ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
  workflow_dispatch:

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

env:
  # `[tool.uv.sources]` pins langchain-core / langchain-tests to a sibling
  # `../langchain/` checkout that does not exist on CI. `--no-sources` ignores
  # that table and resolves them from PyPI instead — the same path release
  # builds take. It forces re-resolution, so the lockfile is not used here.
  UV_NO_SYNC: "true"

jobs:
  lint:
    name: lint + typing
    runs-on: ubuntu-latest
    env:
      RUFF_OUTPUT_FORMAT: github
    steps:
      - uses: actions/checkout@v4
      - uses: astral-sh/setup-uv@v5
        with:
          version: "0.9.5"
          python-version: "3.12"
          enable-cache: true
      - run: uv sync --no-sources --group lint --group typing
      - run: make lint
      - run: make typing

  test:
    name: unit tests (py${{ matrix.python-version }})
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.10", "3.13"]
    steps:
      - uses: actions/checkout@v4
      - uses: astral-sh/setup-uv@v5
        with:
          version: "0.9.5"
          python-version: ${{ matrix.python-version }}
          enable-cache: true
      - run: uv sync --no-sources --group test
      - run: make test
      - name: Check for unexpected file changes
        # `uv sync --no-sources` rewrites uv.lock in place (local editable
        # source -> PyPI registry); that diff is expected in CI. Exclude it so
        # the guard still catches stray files a test might have written.
        run: git diff --exit-code -- ':!uv.lock'