name: CI

on:
  pull_request:
  push:
    tags:
      - v*
    branches:
      - main

concurrency:
  group: ci-${{ github.head_ref || github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  build:
    name: 🔨 Build (${{ matrix.go-version }})
    strategy:
      fail-fast: false
      matrix:
        go-version: [1.25.x, 1.26.x]
    runs-on: ubuntu-latest
    steps:
      - name: 📥 Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: ⬇️ Setup Go
        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
        with:
          go-version: ${{ matrix.go-version }}

      - name: 🔨 Build
        run: go build -v ./cmd/task

  test:
    name: 🧪 Test (${{ matrix.go-version }}, ${{ matrix.platform }})
    strategy:
      fail-fast: false
      matrix:
        go-version: [1.25.x, 1.26.x]
        platform: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.platform }}
    steps:
      - name: 📥 Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: ⬇️ Setup Go
        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
        with:
          go-version: ${{ matrix.go-version }}

      - name: ⬇️ Setup Task
        uses: go-task/setup-task@v2

      - name: 🧪 Test
        run: task test --output group --output-group-begin '::group::{{.TASK}}' --output-group-end '::endgroup::'

  lint:
    name: 🔍 Lint (${{ matrix.go-version }})
    strategy:
      fail-fast: false
      matrix:
        go-version: [1.25.x, 1.26.x]
    runs-on: ubuntu-latest
    steps:
      - name: 📥 Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: ⬇️ Setup Go
        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
        with:
          go-version: ${{ matrix.go-version }}

      - name: 🔍 Lint
        uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
        with:
          version: v2.12.2

  lint-jsonschema:
    name: 📋 Lint JSON Schema
    runs-on: ubuntu-latest
    steps:
      - name: 📥 Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: ⬇️ Setup Python
        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: 3.14

      - name: ⬇️ Install check-jsonschema
        run: python -m pip install 'check-jsonschema==0.27.3'

      - name: 📋 Validate JSON Schema
        run: check-jsonschema --check-metaschema website/src/public/schema.json

  govulncheck:
    name: 🛡️ Vulnerabilities
    runs-on: ubuntu-latest
    steps:
      - uses: golang/govulncheck-action@032d45514ae346b1db93c04b0c90b841c370344f # v1.1.0