CI workflow (wolffcatskyy/crowdsec-blocklist-import)

name: CI
 
on:
  push:
    branches: [main]
    tags:
      - 'v*.*.*'
  pull_request:
    branches: [main]
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
 
jobs:
  test:
    timeout-minutes: 30
    runs-on: latchkey-small
 
    steps:
      - name: Checkout
        uses: actions/checkout@v4
 
      - name: Set up Python 3.11
        uses: actions/setup-python@v5
        with:
          cache: 'pip'
          python-version: '3.11'
 
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements.txt
          pip install pytest flake8
 
      - name: Run pytest
        run: |
          python -m pytest test_blocklist_import.py -v
 
      - name: Check Python syntax
        run: |
          python -m py_compile blocklist_import.py
 
      - name: Lint with flake8
        run: |
          flake8 blocklist_import.py --max-line-length 120 --ignore E501,W503
 
  release:
    timeout-minutes: 30
    name: Create GitHub Release
    needs: test
    runs-on: latchkey-small
    if: startsWith(github.ref, 'refs/tags/v')
    permissions:
      contents: write
 
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
 
      - name: Extract changelog for this version
        id: changelog
        run: |
          TAG="${GITHUB_REF#refs/tags/}"
          VER="${TAG#v}"
          if [ -f CHANGELOG.md ]; then
            # Extract the section between this tag and the previous one
            NOTES=$(awk "/^## \[?${VER}\]?|^## ${VER}/{found=1; next} found && /^## /{exit} found{print}" CHANGELOG.md)
            if [ -z "$NOTES" ]; then
              NOTES="Release ${TAG}"
            fi
          else
            NOTES="Release ${TAG}"
          fi
          # Write to a file to safely handle multi-line content
          echo "$NOTES" > release_notes.txt
 
      - name: Create GitHub Release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          TAG="${GITHUB_REF#refs/tags/}"
          gh release create "$TAG" \
            --title "Release $TAG" \
            --notes-file release_notes.txt