test.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read

jobs:
  lint:
    name: "Lint"
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: "3.14"

      # Pinned, not floating. ruff 0.16.0 expanded its DEFAULT rule set (EXE, I,
      # UP now fire where 0.15.x reported nothing), so an unpinned install turns a
      # ruff release into a red build on a day nobody touched this repo. 0.15.22 is
      # the newest release this tree passes; adopting 0.16's rules is separate work.
      # Keep in step with the ruff-pre-commit rev in .pre-commit-config.yaml.
      - run: pip install ruff==0.15.22
      - run: ruff check .
      - run: ruff format --check .

  test:
    name: "Tests"
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: "3.14"

      - run: pip install pytest
      - run: pytest tests/ -v