Files
stack/.gitea/workflows/ci.yml
kert f6f47b9a13
Some checks failed
CI / skinny-install (aco) (push) Successful in 44s
CI / lint-test (push) Failing after 1m27s
CI / skinny-install (api) (push) Successful in 51s
CI / skinny-install (bcda) (push) Successful in 32s
CI / skinny-install (bib) (push) Successful in 28s
CI / skinny-install (bls) (push) Successful in 28s
CI / skinny-install (ccw) (push) Successful in 26s
CI / skinny-install (cli) (push) Successful in 32s
CI / skinny-install (cms) (push) Successful in 27s
CI / skinny-install (conf) (push) Successful in 30s
CI / skinny-install (perf) (push) Successful in 33s
CI / skinny-install (pfs) (push) Successful in 31s
CI / skinny-install (rex) (push) Successful in 30s
Infra CI / notebooks (push) Successful in 7s
Infra CI / zotero (push) Successful in 6s
Deploy / build-scan-report (push) Has been cancelled
Infra CI / mc (push) Has been cancelled
Infra CI / api (push) Has been cancelled
Infra CI / docs (push) Has been cancelled
fix: Gitea Actions secrets — DEPLOY_TOKEN replaces reserved GITEA_ prefix
Gitea reserves the GITEA_ prefix for Actions secrets, so
secrets.GITEA_TOKEN resolved to empty, causing 401 on all package
uploads in pkg-supply-chain workflow.

- Rename CI secret from GITEA_TOKEN to DEPLOY_TOKEN (env var stays
  GITEA_TOKEN for code compatibility)
- Add provision_gitea_actions() to provisioning system — syncs
  DEPLOY_TOKEN, REGISTRY_USER, REGISTRY_TOKEN to Gitea Actions
- Wired into both provision() and bootstrap() flows
- All 7 Gitea Actions workflows updated

Refs #229, refs #230
2026-03-25 00:48:18 -04:00

87 lines
2.4 KiB
YAML

# DO NOT EDIT — generated by gen_config.py from stack.toml
# Re-generate: uv run python dev/scripts/gen_config.py
name: CI
on:
push:
branches: ["**"]
pull_request:
jobs:
lint-test:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: https://github.com/actions/checkout@v4
- name: Set up uv
run: curl -LsSf https://astral.sh/uv/install.sh | sh
env:
UV_INSTALL_DIR: /usr/local/bin
- name: Install dependencies
run: uv sync --dev
- name: Ruff check
run: uv run ruff check src/ tests/ --output-format=concise
- name: Ruff format
run: uv run ruff format --check src/ tests/
- name: Pytest
run: uv run pytest tests/ --cov=src --cov-report=term-missing --cov-fail-under=99 -q
- name: Validate generated config
run: uv run python dev/scripts/gen_config.py --check
- name: File failure issue
if: failure()
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
uv sync --no-dev --quiet 2>/dev/null || true
uv run python -m api.diag.ci \
--workflow "CI" --job "lint-test" \
--run "${{ github.run_number }}" \
--sha "${{ github.sha }}" \
--ref "${{ github.ref }}" || true
skinny-install:
runs-on: ubuntu-latest
strategy:
matrix:
extra: [conf, aco, api, bcda, bib, bls, ccw, cli, cms, perf, pfs, rex]
steps:
- name: Checkout
uses: https://github.com/actions/checkout@v4
- name: Set up uv
run: curl -LsSf https://astral.sh/uv/install.sh | sh
env:
UV_INSTALL_DIR: /usr/local/bin
- name: Install stack[${{ matrix.extra }}]
run: uv sync --extra ${{ matrix.extra }}
- name: Verify import
run: uv run python -c "import ${{ matrix.extra }}"
- name: Run module tests
run: |
if [ -d "tests/${{ matrix.extra }}" ]; then
uv run pytest "tests/${{ matrix.extra }}/" -x -q || true
fi
- name: File failure issue
if: failure()
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
uv sync --no-dev --quiet 2>/dev/null || true
uv run python -m api.diag.ci \
--workflow "CI" --job "skinny-install" \
--run "${{ github.run_number }}" \
--sha "${{ github.sha }}" \
--ref "${{ github.ref }}" || true