Skip to content

ci: restore per-version lint/typecheck/audit matrix + tui-less core job - #47

Merged
CryptoJones merged 1 commit into
mainfrom
port/ci-hardening
Jun 12, 2026
Merged

CryptoJones merged 1 commit into
mainfrom
port/ci-hardening

Conversation

@CryptoJones

Copy link
Copy Markdown
Owner

Re-targeted onto v0.2.0 (the earlier CI PR #36 was built on a now-stale base and conflicted). Preserves v0.2.0's CI hardening (pinned action SHAs, full-history gitleaks) and adds:

  • No cancel on main — cancel-in-progress is now ${{ github.ref != 'refs/heads/main' }}, so a fast follow-up push can't cancel a landed commit's test/security run.
  • Per-version matrix restored — lint, typecheck, and the pip-audit/security job run across 3.11/3.12/3.13 again (they were 3.12-only), so a version-marker-gated CVE or typing regression can't merge green. gitleaks still runs once.
  • tui-less core-install job — syncs --extra dev only, import-checks the core modules, and runs the non-tui test subset, catching an accidental textual/selectolax import that would break pip install perplexity-agent.

Verified locally on v0.2.0: core modules import without the tui extra, and 93 non-tui tests pass in that env.

Supersedes #36.

🤖 Generated with Claude Code

…e job

Port of the earlier CI hardening onto v0.2.0, preserving v0.2.0's pinned action
SHAs and full-history gitleaks scan:

- never cancel in-progress runs on `main` (cancel-in-progress guarded on ref),
  so a fast follow-up push can't drop a landed commit's test/security record;
- matrix lint, typecheck, and the pip-audit/security job over 3.11/3.12/3.13
  again (they had been narrowed to 3.12 only), so a version-marker-gated CVE or
  typing regression can't merge green; gitleaks still runs once;
- new core-install job that syncs WITHOUT the tui extra and import-checks the
  core modules + runs the non-tui tests, so an accidental textual/selectolax
  import in a core module can't pass CI while breaking `pip install`.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@CryptoJones
CryptoJones merged commit 6e6e705 into main Jun 12, 2026
28 checks passed
@CryptoJones
CryptoJones deleted the port/ci-hardening branch June 12, 2026 17:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant