chore(deps)(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.1.0 in the all-dependencies group across 1 directory #574

Workflow file for this run

	# .github/workflows/ci.yml
	name: treemapper CI

	'on':
	pull_request:
	branches: ['**']
	push:
	branches:
	- main

	jobs:
	# ============================================================================
	# Pre-commit checks (fast feedback)
	# ============================================================================
	pre-commit:
	name: Pre-commit hooks
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: '3.12'

	- name: Cache pre-commit
	uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
	with:
	path: ~/.cache/pre-commit
	key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install pre-commit
	pip install -e ".[dev]"

	- name: Run pre-commit
	run: pre-commit run --all-files

	# ============================================================================
	# Linting and Type Checking
	# ============================================================================
	lint-type-check:
	name: Lint & Type Check
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- name: Checkout Code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Set up Python 3.10
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: '3.10'
	cache: 'pip'
	cache-dependency-path: 'pyproject.toml'

	- name: Install Linters and Type Checker
	run: \|
	python -m pip install --upgrade pip
	pip install .[dev]

	- name: Run Linters and Formatters Check
	run: \|
	ruff check src tests
	black --check src tests

	- name: Run Type Checker (Mypy)
	run: \|
	mypy src

	# ============================================================================
	# Rust diffctx tests (2723 YAML test cases, in-memory pipeline)
	# ============================================================================
	rust-diffctx-test:
	name: Rust diffctx tests
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Install Rust
	uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
	with:
	toolchain: "1.92.0"
	components: rustfmt, clippy

	- name: Cache Cargo
	uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
	with:
	path: \|
	~/.cargo/registry
	~/.cargo/git
	diffctx/target
	key: cargo-${{ runner.os }}-${{ hashFiles('diffctx/Cargo.lock') }}
	restore-keys: cargo-${{ runner.os }}-

	- name: Build and test
	working-directory: diffctx
	env:
	DIFFCTX_YAML_CASES_LIMIT: "20"
	run: \|
	cargo test --lib
	cargo build --release
	cargo test --release --test yaml_cases

	- name: Run diffctx YAML test suite
	working-directory: diffctx
	run: ./target/release/diffctx-test \|\| true

	# ============================================================================
	# Cross-platform Python Testing (treemapper core, excludes diffctx)
	# ============================================================================
	test:
	needs: [lint-type-check]
	strategy:
	fail-fast: false
	matrix:
	os: [ubuntu-latest, macos-latest, windows-latest]
	python-version: ['3.10', '3.11', '3.12', '3.13']

	runs-on: ${{ matrix.os }}
	permissions:
	contents: read

	steps:
	- name: Checkout Code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: ${{ matrix.python-version }}
	cache: 'pip'
	cache-dependency-path: 'pyproject.toml'

	- name: Install Rust
	uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
	with:
	toolchain: "1.92.0"
	components: rustfmt, clippy

	- name: Cache Cargo
	uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
	with:
	path: \|
	~/.cargo/registry
	~/.cargo/git
	diffctx/target
	key: cargo-${{ runner.os }}-py${{ matrix.python-version }}-${{ hashFiles('diffctx/Cargo.lock') }}
	restore-keys: cargo-${{ runner.os }}-py${{ matrix.python-version }}-

	- name: Install build backend
	run: \|
	python -m pip install --upgrade pip
	pip install "maturin>=1.10,<1.11"

	- name: Build and install treemapper (with Rust _diffctx) and dev deps
	shell: bash
	env:
	PYO3_USE_ABI3_FORWARD_COMPATIBILITY: "1"
	run: \|
	# PEP 660 editable install — maturin builds the Rust extension and
	# pip installs everything (treemapper + [dev,full] extras). Skip build
	# isolation since we just installed maturin in this env.
	pip install -e ".[dev,full]" --no-build-isolation

	- name: Run Tests with Coverage
	shell: bash
	run: \|
	pytest -v --cov=src/treemapper --cov-report=xml \
	--cov-report=term-missing --cov-branch --junitxml=test-results.xml

	- name: Coverage report with threshold
	run: \|
	coverage report --fail-under=40

	- name: Upload coverage reports to Codecov
	if: runner.os == 'Linux' && matrix.python-version == '3.12'
	uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v5
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	files: ./coverage.xml
	flags: integration
	fail_ci_if_error: false
	verbose: true

	- name: Upload coverage for SonarCloud
	uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
	if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.12'
	with:
	name: coverage-report
	path: \|
	coverage.xml
	test-results.xml
	retention-days: 1

	# ============================================================================
	# Complexity & Maintainability Metrics
	# ============================================================================
	complexity-checks:
	name: Complexity & Maintainability Analysis
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: '3.12'

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"

	- name: Check cyclomatic complexity
	run: \|
	echo "=== Cyclomatic Complexity Report ==="
	radon cc src/treemapper/ --min B --show-complexity --total-average

	- name: Check maintainability index
	run: \|
	echo "=== Maintainability Index Report ==="
	radon mi src/treemapper/ --min B --show

	- name: Fail on high complexity
	run: \|
	radon cc src/treemapper/ --min C --total-average \|\| \
	(echo "High complexity detected" && exit 1)

	# ============================================================================
	# Architecture & Import Contracts
	# ============================================================================
	architecture-checks:
	name: Architecture & Import Contracts
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: '3.12'

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"

	- name: Check import contracts
	run: lint-imports

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.1.0 in the all-dependencies group across 1 directory #574

Workflow file

chore(deps)(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.1.0 in the all-dependencies group across 1 directory #574

Uh oh!

Workflow file for this run