ci.yml

name: CI

on: [push, pull_request]

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        # Define the specific versions you want to test against
        python-version: ["3.10", "3.11", "3.12", "3.13"]
    steps:
      - uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v4
        with:
          python-version: ${{ matrix.python-version }}
          cache: "pip"

      - name: Install Dependencies
        run: |
          pip install --upgrade pip
          # Install pinned dependencies first for reproducibility
          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
          # Install the project in editable mode + dev tools
          pip install -e ".[dev]"

      - name: Lint & Format Check (Ruff)
        run: |
          ruff check .
          ruff format --check .

      - name: Security (Bandit)
        run: |
          bandit -c pyproject.toml -r .

      - name: Run Tests with Coverage
        # pytest will read config from pyproject.toml
        run: |
          pytest