name: Python Tests

on: 
  push:
  pull_request:
    paths:
      - bindings/python/*
      - bindings/python/**/*.py
      - .github/workflows/*python.yml

concurrency:
  group: python-test-${{ github.ref }}
  cancel-in-progress: true

defaults:
  run:
    working-directory: ./bindings/python
    shell: bash -eux {0}
 
jobs:

  static:
    if: github.repository_owner == 'mongodb'
    runs-on: ubuntu-latest
    steps:
     - uses: actions/checkout@v5
       with:
        persist-credentials: false
     - uses: actions/setup-python@v6
     - name: "Run pre-commit"
       working-directory: .
       run: |
         pip install -U -q pre-commit
         pre-commit run --all-files --hook-stage manual
     - run: |
        pip install check-manifest
        check-manifest -v

  build:
    if: github.repository_owner == 'mongodb'
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
        python-version: ["3.9", "3.13", "3.14"]

    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 0
          persist-credentials: false
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v6
        with:
          allow-prereleases: true
          python-version: ${{ matrix.python-version }}
      - name: Build and test dist files
        run: |
          if [ "${{ matrix.python-version }}" == "3.14" ]; then 
            export PIP_PRE=1
          fi
          export LIBMONGOCRYPT_VERSION=$(cat ./scripts/libmongocrypt-version.txt)
          git fetch origin $LIBMONGOCRYPT_VERSION
          bash ./scripts/release.sh
