pythinker-cli/.github/workflows/ci-pythinker-host.yml at main · PyModel/pythinker-cli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
name: CI (pythinker-host)

on:
  pull_request:
    paths:
      - ".github/workflows/ci-pythinker-host.yml"
      - "packages/pythinker-host/**"
      - "pyproject.toml"
      - "uv.lock"
  push:
    branches:
      - main
    paths:
      - ".github/workflows/ci-pythinker-host.yml"
      - "packages/pythinker-host/**"
      - "pyproject.toml"
      - "uv.lock"


permissions:
  contents: read

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"

jobs:
  test:
    name: ${{ matrix.target }} python-${{ matrix.python-version }}${{ matrix.experimental && ' (experimental)' || '' }}
    runs-on: ${{ matrix.runner }}
    continue-on-error: ${{ matrix.experimental == true }}
    strategy:
      fail-fast: false
      matrix:
        runner: [ubuntu-22.04, macos-15-intel, macos-14, windows-2022]
        python-version: ["3.12", "3.13", "3.14"]
        include:
          - runner: ubuntu-22.04
            target: x86_64-unknown-linux-gnu
          - runner: macos-15-intel
            target: x86_64-apple-darwin
          - runner: macos-14
            target: aarch64-apple-darwin
          - runner: windows-2022
            target: x86_64-pc-windows-msvc
          # Forward-compat probe for the GitHub Actions windows-latest -> VS 2026
          # migration (rolling out 2026-06-08 to 2026-06-15). One Python only;
          # experimental so a VS 2026 / MSVC v144 regression does not block PRs.
          - runner: windows-2025-vs2026
            target: x86_64-pc-windows-msvc
            python-version: "3.13"
            experimental: true
    defaults:
      run:
        shell: bash
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # pinned from v6.0.2

      - name: Install GNU Make (Windows)
        if: runner.os == 'Windows'
        shell: powershell
        run: choco install make -y

      - name: Set up Python ${{ matrix.python-version }}
        id: setup-python
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # pinned from v6.2.0
        with:
          python-version: ${{ matrix.python-version }}
          allow-prereleases: true

      - name: Set up uv
        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # pinned from v8.1.0
        with:
          version: "0.8.5"
          enable-cache: true
          cache-dependency-glob: uv.lock

      - name: Install dependencies
        env:
          UV_PYTHON: ${{ steps.setup-python.outputs.python-path }}
        run: uv sync --frozen --all-extras --project packages/pythinker-host

      - name: Configure local SSH server
        if: matrix.runner == 'ubuntu-22.04'
        run: |
          set -euxo pipefail
          sudo apt-get update
          sudo apt-get install -y openssh-server
          sudo mkdir -p /run/sshd
          sudo sed -i 's/^#\?PasswordAuthentication .*/PasswordAuthentication no/' /etc/ssh/sshd_config
          sudo sed -i 's/^#\?PubkeyAuthentication .*/PubkeyAuthentication yes/' /etc/ssh/sshd_config
          sudo sed -i 's@^#\?AuthorizedKeysFile .*@AuthorizedKeysFile .ssh/authorized_keys@' /etc/ssh/sshd_config
          sudo service ssh restart || sudo service ssh start
          mkdir -p "$HOME/.ssh"
          chmod 700 "$HOME/.ssh"
          ssh-keygen -q -t ed25519 -f "$HOME/.ssh/id_ci" -N ""
          cat "$HOME/.ssh/id_ci.pub" >> "$HOME/.ssh/authorized_keys"
          chmod 600 "$HOME/.ssh/authorized_keys"
          ssh-keyscan -H 127.0.0.1 >> "$HOME/.ssh/known_hosts"
          ssh-keyscan -H localhost >> "$HOME/.ssh/known_hosts"
          echo "PYTHINKER_SSH_HOST=127.0.0.1" >> "$GITHUB_ENV"
          echo "PYTHINKER_SSH_PORT=22" >> "$GITHUB_ENV"
          echo "PYTHINKER_SSH_USERNAME=$USER" >> "$GITHUB_ENV"
          echo "PYTHINKER_SSH_KEY_PATHS=$HOME/.ssh/id_ci" >> "$GITHUB_ENV"

      - name: Verify SSH connectivity
        if: matrix.runner == 'ubuntu-22.04'
        run: ssh -i "$HOME/.ssh/id_ci" -o BatchMode=yes -o StrictHostKeyChecking=yes "$USER@127.0.0.1" true

      - name: Run checks
        env:
          UV_PYTHON: ${{ steps.setup-python.outputs.python-path }}
        run: make check-pythinker-host

      - name: Run tests
        env:
          UV_PYTHON: ${{ steps.setup-python.outputs.python-path }}
        run: make cov-pythinker-host

      - name: Upload coverage to Codecov
        if: matrix.runner == 'ubuntu-22.04'
        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # pinned from v5.5.4
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: packages/pythinker-host/coverage.xml
          flags: pythinker-host
          name: pythinker-host-${{ matrix.python-version }}
          fail_ci_if_error: false