pytest-selective 0.1.0__tar.gz

pytest_selective-0.1.0/.gitattributes

@@ -0,0 +1,5 @@
+* text=auto
+*.py text eol=lf
+*.sh text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf

pytest_selective-0.1.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,29 @@
+name: Bug report
+description: Report a missed test, unexpected selection, or installation problem.
+body:
+  - type: textarea
+    id: behavior
+    attributes:
+      label: Expected and observed behavior
+      description: Include selected paths and the test you expected to run.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Minimal reproduction
+      description: Provide a small repository or commits, config, and the exact command. Remove secrets and private code.
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Package commit/version, Python, pytest, Git, operating system, and relevant plugins.
+    validations:
+      required: true
+  - type: textarea
+    id: evidence
+    attributes:
+      label: Selection report and full-suite result
+      description: Include sanitized JSON, explanation, or logs. State whether the complete suite catches the failure.

pytest_selective-0.1.0/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,15 @@
+## Summary
+
+Explain the problem and the resulting behavior.
+
+## Validation
+
+List commands actually run, their results, and evidence links when applicable.
+
+## Selection safety
+
+Describe effects on dependency completeness, fallbacks, and existing users.
+
+- [ ] Tests cover the behavior at the affected boundary.
+- [ ] Documentation and changelog describe public changes.
+- [ ] Claims distinguish measurements from estimates and limitations.

pytest_selective-0.1.0/.github/actions/plan-lanes/action.yml

@@ -0,0 +1,60 @@
+name: Select complete test lanes
+description: Skip unaffected CI lanes while preserving complete conformance runs and full-suite fallbacks.
+inputs:
+  config:
+    description: Repository-owned lane and dependency graph configuration.
+    required: true
+  base:
+    description: Base commit containing the complete change set.
+    required: true
+  full:
+    description: Run every lane for main, schedules, or an explicit full-test request.
+    default: 'false'
+  artifact-name:
+    description: >
+      Upload the lane plan under this name, where CI-esta's report renders it as
+      the sticky's lane section. Empty skips the upload.
+    default: test-lane-selection
+outputs:
+  lanes:
+    description: JSON object mapping lane names to booleans.
+    value: ${{ steps.plan.outputs.lanes }}
+runs:
+  using: composite
+  steps:
+    - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      with:
+        enable-cache: false
+    - uses: actions/cache@v5
+      continue-on-error: true
+      with:
+        path: .test-impact
+        key: pytest-selective-lanes-${{ runner.os }}-${{ github.sha }}-${{ github.run_attempt }}
+        restore-keys: pytest-selective-lanes-${{ runner.os }}-
+    - id: plan
+      shell: bash
+      env:
+        SELECTIVE_ACTION: ${{ github.action_path }}
+        SELECTIVE_CONFIG: ${{ inputs.config }}
+        SELECTIVE_BASE: ${{ inputs.base }}
+        SELECTIVE_FULL: ${{ inputs.full }}
+      run: |
+        export PYTHONPATH="$SELECTIVE_ACTION/../../../src${PYTHONPATH:+:$PYTHONPATH}"
+        args=(--config "$SELECTIVE_CONFIG" --base "$SELECTIVE_BASE" --github-output "$GITHUB_OUTPUT")
+        if [ "$SELECTIVE_FULL" = true ]; then args+=(--full); fi
+        uv run --no-project --python 3.14 --with pydantic==2.13.4 --with pyyaml==6.0.3 \
+          python -m pytest_selective.ci "${args[@]}" | tee test-lanes.json
+        {
+          echo '### Test lane selection'
+          echo '```json'
+          cat test-lanes.json
+          echo '```'
+        } >> "$GITHUB_STEP_SUMMARY"
+    - if: ${{ inputs.artifact-name != '' }}
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      with:
+        name: ${{ inputs.artifact-name }}
+        path: test-lanes.json
+        if-no-files-found: error
+        # A rerun of the job replaces its plan instead of failing on the existing name.
+        overwrite: true

