---

# ─────────────────────────────────────────────────────────────────────────────

# _quality.yml

#

# Encapsulates quality checking, style/lint, and type checking.

# Fails the pipeline if any of these checks fail.

#

# Callers: development.yml, main.yml

# ─────────────────────────────────────────────────────────────────────────────

name: "Quality Gate (Reusable)"

on:

workflow_call:

inputs:

python_versions:

description: "JSON array of Python versions"

required: true

type: string

permissions:

contents: read

security-events: write

jobs:

quality:

name: "Quality (Python ${{ matrix.python-version }})"

runs-on: ubuntu-latest

strategy:

fail-fast: false

matrix:

python-version: ${{ fromJson(inputs.python_versions) }}

steps:

- name: Checkout repository

uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

- name: "Set up Python ${{ matrix.python-version }}"

uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5

with:

python-version: ${{ matrix.python-version }}

- name: "Install uv"

run: pip install uv

- name: "Set up toolchain"

uses: pypa/hatch@install

- name: "Run quality checks"

run: |

hatch run lint:pre-commit

types:

name: "Types (Python ${{ matrix.python-version }})"

runs-on: ubuntu-latest

strategy:

fail-fast: false

matrix:

python-version: ${{ fromJson(inputs.python_versions) }}

steps:

- name: Checkout repository

uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

- name: "Set up Python ${{ matrix.python-version }}"

uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5

with:

python-version: ${{ matrix.python-version }}

- name: "Install uv"

run: pip install uv

- name: "Set up toolchain"

uses: pypa/hatch@install

- name: "Run type checks"

run: |-

hatch run types:check