python.yml

name: Python

on:
  workflow_call:
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: python-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  native:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    permissions:
      contents: read
      id-token: write
    strategy:
      fail-fast: false
      matrix:
        python: ["3.11", "3.14"]
    steps:
      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
      - uses: ./.github/actions/setup-validation
        with:
          python: "true"
          python-version: ${{ matrix.python }}
      - name: Check native behavior, portable wire vectors and shared smoke histories
        run: make check-python
      - name: Check Redis, Valkey, Cluster and TypeScript interoperability
        run: make integration-python
      - name: Verify release guards and install the built Python distributions
        run: |
          python/.venv/bin/python -B -m unittest discover -s scripts -p 'test_*release.py'
          python/.venv/bin/python -m pip install 'build>=1.2,<2' 'twine>=7,<8'
          python/.venv/bin/python scripts/python_release.py build --out-dir .formal-traces/python-dist
      - name: Upload Python coverage to Codecov
        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
        with:
          files: ./coverage/python/native.lcov,./coverage/python/Redis.lcov,./coverage/python/Valkey.lcov
          flags: python
          name: python-${{ matrix.python }}
          disable_search: true
          use_oidc: true
          fail_ci_if_error: true
      - name: Retain the built distributions, coverage and integration diagnostics
        if: always()
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: python-${{ matrix.python }}-validation
          path: |
            .formal-traces/python-dist/
            .formal-traces/python-integration*
            coverage/python/*.lcov
          include-hidden-files: true
          if-no-files-found: warn
          retention-days: 14