check-python-code.yaml

name: Check Python package code

on:
  pull_request:
    paths:
      - 'packages/**'
      - 'pyproject.toml'
      - 'uv.lock'
  push:
    branches: [main, dev]
    paths:
      - 'packages/**'
      - 'pyproject.toml'
      - 'uv.lock'

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  check:
    name: Check (${{ matrix.resolution }}, py${{ matrix.python }})
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        # Default resolution exercises the committed lock against every
        # supported Python minor version. The lowest-direct cell pins each
        # direct dependency to its declared floor (see UV_RESOLUTION below)
        # and runs only on the Python floor.
        python: ["3.10", "3.11", "3.12", "3.13", "3.14"]
        resolution: [default]
        include:
          - python: "3.10"
            resolution: lowest-direct

    permissions:
      contents: read

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Install uv
        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
        with:
          version: "latest"

      - name: Set up Python
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: ${{ matrix.python }}

      # UV_RESOLUTION=lowest-direct makes `uv sync` re-resolve every direct
      # dependency to the lowest version permitted by pyproject.toml. This
      # exercises the declared floor (e.g. pydantic==2.12.0) instead of
      # whatever the committed lock happens to point at. Failures here mean
      # a direct dep's minimum needs to be bumped. Set via GITHUB_ENV only
      # in the relevant cell so default cells run with no UV_RESOLUTION at
      # all -- otherwise an empty value is rejected by uv.
      - name: Configure resolution
        if: matrix.resolution == 'lowest-direct'
        run: echo "UV_RESOLUTION=lowest-direct" >> "$GITHUB_ENV"

      - name: Run make check
        run: make check