pytest_selective-0.1.0/.github/actions/pytest-expansion/action.yml

@@ -0,0 +1,44 @@
+name: Explain global pytest expansion
+description: Reject unexplained conftest expansion before dependency setup or test allocation; uses the caller's checkout and Python.
+inputs:
+  python-executable:
+    description: Python interpreter at least as new as the inspected source syntax.
+    default: python3.14
+  base:
+    description: Full PR base or push-before ref; never an incremental test-selection baseline.
+    required: true
+  head:
+    description: Checked-out commit to inspect.
+    default: HEAD
+  module-roots:
+    description: Space-separated Python source roots, in import order.
+    default: '.'
+  project-import-prefixes:
+    description: Space-separated application/test module prefixes requiring reasons for new imports.
+    required: true
+  follow-import-prefixes:
+    description: Space-separated helper/plugin module prefixes to check transitively when loaded.
+    default: ''
+runs:
+  using: composite
+  steps:
+    - name: Check global pytest expansion
+      shell: bash
+      env:
+        EXPANSION_PYTHON: ${{ inputs.python-executable }}
+        EXPANSION_BASE: ${{ inputs.base }}
+        EXPANSION_HEAD: ${{ inputs.head }}
+        EXPANSION_MODULE_ROOTS: ${{ inputs.module-roots }}
+        EXPANSION_PROJECT_PREFIXES: ${{ inputs.project-import-prefixes }}
+        EXPANSION_FOLLOW_PREFIXES: ${{ inputs.follow-import-prefixes }}
+        SHARED_ACTION_PATH: ${{ github.action_path }}
+      run: |
+        # No install, checkout, or fail-open fallback: missing history is an error.
+        args=(--repo "$GITHUB_WORKSPACE" --base "$EXPANSION_BASE" --head "$EXPANSION_HEAD")
+        read -r -a roots <<< "$EXPANSION_MODULE_ROOTS"
+        read -r -a projects <<< "$EXPANSION_PROJECT_PREFIXES"
+        read -r -a helpers <<< "$EXPANSION_FOLLOW_PREFIXES"
+        for root in "${roots[@]}"; do args+=(--module-root "$root"); done
+        for prefix in "${projects[@]}"; do args+=(--project-import-prefix "$prefix"); done
+        for prefix in "${helpers[@]}"; do args+=(--follow-import-prefix "$prefix"); done
+        "$EXPANSION_PYTHON" "$SHARED_ACTION_PATH/../../../src/pytest_selective/pytest_expansion.py" "${args[@]}"

