{{ message }}
Repository navigation
289 lines (244 loc) · 10.6 KB
/
Copy pathci.yml
File metadata and controls
289 lines (244 loc) · 10.6 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
name: CI
on:
push:
branches: [main]
pull_request:
branches: [main]
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
test:
name: test (Python ${{ matrix.python-version }})
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
python-version: ["3.12", "3.13", "3.14"]
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Install uv
uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
python-version: ${{ matrix.python-version }}
- name: Sync workspace
run: uv sync
- name: Run pytest
run: uv run pytest -q
# Blocking requirement-traceability audit. Collection-only run: the
# TraceabilityPlugin (registered in the root conftest) collects every
# @pytest.mark.req(...) marker, writes the matrix artifact, and — because
# DEXPACE_TRACEABILITY_GATE is set — fails the run if any MUST-level
# requirement in an enabled subsystem is neither covered by a marker nor
# listed N/A in docs/traceability-na-ids.txt (the deviations-ledger bridge).
- name: Run traceability audit (blocking)
env:
DEXPACE_TRACEABILITY_ENABLE: "seams,http,bodies,io,context,pipeline,recovery,redirect,retry,auth,xcut,serde,pagination,sse,observability,config,transport,async,nfr"
DEXPACE_TRACEABILITY_NA: docs/traceability-na-ids.txt
DEXPACE_TRACEABILITY_MATRIX: build/traceability-matrix.json
DEXPACE_TRACEABILITY_GATE: "1"
run: uv run pytest -q --co
- name: Upload traceability matrix
if: always()
uses: actions/upload-artifact@v7
with:
name: traceability-matrix-py${{ matrix.python-version }}
path: build/traceability-matrix.json
if-no-files-found: error
- name: Run mypy
run: uv run mypy --strict
- name: Run ruff check
run: uv run ruff check
- name: Run ruff format --check
run: uv run ruff format --check
- name: Run import-linter
run: uv run lint-imports
packaging:
name: packaging invariants
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Install uv
uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
python-version: "3.12"
- name: Check namespace layout
run: uv run --no-project python tools/check_namespace_packages.py
- name: Check MIT headers
run: uv run --no-project python tools/check_mit_headers.py
- name: Check runtime dependency budget
run: uv run --no-project python tools/check_dependency_audit.py
- name: Build core + stdlib wheels
run: |
uv build --package dexpace-sdk-core --wheel -o dist
uv build --package dexpace-sdk-http-stdlib --wheel -o dist
- name: Smoke-import wheels in a fresh venv
run: |
uv venv /tmp/wheel-smoke
uv pip install --python /tmp/wheel-smoke \
dist/dexpace_sdk_core-*.whl \
dist/dexpace_sdk_http_stdlib-*.whl
/tmp/wheel-smoke/bin/python tools/smoke_wheel_import.py
coverage:
name: coverage gate
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Install uv
uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
python-version: "3.12"
- name: Sync workspace
run: uv sync
# Blocking aggregate line+branch coverage gate. The 80% floor lives in
# [tool.coverage.report].fail_under in pyproject.toml; pytest-cov exits
# non-zero when the total drops below it.
- name: Run coverage gate
run: uv run pytest -q --cov --cov-report=term-missing
typecheck-divergence:
name: typecheck divergence (pyright, non-blocking)
runs-on: ubuntu-latest
# Advisory early-warning lane: pyright cross-checks mypy's verdict so a
# divergence between the two checkers surfaces early. This is NOT a gate —
# `mypy --strict` in the `test` job remains the sole blocking type check.
# `continue-on-error` at both the job and step level keeps a red result
# (e.g. pyright's stricter completeness scoring) from ever failing CI.
# pyright is layered in per-run via `uv run --with`, so it stays out of the
# committed dependency set and uv.lock.
continue-on-error: true
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Install uv
uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
python-version: "3.14"
- name: Sync workspace
run: uv sync
- name: pyright --verifytypes (advisory)
continue-on-error: true
run: uv run --with pyright pyright --verifytypes dexpace.sdk.core --ignoreexternal
- name: pyright typing-conformance corpus (advisory)
continue-on-error: true
run: uv run --with pyright pyright packages/dexpace-sdk-core/tests/typing_conformance.py
version-skew:
name: version skew (Python ${{ matrix.python-version }}, ${{ matrix.resolution }})
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
python-version: ["3.12", "3.13", "3.14"]
resolution: ["highest", "lowest-direct"]
