Merge pull request #39 from richardkoehler/enh/package-app

[ENG] Create app packaging workflow

Author: Lucia-Poma

.github/dependabot.yml

@@ -0,0 +1,21 @@
+version: 2
+updates:
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "python"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "ci"

.github/workflows/ci.yml

@@ -3,12 +3,41 @@ name: CI - Lint and Type Check
 on:
   push:
     branches:
-      - "**"
+      - main
   pull_request:
     branches:
       - "**"
 
 jobs:
+  workflow-lint:
+    name: Workflow lint (actionlint)
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Lint GitHub workflow files
+        uses: rhysd/actionlint@v1.7.8
+
+  dependency-audit:
+    name: Dependency audit (uv audit)
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
+        with:
+          python-version: "3.12"
+          enable-cache: true
+
+      - name: Audit dependencies for vulnerabilities
+        run: |
+          uv audit
+
   lint:
     name: Lint
     runs-on: ubuntu-latest
@@ -20,7 +49,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
         with:
-          python-version: "3.14"
+          python-version: "3.12"
           enable-cache: true
 
       - name: Sync dependencies
@@ -46,7 +75,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
         with:
-          python-version: "3.14"
+          python-version: "3.12"
           enable-cache: true
 
       - name: Sync dependencies
@@ -66,8 +95,7 @@ jobs:
         include:
           - os: ubuntu-latest
           - os: windows-latest
-          # Apple Silicon (arm64); see https://github.com/actions/runner-images
-          - os: macos-14
+          - os: macos-latest
 
     steps:
       - name: Checkout repository
@@ -76,7 +104,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
         with:
-          python-version: "3.14"
+          python-version: "3.12"
           enable-cache: true
 
       - name: Sync dependencies
@@ -99,3 +127,36 @@ jobs:
           QT_QPA_PLATFORM: offscreen
         run: |
           uv run pytest --cov-fail-under=48
+
+  package-briefcase-zip:
+    name: Package Briefcase ZIP (Windows)
+    runs-on: windows-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57
+        with:
+          python-version: "3.12"
+          enable-cache: true
+
+      - name: Sync dependencies (incl. build / Briefcase)
+        run: |
+          uv sync --locked --dev --group build
+
+      - name: Briefcase create / build / package (zip)
+        env:
+          QT_QPA_PLATFORM: offscreen
+        run: |
+          uv run briefcase create windows app
+          uv run briefcase build windows app
+          uv run briefcase package windows -p zip
+
+      - name: Upload Briefcase ZIP artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: briefcase-windows-zip-${{ github.sha }}
+          path: dist/
+          if-no-files-found: warn