docs: land CI-green + hello-page screenshots; trim Jaeger placeholder #56
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| # Action SHAs are pinned, not floating tags. To bump: | |
| # gh api repos/<owner>/<repo>/commits/<tag> --jq .sha | |
| # (use /commits/<tag>, NOT /git/refs/tags/<tag> — annotated tags would | |
| # return the tag-object SHA, which Actions can't resolve.) | |
| # Update the comment on the right with the new tag for traceability. | |
| on: | |
| push: | |
| branches: [develop, main] | |
| pull_request: | |
| branches: [develop, main] | |
| jobs: | |
| lint: | |
| name: Lint & Format | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: "3.14" | |
| - run: uv sync --frozen --extra dev | |
| - run: uv run ruff check . | |
| - run: uv run ruff format --check . | |
| typecheck: | |
| name: Type Check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: "3.14" | |
| - run: uv sync --frozen --extra dev | |
| - run: uv run mypy --strict src/ tests/ | |
| test-unit: | |
| name: Unit tests | |
| runs-on: ubuntu-latest | |
| # Pure in-process tests — completes fast so PR authors get quick feedback. | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: "3.14" | |
| - run: uv sync --frozen --extra dev | |
| - run: uv run pytest tests/ -v -m "not integration" -o "addopts=" | |
| coverage: | |
| name: Coverage | |
| runs-on: ubuntu-latest | |
| # Enforces [tool.coverage.report].fail_under from pyproject.toml (75%). | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: "3.14" | |
| - run: uv sync --frozen --extra dev | |
| - run: uv run pytest tests/ --cov=src --cov-report=term-missing | |
| architecture: | |
| name: Architecture (import-linter) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: "3.14" | |
| - run: uv sync --frozen --extra dev | |
| - run: uv run lint-imports | |
| pre-commit: | |
| name: Pre-commit | |
| runs-on: ubuntu-latest | |
| # Runs every hook against all files — ensures a developer who forgot | |
| # `uv run pre-commit install` can't leak unformatted code or a stray | |
| # secret past the first defence layer. | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: "3.14" | |
| - run: uv sync --frozen --extra dev | |
| - run: uv run pre-commit run --all-files --show-diff-on-failure | |
| frontend-build: | |
| name: Frontend Build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: "24" | |
| cache: npm | |
| cache-dependency-path: frontend/package-lock.json | |
| - run: cd frontend && npm ci && npm run build | |
| frontend-quality: | |
| name: Frontend Quality | |
| runs-on: ubuntu-latest | |
| # Lint + format + tsc + vitest. Mirrors the strict posture the backend | |
| # enjoys (ruff + mypy + pytest); the Frontend Build job above validates | |
| # the bundler output, this one validates source quality. | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: "24" | |
| cache: npm | |
| cache-dependency-path: frontend/package-lock.json | |
| - run: cd frontend && npm ci | |
| - run: cd frontend && npm run lint | |
| - run: cd frontend && npm run format:check | |
| - run: cd frontend && npm run check | |
| - run: cd frontend && npm run test | |
| branch-protection-sync: | |
| name: Branch-protection contexts sync | |
| runs-on: ubuntu-latest | |
| # Guards against the "new CI job silently not required" drift. Fails when | |
| # .github/branch-protection/*.json contexts arrays disagree with the | |
| # actual workflow jobs on disk. | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: "3.14" | |
| - run: uv sync --frozen --extra dev | |
| - run: uv run python .github/scripts/check_required_contexts.py | |
| commit-type-sync: | |
| name: Commit-type sync | |
| runs-on: ubuntu-latest | |
| # Guards against [tool.commitizen].customize.schema_pattern in pyproject | |
| # drifting from the `types` list in .github/workflows/pr-title.yml. | |
| # Adding a type in one but not the other would mean commits pass locally | |
| # while PR titles fail in CI (or vice versa). | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 | |
| with: | |
| python-version: "3.14" | |
| - run: uv sync --frozen --extra dev | |
| - run: uv run python .github/scripts/check_commit_types.py | |
| # Frontend jobs (Frontend Build, Frontend Quality) are added by ticket #21 | |
| # when frontend/package.json lands. |