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Install uv
uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
python-version: ${{ matrix.python-version }}
# Resolve the workspace at either edge of its declared dependency window.
# `highest` exercises the newest adapters against head core (the standard
# release runtime). `lowest-direct` pins every *direct* dependency to its
# declared floor: core to the compatible-release lower bound each adapter
# and the TCK pin (dexpace-sdk-core>=0.1,<0.2) and each transport to its
# minimum (httpx>=0.27, aiohttp>=3.9, requests>=2.32, furl>=2.1.3). Running
# both edges across Python 3.12-3.14 turns the forward-compatibility
# promise -- newest adapters and the generated petstore canary run against
# the oldest supported core -- into a passing pipeline, not a prose claim.
- name: Sync workspace (${{ matrix.resolution }} resolution)
run: uv sync --resolution ${{ matrix.resolution }}
# Newest adapters (built from HEAD) plus the TCK conformance battery, run
# against the resolved core. `--no-sync` keeps the environment exactly as
# the resolution step left it rather than re-resolving to the default edge.
- name: Adapters + TCK conformance
run: >
uv run --no-sync pytest -q
packages/dexpace-sdk-http-stdlib/tests
packages/dexpace-sdk-http-httpx/tests
packages/dexpace-sdk-http-aiohttp/tests
packages/dexpace-sdk-http-requests/tests
packages/dexpace-sdk-tck/src/dexpace/sdk/tck
# The petstore canary is the "generated at vN.M runs on vN.x" proof: a
# generated SDK driven end to end over the certified core. Running it at
# both dependency edges proves the generated output keeps working against
# both head core and the oldest supported core.
- name: Petstore canary
run: uv run --no-sync pytest -q examples/petstore/tests
free-threaded:
name: free-threaded CPython (${{ matrix.python-version }})
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
python-version: ["3.13t", "3.14t"]
# Exercises the codebase's explicit-lock claims (no GIL assumption) on a real
# GIL-disabled interpreter, not just under code review. Only the
# lock-sensitive core suites run here, and each spins real threads: the
# single-use body once-guards, the single-flight token cache, the
# ContextStore cap-drain, the emit-once logger latch, and the SSE
# cross-thread close. Core is pure Python (only furl), so the environment
# holds core plus the test runner alone -- no C-extension transports, which
# do not yet ship free-threaded wheels.
env:
# Fail loudly if an imported extension would force the GIL back on rather
# than silently re-enabling it and voiding the exercise.
PYTHON_GIL: "0"
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Install uv
uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
- name: Install free-threaded interpreter
run: uv python install ${{ matrix.python-version }}
- name: Create free-threaded environment
run: uv venv --python ${{ matrix.python-version }} .venv-ft
# `--only-binary hypothesis` uses its universal wheel instead of building
# its sdist, whose build pulls a Rust/PyO3 toolchain with no free-threaded
# support yet. hypothesis is imported by the core test conftest.
- name: Install core + test runner
run: >
uv pip install --python .venv-ft --only-binary hypothesis
./packages/dexpace-sdk-core
pytest pytest-asyncio hypothesis
- name: Verify the interpreter is GIL-disabled
run: .venv-ft/bin/python -c "import sys; assert not sys._is_gil_enabled(), 'GIL is enabled'; print(sys.version)"
- name: Run lock-sensitive suites (GIL disabled)
run: >
.venv-ft/bin/python -m pytest -q
packages/dexpace-sdk-core/tests/http/test_single_use_bodies.py
packages/dexpace-sdk-core/tests/auth/test_token_cache.py
packages/dexpace-sdk-core/tests/context/test_context_store.py
packages/dexpace-sdk-core/tests/instrumentation/test_logger.py
packages/dexpace-sdk-core/tests/sse/test_connection_lifecycle.py
version-source:
name: single version train
runs-on: ubuntu-latest
# One version train for every published package (NFR-14): the version lives
# once in each pyproject and is mirrored in uv.lock, and a built wheel
# carries that real version -- never a placeholder such as 0.0.0 or
# "unknown" (NFR-15). A bump touches all published packages together or this
# gate fails.
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Install uv
uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
python-version: "3.12"
- name: Build a wheel to inspect its metadata version
run: uv build --package dexpace-sdk-core --wheel -o dist
- name: Verify one version train (pyproject + uv.lock + wheel)
run: uv run --no-project python tools/check_version_train.py --wheel-dir dist
You can’t perform that action at this time.