pytest_selective-0.1.0/.github/actions/test-impact/action.yml

@@ -0,0 +1,210 @@
+name: Cached test impact selection
+description: Select affected Python test files from both Git trees, falling back to all configured roots.
+inputs:
+  warm-only:
+    description: Populate the checked-out merged-tree cache without selecting or running tests.
+    default: 'false'
+  config:
+    description: Consumer-owned dependency graph configuration.
+    required: true
+  base:
+    description: Complete change-set base (a validated ancestor, PR base, or push before SHA).
+    required: true
+  head:
+    description: Exact checked-out commit.
+    default: HEAD
+  full-roots:
+    description: Space-separated complete test roots used if planning cannot prove a narrower scope.
+    required: true
+  full:
+    description: Force the complete suite for schedules, explicit labels, or coverage checkpoints.
+    default: 'false'
+  extra-files:
+    description: Optional newline file containing prior failure canaries or additional changed paths.
+    default: ''
+  alternate-base:
+    description: >-
+      A second proven base, normally the PR base when `base` is a previously validated tree.
+      Both are selected and the smaller selection wins: after main is merged into a validated
+      PR, the delta since that tree carries main's own changes and can reach every test.
+    default: ''
+  alternate-extra-files:
+    description: Newline file of extra paths for `alternate-base` (its unresolved failures and canaries).
+    default: ''
+  minimum-files:
+    description: Minimum nonempty selection for consumers with fixed shard counts.
+    default: '0'
+  max-shards:
+    description: Maximum parallel pytest processes.
+    default: '8'
+  durations:
+    description: pytest-split duration manifest used to size the shard pool; absent or unreadable falls back to file-count sizing.
+    default: '.test_durations'
+  shard-seconds:
+    description: Target wall time per shard. Shard count is the selected work divided by this, bounded by max-shards.
+    default: '120'
+  dependency-token:
+    description: >-
+      Read access to the repositories of first-party packages declared in `first_party_packages`.
+      With it, a lock change that only moves such a pin selects the tests reaching the modules that
+      moved instead of every test. Without it, or when the fetch fails, lock changes stay global.
+    default: ''
+  explanation-artifact:
+    description: >-
+      Artifact name for why the selection is this large, which the ci-observability action renders
+      into the PR sticky. Writing it never changes the selection. Empty skips the upload.
+    default: test-impact-explanation
+  graph-base:
+    description: >-
+      The PR's base commit. The explanation measures startup-floor and blast-radius changes from
+      its merge base with `head`, so they stay visible after `base` moves to a validated tree.
+      Without it, or without the history, they compare against `base`.
+    default: ${{ github.event.pull_request.base.sha }}
+outputs:
+  base:
+    value: ${{ steps.select.outputs.base }}
+    description: The base the selection was made from; `alternate-base` when it selected fewer tests.
+  mode:
+    value: ${{ steps.select.outputs.mode }}
+    description: full, scoped, or none.
+  test_roots:
+    value: ${{ steps.select.outputs.test_roots }}
+    description: Exact selected files, or complete roots on fallback.
+  shard_count:
+    value: ${{ steps.select.outputs.shard_count }}
+    description: Number of shards.
+  groups:
+    value: ${{ steps.select.outputs.groups }}
+    description: JSON shard indexes.
+  reason:
+    value: ${{ steps.select.outputs.reason }}
+    description: Selection summary.
+  dependencies-unchanged:
+    value: ${{ steps.select.outputs.dependencies_unchanged }}
+    description: >-
+      'true' only when every declared first-party lock and manifest is unchanged, or differs only
+      by pins whose installed files are byte-identical. Lanes that treat a lock change as "every
+      runtime changed" may skip on it. 'false' on any doubt, including every fallback.
+runs:
+  using: composite
+  steps:
+    - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      with:
+        enable-cache: false
+    - name: Restore parsed imports and resolved graphs
+      id: graph-cache
+      continue-on-error: true
+      uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5
+      with:
+        path: .test-impact
+        key: test-impact-v1-${{ runner.os }}-${{ github.sha }}-${{ github.run_attempt }}
+        restore-keys: |
+          test-impact-v1-${{ runner.os }}-
+    - name: Select affected files
+      id: select
+      shell: bash
+      env:
+        IMPACT_WARM_ONLY: ${{ inputs.warm-only }}
+        IMPACT_CONFIG: ${{ inputs.config }}
+        IMPACT_BASE: ${{ inputs.base }}
+        IMPACT_HEAD: ${{ inputs.head }}
+        IMPACT_FULL: ${{ inputs.full }}
+        IMPACT_EXTRA: ${{ inputs.extra-files }}
+        IMPACT_ALTERNATE_BASE: ${{ inputs.alternate-base }}
+        IMPACT_ALTERNATE_EXTRA: ${{ inputs.alternate-extra-files }}
+        IMPACT_ROOTS: ${{ inputs.full-roots }}
+        IMPACT_MINIMUM: ${{ inputs.minimum-files }}
+        IMPACT_SHARDS: ${{ inputs.max-shards }}
+        IMPACT_DURATIONS: ${{ inputs.durations }}
+        IMPACT_SHARD_SECONDS: ${{ inputs.shard-seconds }}
