🎨 Release v1.0.2: Enhanced Interactive Charts & UI Improvements… #23

Workflow file for this run

.github/workflows/ci-enhanced.yml at df1adc8

	name: Enhanced CI/CD Pipeline

	on:
	push:
	branches: [ main, develop ]
	tags: [ 'v*' ]
	pull_request:
	branches: [ main, develop ]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	env:
	PYTHON_VERSION: "3.11"

	jobs:
	# ============================================
	# Code Quality & Security Checks
	# ============================================
	quality:
	name: Code Quality & Security
	runs-on: ubuntu-latest
	timeout-minutes: 10

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ env.PYTHON_VERSION }}

	- name: Cache pip dependencies
	uses: actions/cache@v4
	with:
	path: ~/.cache/pip
	key: ${{ runner.os }}-pip-quality-${{ hashFiles('**/requirements-dev-simple.txt') }}
	restore-keys: \|
	${{ runner.os }}-pip-quality-

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements-dev-simple.txt

	- name: Run Ruff linting (all source modules)
	run: \|
	ruff check --output-format=github src/ --ignore=PLR2004,PLC0415,ARG002,ARG005,ERA001,PTH123,E402,B018,SIM102,F401,E721,PLR0912
	continue-on-error: true # Allow linting issues for v1.0.0

	- name: Run Ruff formatting check
	run: \|
	ruff format --check .
	continue-on-error: true # Allow formatting issues for v1.0.0

	- name: Run MyPy type checking
	run: \|
	mypy src/ --config-file=pyproject.toml
	continue-on-error: true # Allow type hint issues for v1.0.0

	- name: Run Bandit security scan
	run: \|
	bandit -r src/ -f json -o bandit-report.json
	continue-on-error: true

	- name: Upload security scan results
	uses: actions/upload-artifact@v4
	if: always()
	with:
	name: bandit-security-report
	path: bandit-report.json

	# ============================================
	# Documentation Build
	# ============================================
	docs:
	name: Documentation
	runs-on: ubuntu-latest
	timeout-minutes: 10

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ env.PYTHON_VERSION }}

	- name: Install documentation dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install mkdocs mkdocs-material

	- name: Build documentation
	run: \|
	mkdocs build --strict

	- name: Upload documentation
	uses: actions/upload-artifact@v4
	with:
	name: documentation
	path: site/

	# ============================================
	# Test Suite (Multi-platform)
	# ============================================
	test:
	name: Test Suite
	needs: quality
	strategy:
	fail-fast: false
	matrix:
	os: [ubuntu-latest, windows-latest, macos-latest]
	python-version: ["3.11", "3.12"]

	runs-on: ${{ matrix.os }}
	timeout-minutes: 20

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}

	- name: Cache pip dependencies
	uses: actions/cache@v4
	with:
	path: \|
	~/.cache/pip
	~/Library/Caches/pip
	%APPDATA%\pip\Cache
	key: ${{ runner.os }}-pip-test-${{ matrix.python-version }}-${{ hashFiles('**/requirements-dev-simple.txt') }}
	restore-keys: \|
	${{ runner.os }}-pip-test-${{ matrix.python-version }}-

	- name: Install system dependencies (Ubuntu)
	if: runner.os == 'Linux'
	run: \|
	sudo apt-get update
	sudo apt-get install -y python3-tk

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements-dev-simple.txt

	- name: Create test data directory
	run: \|
	mkdir -p tests/fixtures

	- name: Run unit tests
	run: pytest tests/unit/ -v --cov=src --cov-report=xml --cov-report=html --cov-report=term-missing --junitxml=pytest.xml

	- name: Run integration tests
	run: pytest tests/integration/ -v --cov=src --cov-append --cov-report=xml -m "integration"

	- name: Upload coverage reports to Codecov
	uses: codecov/codecov-action@v4
	if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.11'
	with:
	file: ./coverage.xml
	flags: unittests
	name: codecov-umbrella
	token: ${{ secrets.CODECOV_TOKEN }}
	continue-on-error: true # Don't fail if codecov is unavailable

