lamindb_setup 1.19.0__tar.gz → 1.19.1__tar.gz

{lamindb_setup-1.19.0 → lamindb_setup-1.19.1}/.github/workflows/build.yml

@@ -1,320 +1,320 @@
-name: build
-
-on:
-  push:
-    branches: [main, staging]
-  pull_request:
-    branches: [main]
-  repository_dispatch:
-    types: [build]
-
-jobs:
-  # tests only on production hub
-  hub-prod:
-    runs-on: ubuntu-latest
-    timeout-minutes: 13
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.10"
-          cache: "pip"
-      - uses: aws-actions/configure-aws-credentials@v4
-        with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          aws-region: eu-central-1
-      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
-      - run: nox -s "install(group='hub-prod')"
-      - run: nox -s "build(lamin_env='prod', group='hub-prod')"
-      - uses: actions/upload-artifact@v4
-        with:
-          name: coverage--hub-prod
-          path: .coverage
-          include-hidden-files: true
-
-  # tests both on production and staging hub
-  hub-cloud:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - lamin_env: "prod"
-            python-version: "3.11"
-          - lamin_env: "staging"
-            python-version: "3.10"
-    timeout-minutes: 13
-    steps:
-      - uses: aws-actions/configure-aws-credentials@v4
-        with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          aws-region: eu-central-1
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v6
-        with:
-          python-version: ${{ matrix.python-version }}
-          cache: "pip"
-          cache-dependency-path: ".github/workflows/build.yml"
-      - uses: actions/checkout@v4
-        with:
-          repository: laminlabs/laminhub
-          token: ${{ secrets.GH_TOKEN_DEPLOY_LAMINAPP }}
-          path: laminhub
-          ref: main
-      - uses: actions/cache@v4
-        with:
-          path: ~/.cache/pre-commit
-          key: pre-commit-${{ runner.os }}-${{ hashFiles('.pre-commit-config.yaml') }}
-      - id: cache-postgres
-        uses: actions/cache@v4
-        with:
-          path: ~/postgres.tar
-          key: cache-postgres-0
-      - if: steps.cache-postgres.outputs.cache-hit != 'true'
-        run: docker pull postgres:latest && docker image save postgres:latest --output ~/postgres.tar
-      - if: steps.cache-postgres.outputs.cache-hit == 'true'
-        run: docker image load --input ~/postgres.tar
-      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
-      # account for in a different job
-      # - uses: "google-github-actions/auth@v0"
-      #   with:
-      #     credentials_json: "${{ secrets.GCP_CREDENTIALS }}"
-      # - uses: "google-github-actions/setup-gcloud@v0"
-      - run: nox -s "install(group='hub-cloud')"
-      - run: nox -s "build(lamin_env='${{ matrix.lamin_env }}', group='hub-cloud')"
-      - uses: actions/upload-artifact@v4
-        if: ${{ matrix.lamin_env == 'prod' }}
-        with:
-          name: coverage--hub-cloud
-          path: .coverage
-          include-hidden-files: true
-
-  core:
-    runs-on: ubuntu-latest
-    timeout-minutes: 13
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.10"
-          cache: "pip"
-          cache-dependency-path: ".github/workflows/build.yml"
-      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
-      - run: nox -s "install(group='core')"
-      - run: nox -s lint
-      - run: nox -s core
-        env:
-          TMP_AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          TMP_AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-      - uses: actions/upload-artifact@v4
-        with:
-          name: coverage--core
-          path: .coverage
-          include-hidden-files: true
-
-  # test low-level hub functionality
-  hub-local:
-    runs-on: ubuntu-latest
-    timeout-minutes: 13
-    steps:
-      - uses: aws-actions/configure-aws-credentials@v4
-        with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          aws-region: eu-central-1
-      - uses: actions/checkout@v4
-      - uses: actions/checkout@v4
-        with:
-          repository: laminlabs/laminhub