+        # Environment only: the CLI never takes it on argv, and git gets it per process, not in config.
+        IMPACT_DEPENDENCY_TOKEN: ${{ inputs.dependency-token }}
+        IMPACT_GRAPH_BASE: ${{ inputs.graph-base }}
+        SHARED_ACTION_PATH: ${{ github.action_path }}
+      run: |
+        export PYTHONPATH="$SHARED_ACTION_PATH/../../../src${PYTHONPATH:+:$PYTHONPATH}"
+        # Both modes must use the same isolated parser runtime, including YAML sidecars.
+        impact=(uv run --no-project --python 3.14 --with pydantic==2.13.4 --with pyyaml==6.0.3 python -m pytest_selective.impact_cli)
+        if [ "${IMPACT_WARM_ONLY:-false}" = true ]; then
+          if "${impact[@]}" warm --config "$IMPACT_CONFIG" --head "$IMPACT_HEAD"; then
+            echo "Merged-tree test impact cache is ready" >> "$GITHUB_STEP_SUMMARY"
+          else
+            echo "::warning::Test impact cache warming failed; future runs will rebuild it"
+          fi
+          exit 0
+        fi
+        args=(affected --config "$IMPACT_CONFIG" --base "$IMPACT_BASE" --head "$IMPACT_HEAD"
+              --max-shards "$IMPACT_SHARDS" --minimum-files "$IMPACT_MINIMUM" --github-output "$GITHUB_OUTPUT" --output test-impact-report.json
+              --durations "$IMPACT_DURATIONS" --shard-seconds "$IMPACT_SHARD_SECONDS"
+              --explanation-output test-impact-explanation.json)
+        # A reused workspace must not upload a previous plan's explanation.
+        rm -f test-impact-explanation.json
+        if [ "$IMPACT_FULL" = true ]; then args+=(--full); fi
+        if [ -n "$IMPACT_EXTRA" ]; then args+=(--extra-files "$IMPACT_EXTRA"); fi
+        if [ -n "${IMPACT_GRAPH_BASE:-}" ]; then args+=(--graph-base "$IMPACT_GRAPH_BASE"); fi
+        # Optional: an unfetchable alternate only forgoes a smaller selection.
+        if [ -n "${IMPACT_ALTERNATE_BASE:-}" ] && [ "$IMPACT_FULL" != true ] &&
+          git fetch --no-tags --depth=1 origin "$IMPACT_ALTERNATE_BASE"; then
+          args+=(--alternate-base "$IMPACT_ALTERNATE_BASE")
+          if [ -n "${IMPACT_ALTERNATE_EXTRA:-}" ]; then args+=(--alternate-extra-files "$IMPACT_ALTERNATE_EXTRA"); fi
+        fi
+        if [ -n "$IMPACT_BASE" ] && git fetch --no-tags --depth=1 origin "$IMPACT_BASE" &&
+          "${impact[@]}" "${args[@]}"; then
+          python3 - <<'PY'
+        import json, os
+        from pathlib import Path
+        report = json.loads(Path("test-impact-report.json").read_text())
+        summary = f"Test impact: {len(report['selected'])}/{report['total_files']} files; {report['mode']}; {report['elapsed_seconds']:.2f}s planning"
+        print(summary)
+        with open(os.environ["GITHUB_STEP_SUMMARY"], "a") as output:
+            output.write(summary + "\n")
+        PY
+        else
+          status=$?
+          if [ "$status" -eq 2 ]; then
+            echo "::error::Invalid test dependency or unparseable Python; fix the reported reader and path"
+            exit 2
+          fi
+          echo "::warning::Test impact proof unavailable; running all configured test roots"
+          {
+            echo "base=$IMPACT_BASE"
+            echo "mode=full"
+            echo "test_roots=$IMPACT_ROOTS"
+            echo "shard_count=$IMPACT_SHARDS"
+            echo "groups=$(python3 -c 'import json,os; print(json.dumps(list(range(1,int(os.environ["IMPACT_SHARDS"])+1))))')"
+            echo "reason=Test impact proof unavailable; complete suite fallback"
+            echo "dependencies_unchanged=false"
+          } >> "$GITHUB_OUTPUT"
+          # Replaces an earlier attempt's explanation, which describes a plan this attempt did not run.
+          echo '{"unavailable": "Test impact proof unavailable; complete suite fallback"}' > test-impact-explanation.json
+        fi
+    # A successful plan uploads its explanation; a fallback uploads the marker that replaces one.
+    - name: Upload selection explanation
+      if: ${{ inputs.warm-only != 'true' && inputs.explanation-artifact != '' && hashFiles('test-impact-explanation.json') != '' }}
+      continue-on-error: true
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      with:
+        name: ${{ inputs.explanation-artifact }}
+        path: test-impact-explanation.json
+        overwrite: true
+        retention-days: 7
+    - name: Save graph cache
+      if: ${{ steps.graph-cache.outputs.cache-hit != 'true' && hashFiles('.test-impact/cache.sqlite3') != '' }}
+      continue-on-error: true
+      uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5
+      with:
+        path: .test-impact
+        key: test-impact-v1-${{ runner.os }}-${{ github.sha }}-${{ github.run_attempt }}
+    # Last, so a failure here costs neither the explanation upload nor the cache: it fails the plan
+    # when this PR grows the startup floor past the config's `floor_budget` (no budget, no check).
+    - name: Check the startup-floor budget
+      if: ${{ inputs.warm-only != 'true' && hashFiles('test-impact-explanation.json') != '' }}
+      shell: bash
+      env:
+        IMPACT_CONFIG: ${{ inputs.config }}
+        SHARED_ACTION_PATH: ${{ github.action_path }}
+      run: |
+        export PYTHONPATH="$SHARED_ACTION_PATH/../../../src${PYTHONPATH:+:$PYTHONPATH}"
+        uv run --no-project --python 3.14 --with pydantic==2.13.4 --with pyyaml==6.0.3 \
+          python -m pytest_selective.impact_cli floor-budget \
+          --config "$IMPACT_CONFIG" --explanation test-impact-explanation.json

