python-tuf/.github/workflows/_test.yml
Jussi Kukkonen 8513f46c2b Bump minimum Python version to 3.10
We could just stop testing with 3.9... but I think this will lead to
unintentionally breaking 3.9 anyway sooner or later.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
2026-01-08 13:08:47 +02:00

115 lines
3.2 KiB
YAML

on:
workflow_call:
# Permissions inherited from caller workflow
permissions: {}
jobs:
lint-test:
name: Lint Test
runs-on: ubuntu-latest
steps:
- name: Checkout TUF
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
with:
persist-credentials: false
- name: Set up Python (oldest supported version)
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
with:
python-version: "3.10"
cache: 'pip'
cache-dependency-path: |
requirements/*.txt
pyproject.toml
- name: Install dependencies
run: |
python3 -m pip install --constraint requirements/build.txt tox coveralls
- name: Run tox
env:
RUFF_OUTPUT_FORMAT: github
run: tox -e lint
tests:
name: Tests
needs: lint-test
strategy:
matrix:
python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
os: [ubuntu-latest]
include:
- python-version: "3.x"
os: macos-latest
- python-version: "3.x"
os: windows-latest
runs-on: ${{ matrix.os }}
steps:
- name: Checkout TUF
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
with:
persist-credentials: false
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
with:
python-version: ${{ matrix.python-version }}
cache: 'pip'
cache-dependency-path: |
requirements/*.txt
pyproject.toml
- name: Install dependencies
run: |
python3 -m pip install --constraint requirements/build.txt tox coveralls
- name: Run tox
run: tox -e py
- name: Publish on coveralls.io
# A failure to publish coverage results on coveralls should not
# be a reason for a job failure.
continue-on-error: true
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
COVERALLS_FLAG_NAME: ${{ runner.os }} / Python ${{ matrix.python-version }}
COVERALLS_PARALLEL: true
run: |
coveralls --service=github
all-tests-pass:
name: All tests passed
needs: [lint-test, tests]
runs-on: ubuntu-latest
steps:
- run: echo "All test jobs have completed successfully."
coveralls-fin:
# Always run when all 'tests' jobs have finished even if they failed
# TODO: Replace always() with a 'at least one job succeeded' expression
if: always()
needs: tests
runs-on: ubuntu-latest
steps:
- name: Add requirements file to make setup-python happy
run: touch requirements.txt
- name: Set up Python
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
with:
python-version: '3.x'
cache: 'pip'
- name: Install dependencies
run: |
python3 -m pip install coveralls
- name: Finalize publishing on coveralls.io
continue-on-error: true
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: coveralls --finish