check_dependencies.yaml

name: Check dependencies

on:
  workflow_dispatch:
  schedule:
    - cron: '0 0 * * *'
  pull_request:
    branches:
      - main
    paths:
      - '**/*requirements.txt'
      - '.github/workflows/check_dependencies.yaml'
  push:
    branches:
      - main
    paths:
      - '**/*requirements.txt'
      - '.github/workflows/check_dependencies.yaml'

env:
  UV_SYSTEM_PYTHON: 1

jobs:
  check_dependencies:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os:
          - macos-latest
          - ubuntu-latest
          - windows-latest
        python-version:
          - '3.10'
          - '3.12'

    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Install uv
        uses: astral-sh/setup-uv@2e657c127d5b1635d5a8e3fa40e0ac50a5bf6992 # v3.2.2
        with:
          enable-cache: true
          cache-dependency-glob: '**/*requirements.txt'

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip

      - name: Install dependencies
        run: |
          uv pip install --upgrade pip setuptools wheel
          uv pip install -r requirements.txt -r dev/requirements.txt

      - name: Check dependencies with pip-audit
        run: |
          pip-audit

  check_release_dependencies:
    if: |
      github.event_name == 'workflow_dispatch' ||
      github.event_name == 'schedule'
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os:
          - macos-latest
          - ubuntu-latest
          - windows-latest
        python-version:
          - '3.10'
          - '3.12'

    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Install uv
        uses: astral-sh/setup-uv@2e657c127d5b1635d5a8e3fa40e0ac50a5bf6992 # v3.2.2
        with:
          enable-cache: true
          cache-dependency-glob: '**/*requirements.txt'

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip

      - name: Install dependencies
        run: |
          uv pip install --upgrade pip setuptools wheel
          uv pip install geospaitial-lab-aviary -r dev/requirements/check_dependencies_requirements.txt

      - name: Check dependencies with pip-audit
        run: |
          pip-audit