main.yml

name: Build ⚙️

on:
  push:
    branches:
      - master
  pull_request:

concurrency:
  # For a given workflow, if we push to the same branch, cancel all previous builds on that branch except on main.
  group: "${{ github.workflow }}-${{ github.ref }}"
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

jobs:
  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - tox-env: py310
            python-version: "3.10"
          - tox-env: py311
            python-version: "3.11"
          - tox-env: py312
            python-version: "3.12"
          - tox-env: py313
            python-version: "3.13"
          - tox-env: pypy310
            python-version: "pypy-3.10"
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
        with:
          disable-sudo: true
          egress-policy: audit
      - name: Checkout Repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
        with:
          python-version: ${{ matrix.python-version }}
          cache: "pip"
      - name: Install CI dependencies
        run: |
          python -m pip install --require-hashes -r CI/requirements_ci.txt
      - name: Test with pytest and tox ⚙️
        run: |
          python -m tox -e ${{ matrix.tox-env }}