pytest_selective-0.1.0/.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      actions:
+        patterns: ["*"]
+  - package-ecosystem: uv
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      development:
+        dependency-type: development

pytest_selective-0.1.0/.github/test-lanes.json

@@ -0,0 +1,38 @@
+{
+  "graph": {
+    "module_roots": [
+      "src",
+      "."
+    ],
+    "test_roots": [
+      "tests"
+    ],
+    "pytest_policy": {
+      "pyproject.toml": "7a78d68735c0e3b091962244620d3a17557951123c645970638f15d3a737d987"
+    }
+  },
+  "lanes": {
+    "tests": {
+      "roots": [
+        "tests"
+      ],
+      "inputs": [
+        "src/**",
+        "scripts/**",
+        "tests/**",
+        ".pre-commit-config.yaml",
+        ".python-version"
+      ]
+    }
+  },
+  "global_inputs": [
+    "**/pyproject.toml",
+    "pyproject.toml",
+    "**/uv.lock",
+    "uv.lock",
+    ".github/test-lanes.json",
+    ".github/workflows/ci.yml",
+    ".github/workflows/release.yml",
+    ".github/actions/**"
+  ]
+}

pytest_selective-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,119 @@
+name: CI
+on:
+  push:
+    branches: [main]
+  pull_request:
+    types: [opened, synchronize, reopened, labeled, unlabeled]
+  workflow_dispatch:
+  workflow_call:
+permissions:
+  contents: read
+concurrency:
+  # Only newer revisions of the same PR supersede work; keep every main/manual run.
+  group: ci-${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.run_attempt == 1 && github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' && github.run_attempt == 1 }}
+jobs:
+  select-tests:
+    runs-on: ubuntu-latest
+    outputs:
+      lanes: ${{ steps.plan.outputs.lanes }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+      - id: plan
+        uses: ./.github/actions/plan-lanes
+        with:
+          config: .github/test-lanes.json
+          base: ${{ github.event.pull_request.base.sha || github.event.before }}
+          full: ${{ github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'test:full') }}
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: gigaverse-app/ci-esta/.github/actions/setup-cached-uv@966f25c4fac4c64bf4ff9df0404321f91f882293
+        with:
+          python-version: '3.14'
+      - run: uv run --locked pre-commit run --all-files
+      - name: Check aggregate gate against the execution lanes
+        run: >-
+          uv run --no-project --python 3.14
+          --with "ci-esta @ https://github.com/gigaverse-app/ci-esta/archive/966f25c4fac4c64bf4ff9df0404321f91f882293.tar.gz"
+          ci-esta check-workflow --workflow .github/workflows/ci.yml --lanes .github/test-lanes.json
+      - name: Validate routing even when the platform matrix is skipped
+        run: uv run --locked pytest -q tests/test_repository_ci.py
+      - name: Validate GitHub Actions
+        run: docker run --rm -v "$PWD:/repo" -w /repo rhysd/actionlint:1.7.7 -color
+  tests:
+    needs: select-tests
+    if: >-
+      ${{ always() && !cancelled() && (needs.select-tests.result != 'success' ||
+          fromJSON(needs.select-tests.outputs.lanes).tests) }}
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ['3.11', '3.14']
+        os: [ubuntu-latest, windows-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: gigaverse-app/ci-esta/.github/actions/setup-cached-uv@966f25c4fac4c64bf4ff9df0404321f91f882293
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Use native Git for Windows
+        uses: gigaverse-app/ci-esta/.github/actions/native-windows-git@966f25c4fac4c64bf4ff9df0404321f91f882293
+      - name: Record coverage runtime
+        run: uv run --locked python -m coverage --version
+      - run: uv run --locked pytest -q -n 4 --durations=20 --junitxml=test-timings.xml --cov --cov-report=term-missing --cov-report=xml
+      - uses: gigaverse-app/ci-esta/.github/actions/learn-test-timings@966f25c4fac4c64bf4ff9df0404321f91f882293
+        with:
+          junit-pattern: test-timings.xml
+          artifact-name: test-timings-${{ matrix.python }}-${{ matrix.os }}
+      - run: uv run --locked python scripts/tutorial.py --output tutorial-report.json
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: evidence-${{ matrix.os }}-${{ matrix.python }}
+          path: |
+            coverage.xml
+            tutorial-report.json
+  pytest-minimum:
+    needs: select-tests
+    if: >-
+      ${{ always() && !cancelled() && (needs.select-tests.result != 'success' ||
+          fromJSON(needs.select-tests.outputs.lanes).tests) }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: gigaverse-app/ci-esta/.github/actions/setup-cached-uv@966f25c4fac4c64bf4ff9df0404321f91f882293
+        with:
+          python-version: '3.11'
+      - run: uv pip install 'pytest==8.0.0'
+      - run: uv run --no-sync pytest -q -n 4 --durations=20
+  distributions:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: gigaverse-app/ci-esta/.github/actions/setup-cached-uv@966f25c4fac4c64bf4ff9df0404321f91f882293
+        with:
+          python-version: '3.14'
+      - run: uv build
+      - run: uv run --locked twine check --strict dist/*
+      - run: uv run --locked python scripts/check_metadata.py
+      - run: uv run --locked python scripts/smoke_distribution.py
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: distributions
+          path: dist/*
+          if-no-files-found: error
+
+  validation-gate:
+    name: Validation gate
+    needs: [select-tests, quality, tests, pytest-minimum, distributions]
+    if: ${{ !cancelled() }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: gigaverse-app/ci-esta/.github/actions/validation-gate@966f25c4fac4c64bf4ff9df0404321f91f882293
+        with:
+          needs: ${{ toJSON(needs) }}
+          lanes: ${{ needs.select-tests.outputs.lanes || '{}' }}
+          lane-jobs: '{"tests":["tests"],"pytest-minimum":["tests"]}'

