Skip to content

fix(p0-3): redact signed URL + reason in bcut transcribe #1065

fix(p0-3): redact signed URL + reason in bcut transcribe

fix(p0-3): redact signed URL + reason in bcut transcribe #1065

Workflow file for this run

name: CI
on:
pull_request:
types: [opened, reopened, synchronize, ready_for_review]
push:
branches: [main]
concurrency:
group: ci-${{ github.ref }}
cancel-in-progress: true
permissions: {}
jobs:
test:
if: github.event_name != 'pull_request' || !github.event.pull_request.draft
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: '3.12'
- name: Install dependencies
run: pip install -e ".[dev]"
- name: Ruff lint
run: ruff check .
- name: Ruff format check
run: ruff format --check .
- name: Test
run: pytest -x -q -m "not real_llm and not perf and not slow"
smoke:
if: github.event_name != 'pull_request' || !github.event.pull_request.draft
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: '3.12'
- name: Install dependencies
run: pip install -e ".[dev]"
- name: Smoke tests
run: pytest -x -q -m smoke
version-check:
if: github.event_name == 'pull_request' && !github.event.pull_request.draft
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 0
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: '3.12'
- name: Check version bump
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PR_NUMBER: ${{ github.event.pull_request.number }}
run: |
LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
if [ -z "$LAST_TAG" ]; then
echo "No tags found, skipping version check"
exit 0
fi
TAG_VERSION="${LAST_TAG#v}"
PLUGIN_VERSION=$(python3 -c "import json; print(json.load(open('.claude-plugin/plugin.json'))['version'])")
SOURCE_CHANGES=$(git diff --name-only "origin/main"..HEAD -- \
autosearch/ tests/ docs/ \
CLAUDE.md pyproject.toml .claude-plugin/ \
2>/dev/null | wc -l | tr -d ' ')
if [ "$SOURCE_CHANGES" -gt 0 ] && [ "$TAG_VERSION" = "$PLUGIN_VERSION" ]; then
gh pr comment "$PR_NUMBER" --body \
"**Version reminder**: This PR changes $SOURCE_CHANGES source file(s) but the version is still \`$PLUGIN_VERSION\` (same as tag \`$LAST_TAG\`)."
elif [ "$TAG_VERSION" != "$PLUGIN_VERSION" ]; then
echo "Version bumped: $TAG_VERSION → $PLUGIN_VERSION"
else
echo "No source file changes, version bump not required"
fi
quality:
if: github.event_name == 'pull_request' && !github.event.pull_request.draft
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Lint workflows
uses: raven-actions/actionlint@205b530c5d9fa8f44ae9ed59f341a0db994aa6f8 # v2.1.2
- name: Check PR size
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PR_NUMBER: ${{ github.event.pull_request.number }}
run: |
ADDITIONS=$(gh pr view "$PR_NUMBER" --json additions -q '.additions')
DELETIONS=$(gh pr view "$PR_NUMBER" --json deletions -q '.deletions')
TOTAL=$((ADDITIONS + DELETIONS))
if [ "$TOTAL" -gt 500 ]; then
gh pr comment "$PR_NUMBER" --body "**PR size warning**: This PR changes $TOTAL lines (+$ADDITIONS/-$DELETIONS). Consider splitting."
fi