ci.yml

name: ci

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read

jobs:
  lint:
    name: lint (ruff)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          persist-credentials: false
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
        with:
          python-version: "3.12"
      - name: install ruff
        run: |
          python -m pip install --upgrade pip
          pip install ruff
      - name: ruff check
        # Lint-Baseline gesetzt (ruff.toml) -> blockierend. Seit 2026-07-10
        # auch tests/ (die Gate-Schicht selbst war vorher ungelintet).
        run: ruff check src tests

  test:
    name: test (py${{ matrix.python-version }})
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false  # alle Versionen melden, nicht beim ersten Fehler abbrechen
      matrix:
        python-version: ["3.12", "3.13", "3.14"]
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          persist-credentials: false
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip
          cache-dependency-path: requirements-dev.txt
      - name: install
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements-dev.txt
      - name: compile
        run: python -m compileall src
      - name: pytest (Korrektheits-Gates, ohne slow)
        run: pytest -m "not slow"