Two bugs in the previous CI: - needs: [] on the tag job bypassed stage ordering — tags were created before tests finished, defeating the entire pull-based deploy safety guarantee - changes: rules meant a push to infra/ or docs would skip all tests but still create a tag Now matches the padelnomics pattern: all three test jobs always run on master and MRs, tag job runs after the test stage completes (stage ordering, no needs). Also use uv sync --all-packages consistently across all jobs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
65 lines
1.7 KiB
YAML
65 lines
1.7 KiB
YAML
image: python:3.13
|
|
|
|
stages:
|
|
- test
|
|
- tag
|
|
|
|
variables:
|
|
UV_CACHE_DIR: "$CI_PROJECT_DIR/.uv-cache"
|
|
|
|
cache:
|
|
paths:
|
|
- .uv-cache/
|
|
|
|
.uv_setup: &uv_setup
|
|
- curl -LsSf https://astral.sh/uv/install.sh | sh
|
|
- source $HOME/.local/bin/env
|
|
|
|
workflow:
|
|
rules:
|
|
- if: $CI_PIPELINE_SOURCE == "merge_request_event"
|
|
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
|
|
|
|
# ── Tests ─────────────────────────────────────────────────────────────────────
|
|
|
|
test:cli:
|
|
stage: test
|
|
before_script:
|
|
- *uv_setup
|
|
script:
|
|
- uv sync --all-packages
|
|
- uv run pytest tests/
|
|
|
|
test:sqlmesh:
|
|
stage: test
|
|
before_script:
|
|
- *uv_setup
|
|
script:
|
|
- uv sync --all-packages
|
|
- cd transform/sqlmesh_materia && uv run sqlmesh test
|
|
|
|
test:web:
|
|
stage: test
|
|
before_script:
|
|
- *uv_setup
|
|
script:
|
|
- uv sync --all-packages
|
|
- cd web && uv run pytest tests/ -x -q
|
|
- cd web && uv run ruff check src/ tests/
|
|
|
|
# ── Tag (pull-based deploy) ───────────────────────────────────────────────────
|
|
# Creates v<N> tag after all tests pass. The on-server supervisor polls for new
|
|
# tags every 60s and deploys automatically. No SSH keys or deploy credentials
|
|
# needed in CI — only the built-in CI_JOB_TOKEN.
|
|
|
|
tag:
|
|
stage: tag
|
|
image: alpine:latest
|
|
before_script:
|
|
- apk add --no-cache git
|
|
script:
|
|
- git tag "v${CI_PIPELINE_IID}"
|
|
- git push "https://gitlab-ci-token:${CI_JOB_TOKEN}@${CI_SERVER_HOST}/${CI_PROJECT_PATH}.git" "v${CI_PIPELINE_IID}"
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
|