ci_tests.yml

name: CI - Tests

on:
  pull_request:
  push:
    branches:
      - 'master'
      - 'push-action/**'  # Allow pushing to protected branches (using CasperWA/push-protected)

jobs:
  basic-tests:
    name: External
    uses: SINTEF/ci-cd/.github/workflows/ci_tests.yml@v2.8.2
    with:
      ## General settings:
      install_extras: "[dev]"

      ## pre-commit
      run_pre-commit: false

      ## pylint & safety
      python_version_pylint_safety: "3.9"

      # pylint-specific settings
      run_pylint: true
      pylint_runs: |
        --rcfile=pyproject.toml tripper
        --rcfile=pyproject.toml --disable=import-outside-toplevel,redefined-outer-name tests

      # safety-specific settings
      run_safety: true
      # 48547: RDFLib vulnerability: https://pyup.io/vulnerabilities/PVE-2022-48547/48547/
      # 44715-44717: NumPy vulnerabilities:
      #  https://pyup.io/vulnerabilities/CVE-2021-41495/44715/
      #  https://pyup.io/vulnerabilities/CVE-2021-41496/44716/
      #  https://pyup.io/vulnerabilities/CVE-2021-34141/44717/
      # 70612: Jinja2 vulnerability. Only used as subdependency for mkdocs++ in tripper.
      #  https://data.safetycli.com/v/70612/97c/
      #  https://data.safetycli.com/v/72715/97c/   # update to mkdocs>=9.5.32
      safety_options: |
        --ignore=48547
        --ignore=44715
        --ignore=44716
        --ignore=44717
        --ignore=70612
        --ignore=72715

      ## Build package
      run_build_package: true
      python_version_package: "3.9"
      build_libs: flit
      build_cmd: flit build

      ## Build documentation
      run_build_docs: true
      python_version_docs: "3.9"
      warnings_as_errors: true
      use_mkdocs: true

      # mkdocs-specific settings
      update_python_api_ref: true
      update_docs_landing_page: true
      package_dirs: tripper

  pytest:
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.7", "3.8", "3.9", "3.10", "3.11", "3.12"]

    steps:
    - name: Checkout tripper
      uses: actions/checkout@v4

    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        python-version: ${{ matrix.python-version }}

    - name: Install dependencies
      run: |
        sudo apt install graphviz
        python -m pip install -U pip
        pip install -U setuptools wheel flit
        pip install -e .[testing]

    - name: List installed packages
      run: pip freeze

    - name: Test with pytest
      run: pytest -vvv --cov-report=xml --doctest-modules

    - name: Upload coverage to Codecov
      if: matrix.python-version == '3.9' && github.repository == 'EMMC-ASBL/tripper'
      uses: codecov/codecov-action@v4
      with:
        token: ${{ secrets.CODECOV_TOKEN }}

    - name: Run doctest on tutorial
      run: python -m doctest docs/tutorial.md

  pytest-no-extra-dependencies: # Test for basic version, without extras installed
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.7", "3.8", "3.9", "3.10", "3.11", "3.12"]

    steps:
    - name: Checkout tripper
      uses: actions/checkout@v4

    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        python-version: ${{ matrix.python-version }}

    - name: Install dependencies
      run: |
        sudo apt install graphviz
        python -m pip install -U pip
        pip install -U setuptools wheel flit
        pip install -e .[testing-core]

    - name: Test with pytest, but without other extra dependencies
      run: pytest -vvv tests/