tests.yml

name: tests

on:
  push:
    branches:
  pull_request:
    branches:

jobs:
  linting:
    name: Linting
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.5.2

      - name: Set up Python 3.8
        uses: actions/setup-python@v4.6.1
        with:
          python-version: 3.8

      - name: Install system deps
        shell: bash
        run: |
          pip install poetry
          poetry config virtualenvs.in-project true
          poetry install --no-root --only dev --only linters --sync

      - name: Linting
        shell: bash
        run: poetry run pre-commit run --all-files

  tests:
    needs: linting
    name: ${{ matrix.os }} / ${{ matrix.python-version }}
    runs-on: ${{ matrix.os }}-latest
    strategy:
      matrix:
        os: [Ubuntu, MacOS, Windows]
        python-version: ['3.8', '3.9', '3.10', '3.11']
      fail-fast: true
    steps:
      - uses: actions/checkout@v3.5.2

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v4.6.1
        with:
          python-version: ${{ matrix.python-version }}

      - name: Install system deps
        shell: bash
        run: |
          pip install nox-poetry
          pip install poetry
          poetry config virtualenvs.in-project true

      - name: Run mypy with nox
        shell: bash
        run: nox --force-color -s mypy-${{ matrix.python-version }}

      - name: Run tests with nox
        shell: bash
        run: nox --force-color -s tests-${{ matrix.python-version }}

      - name: Run securtity check
        if: matrix.python-version == '3.11' && matrix.os == 'Ubuntu'
        shell: bash
        run: nox --force-color -s security

      - name: Upload coverage data
        uses: actions/upload-artifact@v2.2.4
        with:
          name: coverage-data
          path: ".coverage.*"

  coverage:
    needs: tests
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.5.2
      
      - name: Set up Python 3.8
        uses: actions/setup-python@v4.6.1
        with:
          python-version: 3.8

      - name: Install system deps
        shell: bash
        run: |
          pip install nox-poetry
          pip install poetry
          poetry config virtualenvs.in-project true

      - name: Download coverage data
        uses: actions/download-artifact@v2.0.10
        with:
          name: coverage-data

      - name: Create coverage report
        shell: bash
        run: |
          nox --force-color --session=coverage -- --fmt xml

      - name: Upload coverage report
        uses: codecov/codecov-action@v3.1.4
        with:
          token: ${{ secrets.CODECOV_TOKEN }}