	- name: Upload test results
	uses: actions/upload-artifact@v4
	if: always()
	with:
	name: test-results-${{ matrix.os }}-py${{ matrix.python-version }}
	path: \|
	pytest.xml
	htmlcov/
	coverage.xml

	# ============================================
	# Performance & ML Model Tests
	# ============================================
	performance:
	name: Performance & ML Tests
	needs: test
	runs-on: ubuntu-latest
	timeout-minutes: 30

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ env.PYTHON_VERSION }}

	- name: Cache pip dependencies
	uses: actions/cache@v4
	with:
	path: ~/.cache/pip
	key: ${{ runner.os }}-pip-perf-${{ hashFiles('**/requirements-dev-simple.txt') }}

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements-dev-simple.txt

	- name: Run performance benchmarks
	run: pytest tests/performance/ -v --benchmark-only --benchmark-json=benchmark.json --benchmark-min-rounds=3
	continue-on-error: true # Allow benchmark failures for v1.0.0

	- name: Run ML model validation tests
	run: pytest tests/ -v -m "ml" --timeout=300
	continue-on-error: true # Allow ML test failures for v1.0.0

	- name: Upload benchmark results
	uses: actions/upload-artifact@v4
	with:
	name: benchmark-results
	path: benchmark.json

	# ============================================
	# Build & Package
	# ============================================
	build:
	name: Build Package
	needs: [quality, docs]
	runs-on: ubuntu-latest
	timeout-minutes: 15

	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Full history for setuptools_scm

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ env.PYTHON_VERSION }}

	- name: Install build dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install build twine hatchling

	- name: Build package
	run: \|
	python -m build

	- name: Check package
	run: \|
	twine check dist/*

	- name: Upload build artifacts
	uses: actions/upload-artifact@v4
	with:
	name: dist
	path: dist/

	# ============================================
	# Container Build & Security Scan
	# ============================================
	container:
	name: Container Security
	needs: build
	runs-on: ubuntu-latest
	timeout-minutes: 20

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Build container image
	uses: docker/build-push-action@v5
	with:
	context: .
	push: false
	load: true
	tags: filantropia-solar:test
	cache-from: type=gha
	cache-to: type=gha,mode=max
	target: final

	- name: Run Trivy security scan
	uses: aquasecurity/trivy-action@0.24.0
	with:
	image-ref: filantropia-solar:test
	format: 'sarif'
	output: 'trivy-results.sarif'
	severity: 'CRITICAL,HIGH' # Focus on critical/high security issues
	exit-code: '0' # Fail if critical/high vulnerabilities found
	continue-on-error: true
	trivyignores: '.trivyignore' # Use our ignore file for accepted risks

	- name: Upload Trivy scan results
	uses: github/codeql-action/upload-sarif@v3
	if: always()
	with:
	sarif_file: 'trivy-results.sarif'
	continue-on-error: true

	# ============================================
	# Release (only on tags)
	# ============================================
	release:
	name: Release
	needs: [quality, test, performance, build, container, docs]
	runs-on: ubuntu-latest
	if: startsWith(github.ref, 'refs/tags/v')
	timeout-minutes: 10

	environment:
	name: release
	url: https://pypi.org/p/filantropia-solar/

	permissions:
	id-token: write # For trusted publishing to PyPI
	contents: write # For GitHub releases

	steps:
	- name: Download build artifacts
	uses: actions/download-artifact@v4
	with:
	name: dist
	path: dist/

	- name: Publish to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	skip-existing: true
	continue-on-error: true # Don't fail if PyPI is unavailable

	- name: Create GitHub Release
	uses: softprops/action-gh-release@v2
	with:
	files: dist/*
	generate_release_notes: true
	make_latest: true

Navigation Menu

Uh oh!

🎨 Release v1.0.2: Enhanced Interactive Charts & UI Improvements… #23

Workflow file

🎨 Release v1.0.2: Enhanced Interactive Charts & UI Improvements… #23

Uh oh!

Workflow file for this run