ci.yml

name: CI

on:
  push:
    branches: ["main"]
  pull_request:
    branches: ["main"]

jobs:
  markdown-lint:
    name: Markdown lint
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Lint Markdown
        uses: DavidAnson/markdownlint-cli2-action@v23
        with:
          globs: |
            **/*.md

  python-tests:
    name: Python tests
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: "3.11"
          cache: pip

      - name: Install dependencies
        run: pip install -r requirements.txt pytest

      - name: Run tests
        run: pytest tests/ -v

      - name: Security audit (pip-audit)
        run: |
          pip install pip-audit
          pip-audit -r requirements.txt --ignore-vuln PYSEC-2024-164

  latex-smoke:
    name: LaTeX compile smoke test
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Compile arXiv manuscript
        uses: xu-cheng/latex-action@v4
        with:
          root_file: main.tex
          working_directory: arxiv
          latexmk_use_xelatex: false
          args: >-
            -pdf -file-line-error -halt-on-error
            -interaction=nonstopmode
            -bibtex

      - name: Upload PDF artifact
        uses: actions/upload-artifact@v7
        with:
          name: oea-framework-paper
          path: arxiv/main.pdf
          retention-days: 30