ci.yml

name: CI

on:
  pull_request:
  push:
    branches:
      - "main"
    tags:
      - "*"

jobs:
  lint:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
        py_version: ["3.9", "3.10", "3.11"]
    runs-on: ${{ matrix.os }}
    steps:
    - uses: actions/checkout@v3
    - name: Set up Python ${{ matrix.py_version }}
      uses: actions/setup-python@v3
      with:
        python-version: ${{ matrix.py_version }}
    - name: Install dependencies
      run: |
        python -m pip install --upgrade flit
        flit install --deps=all
    - name: Type check
      run: mypy heroku_audit stubs
    - name: Format
      run: black --check heroku_audit stubs
    - name: lint
      run: ruff check heroku_audit stubs
    - name: List commands
      run: heroku-audit --list

  exe:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
    runs-on: ${{ matrix.os }}
    steps:
    - uses: actions/checkout@v3
    - name: Set up Python
      uses: actions/setup-python@v3
      with:
        python-version: "3.11"
    - name: Install dependencies
      run: |
        python -m pip install --upgrade flit pyinstaller
        flit install --deps=production
    - name: Build executable
      run: pyinstaller -F --strip heroku_audit/__main__.py --name heroku-audit-${{ matrix.os }} --clean
    - name: Save executable
      uses: actions/upload-artifact@v3
      with:
        name: heroku-audit-${{ matrix.os }}
        path: dist/
    - name: Upload to release
      uses: svenstaro/upload-release-action@v2
      if: ${{ github.ref_type == 'tag' }}
      with:
        repo_token: ${{ secrets.GITHUB_TOKEN }}
        file: dist/*
        tag: ${{ github.ref }}
        file_glob: true
        overwrite: true

  build:
    permissions:
      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
    runs-on: ubuntu-latest
    needs:
      - lint
      - exe
    steps:
    - uses: actions/checkout@v3
      with:
        fetch-depth: 0
    - name: Set up Python
      uses: actions/setup-python@v3
      with:
        python-version: "3.11"
    - name: Install dependencies
      run: python -m pip install --upgrade flit
    - name: Build package
      run: flit build
    - name: Publish to PyPi
      if: ${{ github.ref_type == 'tag' }}
      uses: pypa/gh-action-pypi-publish@release/v1
      with:
        print_hash: true

  makepkg:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
      with:
        fetch-depth: 0
    - name: Makepkg Build and Check
      uses: edlanglois/pkgbuild-action@v1