-          token: ${{ secrets.GH_TOKEN_DEPLOY_LAMINAPP }}
-          path: laminhub
-          ref: main
-      - name: Set env file for local test of edge functions
-        run: |
-          touch .env.local
-          echo "AWS_ACCESS_KEY_ID_HOSTED_S3=${{ secrets.AWS_ACCESS_KEY_ID }}" >> .env.local
-          echo "AWS_SECRET_ACCESS_KEY_HOSTED_S3=${{ secrets.AWS_SECRET_ACCESS_KEY }}" >> .env.local
-        working-directory: laminhub/backend/services/central/supabase
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.11" # we need to run everything for coverage on 3.11
-          cache: "pip"
-          cache-dependency-path: ".github/workflows/build.yml"
-      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
-      - run: nox -s "install(group='hub-local')"
-      - id: cache-supabase
-        uses: actions/cache@v4
-        with:
-          path: /var/lib/docker
-          key: cache-supabase
-      - uses: supabase/setup-cli@v1
-        with:
-          version: "2.72.7"
-      - run: nox -s hub_local
-        env:
-          LAMIN_ENV: "local"
-      - uses: actions/upload-artifact@v4
-        with:
-          name: coverage--hub-local
-          path: .coverage
-          include-hidden-files: true
-
-  # test custom proxies and certificates
-  connectivity:
-    runs-on: ubuntu-latest
-    timeout-minutes: 13
-    steps:
-      - uses: aws-actions/configure-aws-credentials@v4
-        with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          aws-region: eu-central-1
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.11"
-          cache: "pip"
-          cache-dependency-path: ".github/workflows/build.yml"
-      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
-      - run: nox -s "install(group='connectivity')"
-      - name: cache mitmproxy
-        id: cache-mitmproxy
-        uses: actions/cache@v4
-        with:
-          path: ~/mitmproxy.tar
-          key: cache-mitmproxy-0
-      - name: cache mitmproxy miss
-        if: ${{ steps.cache-mitmproxy.outputs.cache-hit != 'true' }}
-        run: docker pull mitmproxy/mitmproxy:latest && docker image save mitmproxy/mitmproxy:latest --output ~/mitmproxy.tar
-      - name: cache mitmproxy use
-        if: ${{ steps.cache-mitmproxy.outputs.cache-hit == 'true' }}
-        run: docker image load --input ~/mitmproxy.tar
-      - name: start mitmproxy
-        run: |
-          # Start mitmdump (headless mitmproxy) as a forward proxy on 8080
-          docker run -d \
-            --name mitmproxy \
-            -p 8080:8080 \
-            mitmproxy/mitmproxy:latest \
-            mitmdump --mode regular --listen-port 8080
-          # Give it a few seconds to start and generate the CA
-          sleep 10
-          echo "mitmproxy state:"
-          docker ps -a
-          echo "Container ~/.mitmproxy contents:"
-          docker exec mitmproxy ls -l /home/mitmproxy/.mitmproxy || true
-          echo "Container logs (if it still exited):"
-          docker logs mitmproxy || true
-      - name: export mitmproxy certificate
-        run: |
-          # Copy CA cert from inside the container to the workspace
-          docker cp mitmproxy:/home/mitmproxy/.mitmproxy/mitmproxy-ca-cert.pem ./mitmproxy-ca.pem
-          ls -l ./mitmproxy-ca.pem
-      - name: run tests
-        run: nox -s connectivity
-
-  profile:
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    env:
-      LAMIN_API_KEY: ${{ secrets.LAMIN_API_KEY_TESTUSER1 }}
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-          fetch-depth: 0
-      - uses: actions/setup-python@v6
-        with:
-          python-version: |
-            ${{ github.ref == 'refs/heads/release' && '3.11' ||
-                '3.13'
-                }}
-      - run: pip install git+https://github.com/laminlabs/laminci
-      - run: uv pip install --system git+https://github.com/laminlabs/lamin-cli
-      - run: uv pip install --system git+https://github.com/laminlabs/lamindb
-      - run: uv pip install --system git+https://github.com/laminlabs/laminprofiler
-      - run: uv pip install --system -e .