pytest_selective-0.1.0/.github/workflows/observe-ci.yml

@@ -0,0 +1,24 @@
+name: CI observability
+
+on:
+  workflow_run:
+    workflows: [CI]
+    types: [completed]
+
+permissions:
+  contents: read
+  actions: read
+  checks: read
+  pull-requests: write # Posts the CI-esta sticky.
+
+jobs:
+  report:
+    uses: gigaverse-app/ci-esta/.github/workflows/report.yml@966f25c4fac4c64bf4ff9df0404321f91f882293
+    with:
+      run-id: ${{ github.event.workflow_run.id }}
+      run-attempt: ${{ github.event.workflow_run.run_attempt }}
+      head-sha: ${{ github.event.workflow_run.head_sha }}
+      pull-request-number: ${{ format('{0}', github.event.workflow_run.pull_requests[0].number || '') }}
+      post-sticky: true
+      required-gates-json: '[{"kind":"actions_job","job_name":"Validation gate"}]'
+      analyze-critical-path: true

pytest_selective-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,64 @@
+name: Publish
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+permissions:
+  contents: read
+
+jobs:
+  validate-tag:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
+        with:
+          python-version: '3.14'
+      - name: Require a version-matching tag
+        env:
+          RELEASE_REF: ${{ github.ref }}
+        run: |
+          uv run --no-project python -c 'import os, pathlib, tomllib; version = tomllib.loads(pathlib.Path("pyproject.toml").read_text())["project"]["version"]; assert os.environ["RELEASE_REF"] == f"refs/tags/v{version}", "Run publishing from the version-matching v tag"'
+  checks:
+    needs: validate-tag
+    uses: ./.github/workflows/ci.yml
+  publish:
+    needs: checks
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/pytest-selective/
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
+        with:
+          name: distributions
+          path: dist
+      - name: Publish tested distributions with attestations
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1
+
+  action-version:
+    needs: publish
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Advance the compatible Actions tag after publication
+        env:
+          GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
+          RELEASE_TAG: ${{ github.ref_name }}
+          RELEASE_SHA: ${{ github.sha }}
+        run: |
+          if [[ ! "$RELEASE_TAG" =~ ^v([0-9]+)\.([0-9]+)\.([0-9]+)$ ]]; then
+            exit 0
+          fi
+          alias="v${BASH_REMATCH[1]}.${BASH_REMATCH[2]}"
+          if gh api "repos/$GH_REPO/git/ref/tags/$alias" --silent; then
+            gh api --method PATCH "repos/$GH_REPO/git/refs/tags/$alias" \
+              -f sha="$RELEASE_SHA" -F force=true --silent
+          else
+            gh api --method POST "repos/$GH_REPO/git/refs" \
+              -f ref="refs/tags/$alias" -f sha="$RELEASE_SHA" --silent
+          fi