workflow.yml

name: 'Main CI Build'
on: [push, pull_request_target]

jobs:
  test:
    name: Test Build (Python ${{ matrix.python }} on ${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        python: ['3.8', '3.9', '3.9-dev', '3.10-dev']
        os: ['ubuntu-latest', 'macos-latest']
    steps:
      - name: Cancel Previous Runs
        uses: styfle/cancel-workflow-action@0.10.0
        with:
          access_token: ${{ github.token }}
      - uses: actions/checkout@v3
        with:
          submodules: true
      - name: Setup Python ${{ matrix.python }} on ${{ matrix.os }}
        uses: actions/setup-python@v4
        with:
          python-version: ${{ matrix.python }} 
      - name: Install packages
        run: |
          python -m pip install --upgrade pip==21.3.1 wheel
          pip install -r dev-requirements.txt
          pyproject-build --wheel --outdir dist .
          find dist -name "*.whl" | xargs pip3 install
      - name: Show python version and show package
        run: |
          python --version
          sopel --version
          pip show MirahezeBot-Plugins
      - name: Run tests
        run: |
          flake8 .
          pytest --pyargs MirahezeBots.tests
          bandit MirahezeBots -r -x MirahezeBots/test
          mypy -p MirahezeBots --exclude=build --ignore-missing-imports  --disallow-untyped-defs
          pip install -r compatibility.txt
          pip check
      - name: Run pip freeze and pipdeptree
        run: |
          pip freeze
          pipdeptree
      - name: Show outdated packages
        run: pip list --outdated
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Cancel Previous Runs
        uses: styfle/cancel-workflow-action@0.10.0
        with:
          access_token: ${{ github.token }}
      - uses: actions/checkout@v3
      - name: Set up Python 3.9
        uses: actions/setup-python@v4
        with:
          python-version: 3.9
      - name: Install pypa/build
        run: |
          python -m pip install --upgrade pip==21.1.0
          pip install -r dev-requirements.txt
      - name: Build a binary wheel
        run: pyproject-build --wheel --outdir dist .
      - name: Publish to PyPi
        if: github.event_name == 'push' && github.ref == 'refs/heads/release'
        uses: pypa/gh-action-pypi-publish@master
        with:
          password: ${{ secrets.pypi_token }}
  sonarcloud:
    name: SonarCloud
    runs-on: ubuntu-latest
    steps:
      - name: Cancel Previous Runs
        uses: styfle/cancel-workflow-action@0.10.0
        with:
          access_token: ${{ github.token }}
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
      - name: SonarCloud Scan
        uses: SonarSource/sonarcloud-github-action@master
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}