-      - run: lamin login
-      - run: lamin connect laminlabs/lamindata
-      - run: laminprofiler check tests/profiling/import_lamindb_setup.py --threshold 0.25
-      - run: laminprofiler check tests/profiling/print_lamindb_setup_settings.py --threshold 0.4
-      - run: laminprofiler check tests/profiling/connect_cli.py --threshold 2.0
-
-  coverage:
-    needs: [hub-prod, hub-cloud, core, hub-local]
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.11"
-          cache: "pip"
-      - run: |
-          pip install coverage[toml]
-          pip install --no-deps .
-      - uses: actions/download-artifact@v4
-      - name: run coverage
-        run: |
-          coverage combine coverage--*/.coverage*
-          coverage report --fail-under=0
-          coverage xml
-      - uses: codecov/codecov-action@v2
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-
-  docs:
-    needs: hub-cloud
-    runs-on: ubuntu-latest
-    steps:
-      - uses: aws-actions/configure-aws-credentials@v4
-        with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          aws-region: eu-central-1
-      - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-          fetch-depth: 0
-      - name: checkout lndocs
-        uses: actions/checkout@v4
-        with:
-          repository: laminlabs/lndocs
-          ssh-key: ${{ secrets.READ_LNDOCS }}
-          path: lndocs
-          ref: main
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.10"
-          cache: "pip"
-          cache-dependency-path: ".github/workflows/build.yml"
-      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
-      - run: nox -s "install(group='docs')"
-      - uses: actions/download-artifact@v4
-      - run: nox -s docs
-      - uses: nwtgck/actions-netlify@v1.2
-        with:
-          publish-dir: "_build/html"
-          production-deploy: ${{ github.event_name == 'push' }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          enable-commit-comment: false
-        env:
-          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
-          NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
-
-  notify:
-    if: always()
-    # this here is only for notifying developers of laminhub
-    # hence, it only needs groups hub-local and hub-cloud
-    needs: [hub-local, hub-cloud]
-    runs-on: ubuntu-latest
-    steps:
-      - uses: voxmedia/github-action-slack-notify-build@v1
-        if: ${{ ( needs.hub-local.result == 'failure' || needs.hub-cloud.result == 'failure' ) && github.event_name == 'repository_dispatch' }}
-        env:
-          SLACK_BOT_TOKEN: ${{ secrets.SLACK_GITHUB_ACTION }}
-        with:
-          channel_id: C05S2C02JHM
-          status: FAILURE
-          color: danger
+name: build
+
+on:
+  push:
+    branches: [main, staging]
+  pull_request:
+    branches: [main]
+  repository_dispatch:
+    types: [build]
+
+jobs:
+  # tests only on production hub
+  hub-prod:
+    runs-on: ubuntu-latest
+    timeout-minutes: 13
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.10"
+          cache: "pip"
+      - uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: eu-central-1
+      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
+      - run: nox -s "install(group='hub-prod')"
+      - run: nox -s "build(lamin_env='prod', group='hub-prod')"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: coverage--hub-prod
+          path: .coverage
+          include-hidden-files: true
+
+  # tests both on production and staging hub
+  hub-cloud:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - lamin_env: "prod"
+            python-version: "3.11"
+          - lamin_env: "staging"
+            python-version: "3.10"
+    timeout-minutes: 13
+    steps:
+      - uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: eu-central-1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: "pip"
+          cache-dependency-path: ".github/workflows/build.yml"
+      - uses: actions/checkout@v4
+        with:
+          repository: laminlabs/laminhub
+          token: ${{ secrets.GH_TOKEN_DEPLOY_LAMINAPP }}
+          path: laminhub
+          ref: main
+      - uses: actions/cache@v4
+        with:
+          path: ~/.cache/pre-commit
+          key: pre-commit-${{ runner.os }}-${{ hashFiles('.pre-commit-config.yaml') }}
