Update workflows to run on GitHub

.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+- package-ecosystem: pip
+  directory: "/"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+  target-branch: master
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10

.github/workflows/ci-cd.yml

@@ -0,0 +1,120 @@
+---
+name: CI/CD
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+  workflow_dispatch:
+
+env:
+  FORCE_COLOR: "1" # Make tools pretty.
+  PIP_DISABLE_PIP_VERSION_CHECK: "1"
+  PIP_NO_PYTHON_VERSION_WARNING: "1"
+  PYTHON_LATEST: "3.11"
+
+  # For re-actors/checkout-python-sdist
+  sdist-artifact: python-package-distributions
+
+permissions:
+  contents: read
+
+jobs:
+  build-sdist:
+    name: 📦 Build the source distribution
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+        name: Checkout project
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@v4
+        name: Setup ${{ env.PYTHON_LATEST }}
+        with:
+          python-version: ${{ env.PYTHON_LATEST }}
+      - run: python -Im pip install build
+        name: Install core libraries for build and install
+
+      - run: python -Im build
+        name: Build artifacts
+
+      - uses: actions/upload-artifact@v3
+        name: Upload built artifacts for testing
+        with:
+          name: ${{ env.sdist-artifact }}
+          # NOTE: Exact expected file names are specified here
+          # NOTE: as a safety measure — if anything weird ends
+          # NOTE: up being in this dir or not all dists will be
+          # NOTE: produced, this will fail the workflow.
+          path: dist/${{ env.sdist-name }}
+          retention-days: 15
+
+  tests:
+    name: Tests on ${{ matrix.python-version }}
+    needs: build-sdist
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        python-version:
+          - "3.8"
+          - "3.9"
+          - "3.10"
+          - "3.11"
+          - "~3.12.0-0"
+    continue-on-error: >-
+      ${{ contains(matrix.python-version, '~') && true || false }}
+    steps:
+      - name: Get source code from pre-built sdist
+        uses: re-actors/checkout-python-sdist@release/v1
+        with:
+          workflow-artifact-name: ${{ env.sdist-artifact }}
+      - uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+      - uses: actions/checkout@v3
+        name: Checkout project to get necessary dependencies for testing
+        with:
+          fetch-depth: 0
+      - name: Install dependencies
+        run: |
+          pip install --upgrade setuptools
+          pip install -r requirements-dev.txt
+      - name: Run tests
+        run: make test
+
+      - name: Upload coverage data
+        uses: codecov/codecov-action@v3
+        with:
+            token: ${{ secrets.CODECOV_TOKEN }}
+
+
+  check:  # This job does nothing and is only used for the branch protection
+    if: always()
+    needs: tests
+    runs-on: ubuntu-latest
+    steps:
+    - name: Decide whether the needed jobs succeeded or failed
+      uses: re-actors/alls-green@release/v1
+      with:
+        jobs: ${{ toJSON(needs) }}
+
+  deploy:  # Run only on creating release for new tag
+    name: Deploy
+    runs-on: ubuntu-latest
+    needs: check
+    environment: pypi
+    if: github.event_name == 'release' && github.event.action == 'created'
+    steps:
+      - uses: actions/download-artifact@v3
+        name: Download artifacts
+        with:
+          name: artifact
+          path: dist
+
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        name: Publish package to PyPI
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}

.github/workflows/gh-pages.yml

@@ -0,0 +1,49 @@
+name: Pages
+
+on:
+  push:
+    branches: ["master"]
+  pull_request:
+    branches: ["master"]
+  release:
+    types: [created]
+    branches:
+      - 'master'
+
+jobs:
+  build:
+    name: "Build docs"
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/setup-python@v4
+    - uses: actions/checkout@v3
+      with:
+        fetch-depth: 0 # otherwise, you will fail to push refs to dest repo
+    - name: "Install runtime dependencies"
+      run: >
+        pip install -r requirements-dev.txt
+        pip install -r requirements-doc.txt
+        pip install -e .
+    - name: "Install doc build deps and build with Sphinx"
+      run: make doc
+    - name: "Upload artifacts"
+      uses: actions/upload-pages-artifact@v1
+      with:
+        # Upload built docs
+        path: "./docs/_build/html/"
+  deploy:
+    name: "Deploy docs"
+    needs: build
+    runs-on: ubuntu-latest
+    # Grant GITHUB_TOKEN the permissions required to make a Pages deployment
+    permissions:
+      pages: write      # to deploy to Pages
+      id-token: write   # to verify the deployment originates from an appropriate source
+    # Deploy to the github-pages environment
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+    - uses: actions/deploy-pages@v1
+      id: deployment
+      name: "Deploy to GitHub Pages"