \
            --no-build \
            --no-install-local \
            --no-python-downloads \
            --python "${{ steps.setup-python.outputs.python-path }}"

      - name: Install Node Dependencies
        shell: bash
        run: npm ci --ignore-scripts

      - name: Setup Homebrew
        if: runner.os != 'Windows'
        uses: Homebrew/actions/setup-homebrew@main  # NOSONAR(githubactions:S7637) homebrew release cadence is too fast
        with:
          stable: true

      - name: Backup CA
        if: runner.os == 'macOS'
        shell: bash
        run: |
          # `brew test-bot --only-cleanup-before` removes the CA bundle, so make a backup
          uv run --frozen --extra dev --no-build --no-sync python -c \
            'import certifi, shutil; shutil.copyfile(certifi.where(), "cacert.pem")'
          echo "REQUESTS_CA_BUNDLE=cacert.pem" >> "${GITHUB_ENV}"

      - name: Test with pytest
        id: pytest
        env:
          INPUT_GITHUB_TOKEN: ${{ github.actor == 'dependabot[bot]' && secrets.GH_BOT_TOKEN || secrets.GITHUB_TOKEN }}
        shell: bash
        run: |
          echo "::group::Setup Homebrew PATH"
          if [[ "${{ runner.os }}" == "Linux" ]]; then
            # https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2204-Readme.md#homebrew-note
            echo "Adding Homebrew to PATH"
            eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
          fi
          echo "::endgroup::"

          echo "::group::Run Python Tests"
          uv run --frozen --extra dev --no-build --no-sync python -m pytest
          echo "::endgroup::"

      - name: Test with Jest
        id: jest
        if: >-
          always() &&
          (steps.pytest.outcome == 'success' || steps.pytest.outcome == 'failure')
        env:
          FORCE_COLOR: true
        shell: bash
        run: npm test

      - name: Upload coverage
        # any except canceled or skipped
        if: >-
          always() &&
          (
            steps.pytest.outcome == 'success' ||
            steps.pytest.outcome == 'failure' ||
            steps.jest.outcome == 'success' ||
            steps.jest.outcome == 'failure'
          ) &&
          startsWith(github.repository, 'LizardByte/')
        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5  # v7.1.1
        with:
          fail_ci_if_error: true
          files: ./coverage/python-coverage.xml,./coverage/coverage-final.json
          flags: ${{ runner.os }}
          report_type: coverage
          token: ${{ secrets.CODECOV_TOKEN }}
          verbose: true

      - name: Upload test results
        # any except canceled or skipped
        if: >-
          always() &&
          (
            steps.pytest.outcome == 'success' ||
            steps.pytest.outcome == 'failure' ||
            steps.jest.outcome == 'success' ||
            steps.jest.outcome == 'failure'
          ) &&
          startsWith(github.repository, 'LizardByte/')
        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5  # v7.1.1
        with:
          fail_ci_if_error: true
          files: ./junit-python.xml,./junit.xml
          flags: ${{ runner.os }}
          report_type: test_results
          token: ${{ secrets.CODECOV_TOKEN }}
          verbose: true