+      - id: cache-postgres
+        uses: actions/cache@v4
+        with:
+          path: ~/postgres.tar
+          key: cache-postgres-0
+      - if: steps.cache-postgres.outputs.cache-hit != 'true'
+        run: docker pull postgres:latest && docker image save postgres:latest --output ~/postgres.tar
+      - if: steps.cache-postgres.outputs.cache-hit == 'true'
+        run: docker image load --input ~/postgres.tar
+      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
+      # account for in a different job
+      # - uses: "google-github-actions/auth@v0"
+      #   with:
+      #     credentials_json: "${{ secrets.GCP_CREDENTIALS }}"
+      # - uses: "google-github-actions/setup-gcloud@v0"
+      - run: nox -s "install(group='hub-cloud')"
+      - run: nox -s "build(lamin_env='${{ matrix.lamin_env }}', group='hub-cloud')"
+      - uses: actions/upload-artifact@v4
+        if: ${{ matrix.lamin_env == 'prod' }}
+        with:
+          name: coverage--hub-cloud
+          path: .coverage
+          include-hidden-files: true
+
+  core:
+    runs-on: ubuntu-latest
+    timeout-minutes: 13
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.10"
+          cache: "pip"
+          cache-dependency-path: ".github/workflows/build.yml"
+      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
+      - run: nox -s "install(group='core')"
+      - run: nox -s lint
+      - run: nox -s core
+        env:
+          TMP_AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          TMP_AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      - uses: actions/upload-artifact@v4
+        with:
+          name: coverage--core
+          path: .coverage
+          include-hidden-files: true
+
+  # test low-level hub functionality
+  hub-local:
+    runs-on: ubuntu-latest
+    timeout-minutes: 13
+    steps:
+      - uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: eu-central-1
+      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4
+        with:
+          repository: laminlabs/laminhub
+          token: ${{ secrets.GH_TOKEN_DEPLOY_LAMINAPP }}
+          path: laminhub
+          ref: main
+      - name: Set env file for local test of edge functions
+        run: |
+          touch .env.local
+          echo "AWS_ACCESS_KEY_ID_HOSTED_S3=${{ secrets.AWS_ACCESS_KEY_ID }}" >> .env.local
+          echo "AWS_SECRET_ACCESS_KEY_HOSTED_S3=${{ secrets.AWS_SECRET_ACCESS_KEY }}" >> .env.local
+        working-directory: laminhub/backend/services/central/supabase
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11" # we need to run everything for coverage on 3.11
+          cache: "pip"
+          cache-dependency-path: ".github/workflows/build.yml"
+      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
+      - run: nox -s "install(group='hub-local')"
+      - id: cache-supabase
+        uses: actions/cache@v4
+        with:
+          path: /var/lib/docker
+          key: cache-supabase
+      - uses: supabase/setup-cli@v1
+        with:
+          version: "2.72.7"
+      - run: nox -s hub_local
+        env:
+          LAMIN_ENV: "local"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: coverage--hub-local
+          path: .coverage
+          include-hidden-files: true
+
+  # test custom proxies and certificates
+  connectivity:
+    runs-on: ubuntu-latest
+    timeout-minutes: 13
+    steps:
+      - uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: eu-central-1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+          cache: "pip"
+          cache-dependency-path: ".github/workflows/build.yml"
+      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
+      - run: nox -s "install(group='connectivity')"
+      - name: cache mitmproxy
+        id: cache-mitmproxy
+        uses: actions/cache@v4
+        with:
+          path: ~/mitmproxy.tar
+          key: cache-mitmproxy-0
+      - name: cache mitmproxy miss
+        if: ${{ steps.cache-mitmproxy.outputs.cache-hit != 'true' }}
+        run: docker pull mitmproxy/mitmproxy:latest && docker image save mitmproxy/mitmproxy:latest --output ~/mitmproxy.tar
+      - name: cache mitmproxy use
+        if: ${{ steps.cache-mitmproxy.outputs.cache-hit == 'true' }}
+        run: docker image load --input ~/mitmproxy.tar
+      - name: start mitmproxy
