ci.yml

name: CI

on:
  pull_request:
  push:
    branches:
      - main
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  tests:
    name: Tests (Python ${{ matrix.python-version }})
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.10", "3.11", "3.12", "3.13"]

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          python -m pip install -e .[dev]

      - name: Run tests
        run: python -m pytest

  quality:
    name: Lint, typing, and docs
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"
          cache: pip

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          python -m pip install -e .[dev]

      - name: Run Ruff
        run: python -m ruff check .

      - name: Run mypy
        run: python -m mypy glpi_python_client

      - name: Build documentation
        run: python -m sphinx -W --keep-going -b html docs docs/_build/html

  publish-readthedocs:
    name: Publish latest docs
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    needs:
      - tests
      - quality
    runs-on: ubuntu-latest
    env:
      READTHEDOCS_BASE_URL: ${{ vars.READTHEDOCS_BASE_URL }}
      READTHEDOCS_PROJECT: ${{ secrets.READTHEDOCS_PROJECT }}
      READTHEDOCS_TOKEN: ${{ secrets.READTHEDOCS_TOKEN }}
      READTHEDOCS_VERSION: ${{ vars.READTHEDOCS_MAIN_VERSION }}

    steps:
      - name: Trigger Read the Docs latest build
        shell: bash
        run: |
          set -euo pipefail
          if [ -z "${READTHEDOCS_TOKEN:-}" ] || [ -z "${READTHEDOCS_PROJECT:-}" ]; then
            echo "Read the Docs secrets are not configured; skipping latest build."
            exit 0
          fi

          base_url="${READTHEDOCS_BASE_URL:-https://app.readthedocs.org}"
          version="${READTHEDOCS_VERSION:-latest}"

          curl --fail --silent --show-error --location \
            --request POST \
            --header "Authorization: Token ${READTHEDOCS_TOKEN}" \
            "${base_url}/api/v3/projects/${READTHEDOCS_PROJECT}/versions/${version}/builds/"