Pr test branch

.github/python-packages.json

@@ -0,0 +1,5 @@
+{
+    "nisyscfg": {
+        "package-basepath": "."
+    }
+}

.github/workflows/CI.yml

@@ -0,0 +1,51 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main  
+  workflow_call:
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  check_workflows:
+    name: Check workflows
+    uses: ./.github/workflows/check_workflows.yml
+  get_package_names:
+    name: Get package names
+    uses: ./.github/workflows/get_package_names.yml
+  check_packages:
+    name: Check ${{ matrix.package-name }}
+    needs: get_package_names
+    strategy:
+      matrix:
+        package-name: ${{ fromJson(needs.get_package_names.outputs.package-names) }}
+    uses: ./.github/workflows/check_package.yml
+    with:
+      package-name: ${{ matrix.package-name }}
+  test_packages:
+    name: Test ${{ matrix.package-name }}
+    needs: get_package_names
+    strategy:
+      matrix:
+        package-name: ${{ fromJson(needs.get_package_names.outputs.package-names) }}
+    uses: ./.github/workflows/test_package.yml
+    with:
+      package-name: ${{ matrix.package-name }}
+
+  test_wheel_build:
+    name: Test wheel build
+    needs: check_packages
+    uses: ./.github/workflows/test_wheel_build.yml
+
+  report_test_results:
+    name: Report test results
+    if: ${{ always() }}
+    needs: test_packages
+    uses: ./.github/workflows/report_test_results.yml
+    permissions:
+      checks: write # needed to push the aggregated report
+      pull-requests: write # needed to post the report to the PR
+

.github/workflows/PR.yml

@@ -0,0 +1,24 @@
+name: PR
+
+on:
+  pull_request:
+    branches:
+      - main
+  workflow_call:
+  workflow_dispatch:
+
+permissions: {}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  run_ci:
+    name: Run CI
+    uses: ./.github/workflows/CI.yml
+    permissions:
+      checks: write # needed to push the aggregated test results report
+      pull-requests: write # needed to post the test results report to the PR
+
+
+

.github/workflows/check_package.yml

@@ -0,0 +1,19 @@
+name: Check package
+
+on:
+  workflow_call:
+    inputs:
+      package-name:
+        description: 'The name of the package folder to check.'
+        default: ''
+        required: true
+        type: string
+
+permissions: {}
+
+jobs:
+  get_package_info:
+    name: Get package info for ${{ inputs.package-name }}
+    uses: ./.github/workflows/get_package_info.yml
+    with:
+      package-name: ${{ inputs.package-name }}

.github/workflows/check_workflows.yml

@@ -0,0 +1,26 @@
+name: Check workflows
+
+on:
+  workflow_call:
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  zizmor:
+    name: Run zizmor
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        with:
+          advanced-security: false  # TODO: use the default when we publish the repo
+          inputs: |
+            .github/workflows
+
+
+

.github/workflows/get_package_info.yml

@@ -0,0 +1,64 @@
+name: Get package info
+
+on:
+  workflow_call:
+    inputs:
+      package-name:
+        description: 'The name of the package from .github/python-packages.json.'
+        default: ''
+        required: true
+        type: string
+    outputs:
+      package-basepath:
+        description: 'The package base path relative to the repo root.'
+        # NOTE: This is not the absolute path, because downstream actions are expected to be run on multiple platforms.
+        value: ${{ jobs.get_package_info.outputs.package-basepath }}
+      install-extras:
+        description: 'A space-separated list of package extras to install.'
+        value: ${{ jobs.get_package_info.outputs.install-extras }}
+permissions: {}
+
+jobs:
+  get_package_info:
+    name: Get package info for ${{ inputs.package-name }}
+    runs-on: ubuntu-latest
+    outputs:
+      package-basepath: ${{ steps.parse_json.outputs.package-basepath }}
+      install-extras: ${{ steps.parse_json.outputs.install-extras }}
+      should-check-docs: ${{ steps.parse_json.outputs.should-check-docs }}
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Get package info from JSON
+        id: parse_json
+        env:
+          PACKAGE_NAME: ${{ inputs.package-name }}
+        # NOTE: jq only supports standard JSON, not JSONC or JSON5
+        run: |
+          info=$(jq -c --arg name "$PACKAGE_NAME" '.[$name]' "./.github/python-packages.json")
+          if [ "$info" = "null" ]; then
+            echo "Error: Package '$PACKAGE_NAME' not found in .github/python-packages.json." >&2
+            exit 1
+          fi
+
+          package_basepath=$(echo "$info" | jq -r '."package-basepath"')
+          install_extras=$(echo "$info" | jq -r '."install-extras"')
+
+          should_check_docs=false
+          if [ -d "${package_basepath}/docs" ]; then
+            should_check_docs=true
+          fi
+
+          if [ "${install_extras}" == "null" ]; then
+            install_extras=""
+          fi
+          echo "package-basepath=${package_basepath}" >> $GITHUB_OUTPUT
+          echo "install-extras=${install_extras}" >> $GITHUB_OUTPUT
+          echo "should-check-docs=${should_check_docs}" >> $GITHUB_OUTPUT
+      - name: Show package info
+        env:
+          STEP_OUTPUTS: ${{ toJSON(steps.parse_json.outputs) }}
+        run: |
+          echo "$STEP_OUTPUTS"

.github/workflows/get_package_names.yml

@@ -0,0 +1,33 @@
+name: Get package names
+
+on:
+  workflow_call:
+    outputs:
+      package-names:
+        description: "List of package names from .github/python-packages.json"
+        value: ${{ jobs.get_package_names.outputs.package-names }}
+
+permissions: {}
+
+jobs:
+  get_package_names:
+    name: Get package names
+    runs-on: ubuntu-latest
+    outputs:
+      package-names: ${{ steps.parse_json.outputs.package-names }}
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Get package info from JSON
+        id: parse_json
+        # NOTE: jq only supports standard JSON, not JSONC or JSON5
+        run: |
+          info=$(jq -c 'keys' ./.github/python-packages.json)
+          if [ -z "$info" ] || [ "$info" = "[]" ]; then
+            echo "Error: No package names found in .github/python-packages.json" >&2
+            exit 1
+          fi
+          echo "Package names: $info"
+          echo "package-names=$info" >> $GITHUB_OUTPUT