+        run: |
+          # Start mitmdump (headless mitmproxy) as a forward proxy on 8080
+          docker run -d \
+            --name mitmproxy \
+            -p 8080:8080 \
+            mitmproxy/mitmproxy:latest \
+            mitmdump --mode regular --listen-port 8080
+          # Give it a few seconds to start and generate the CA
+          sleep 10
+          echo "mitmproxy state:"
+          docker ps -a
+          echo "Container ~/.mitmproxy contents:"
+          docker exec mitmproxy ls -l /home/mitmproxy/.mitmproxy || true
+          echo "Container logs (if it still exited):"
+          docker logs mitmproxy || true
+      - name: export mitmproxy certificate
+        run: |
+          # Copy CA cert from inside the container to the workspace
+          docker cp mitmproxy:/home/mitmproxy/.mitmproxy/mitmproxy-ca-cert.pem ./mitmproxy-ca.pem
+          ls -l ./mitmproxy-ca.pem
+      - name: run tests
+        run: nox -s connectivity
+
+  profile:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    env:
+      LAMIN_API_KEY: ${{ secrets.LAMIN_API_KEY_TESTUSER1 }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+      - uses: actions/setup-python@v6
+        with:
+          python-version: |
+            ${{ github.ref == 'refs/heads/release' && '3.11' ||
+                '3.13'
+                }}
+      - run: pip install git+https://github.com/laminlabs/laminci
+      - run: uv pip install --system git+https://github.com/laminlabs/lamin-cli
+      - run: uv pip install --system git+https://github.com/laminlabs/lamindb
+      - run: uv pip install --system git+https://github.com/laminlabs/laminprofiler
+      - run: uv pip install --system -e .
+      - run: lamin login
+      - run: lamin connect laminlabs/lamindata
+      - run: laminprofiler check tests/profiling/import_lamindb_setup.py --threshold 0.25
+      - run: laminprofiler check tests/profiling/print_lamindb_setup_settings.py --threshold 0.4
+      - run: laminprofiler check tests/profiling/connect_cli.py --threshold 2.0
+
+  coverage:
+    needs: [hub-prod, hub-cloud, core, hub-local]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+          cache: "pip"
+      - run: |
+          pip install coverage[toml]
+          pip install --no-deps .
+      - uses: actions/download-artifact@v4
+      - name: run coverage
+        run: |
+          coverage combine coverage--*/.coverage*
+          coverage report --fail-under=0
+          coverage xml
+      - uses: codecov/codecov-action@v2
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+
+  docs:
+    needs: hub-cloud
+    runs-on: ubuntu-latest
+    steps:
+      - uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: eu-central-1
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+      - name: checkout lndocs
+        uses: actions/checkout@v4
+        with:
+          repository: laminlabs/lndocs
+          ssh-key: ${{ secrets.READ_LNDOCS }}
+          path: lndocs
+          ref: main
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.10"
+          cache: "pip"
+          cache-dependency-path: ".github/workflows/build.yml"
+      - run: pip install "laminci@git+https://x-access-token:${{ secrets.LAMIN_BUILD_DOCS }}@github.com/laminlabs/laminci"
+      - run: nox -s "install(group='docs')"
+      - uses: actions/download-artifact@v4
+      - run: nox -s docs
+      - uses: nwtgck/actions-netlify@v1.2
+        with:
+          publish-dir: "_build/html"
+          production-deploy: ${{ github.event_name == 'push' }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          enable-commit-comment: false
+        env:
+          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
+
+  notify:
+    if: always()
+    # this here is only for notifying developers of laminhub
+    # hence, it only needs groups hub-local and hub-cloud
+    needs: [hub-local, hub-cloud]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: voxmedia/github-action-slack-notify-build@v1
+        if: ${{ ( needs.hub-local.result == 'failure' || needs.hub-cloud.result == 'failure' ) && github.event_name == 'repository_dispatch' }}
+        env:
+          SLACK_BOT_TOKEN: ${{ secrets.SLACK_GITHUB_ACTION }}
+        with:
+          channel_id: C05S2C02JHM
+          status: FAILURE
+          color: danger