chore: switch to reusable workflow (#4809)

Author: ssbarnea

.github/workflows/tox.yml

@@ -1,8 +1,11 @@
 ---
+# cspell:ignore anthropics
 name: tox
 
 on:
   merge_group:
+    branches:
+      - "main"
   push:
     branches:
       - "main"
@@ -17,256 +20,20 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: true
 
-env:
-  FORCE_COLOR: 1 # tox, pytest, ansible-lint
-  PY_COLORS: 1
-
 jobs:
-  prepare:
-    name: prepare
-    runs-on: ubuntu-24.04
-    outputs:
-      matrix: ${{ steps.generate_matrix.outputs.matrix }}
-    steps:
-      - name: Determine matrix
-        id: generate_matrix
-        uses: coactions/dynamic-matrix@v4
-        with:
-          min_python: "3.10"
-          max_python: "3.13"
-          default_python: "3.13"
-          other_names: |
-            lint-pkg-schemas-eco:tox -e lint;tox -e pkg;tox -e schemas;tox -e eco
-            hook
-            docs
-            pre
-            py312-devel
-            py310-lower
-            py312-lower
-            py314-devel
-          platforms: linux,macos
-  test-action:
-    runs-on: ubuntu-24.04
-    env:
-      # This disables the github annotations in the output of ansible-lint action
-      # which might confuse users.
-      GITHUB_ACTIONS_TEST: "true"
-    steps:
-      - uses: actions/checkout@v5
-      - name: Self test 1 # Test without explicit ref - fallback to main
-        uses: ./
-        with:
-          # basically we only lint linter own configuration, which should be passing.
-          args: .ansible-lint
-      - name: Self test 2
-        uses: ./
-        with:
-          # basically we only lint linter own configuration, which should be passing.
-          args: .ansible-lint
-          working_directory: .
-      - name: Self test 3
-        uses: ./
-        with:
-          # basically we only lint linter own configuration, which should be passing.
-          args: .ansible-lint
-          working_directory: docs
-          expected_return_code: "2" # expected to fail because the given argument does not exist in this folder
-      - name: Self test 4 # Test explicit ref override - expect warning message
-        uses: ./
-        with:
-          args: .ansible-lint
-          gh_action_ref: "v25.5.0"
-      - name: Self test 5 # Test explicit ref to be own ref
-        uses: ./
-        with:
-          args: .ansible-lint
-          gh_action_ref: ${{ github.ref }}
-
-  build:
-    name: ${{ matrix.name }}
-    runs-on: ${{ matrix.os || 'ubuntu-24.04' }}
-    needs:
-      - prepare
-    defaults:
-      run:
-        shell: ${{ matrix.shell || 'bash'}}
-    strategy:
-      fail-fast: false
-      matrix: ${{ fromJson(needs.prepare.outputs.matrix) }}
-      # max-parallel: 5
-      # The matrix testing goal is to cover the *most likely* environments
-      # which are expected to be used by users in production. Avoid adding a
-      # combination unless there are good reasons to test it, like having
-      # proof that we failed to catch a bug by not running it. Using
-      # distribution should be preferred instead of custom builds.
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          fetch-depth: 0 # needed by setuptools-scm
-          submodules: true
-
-      - name: Set build cache(s)
-        uses: actions/cache@v4
-        with:
-          path: |
-            .cache/eco
-            .tox
-            examples/playbooks/collections/ansible_collections
-            ~/.ansible/collections
-            ~/.ansible/roles
-            ~/.cache/ansible-compat
-            ~/.cache/pre-commit
-          key: ${{ matrix.name }}-${{ matrix.os }}--${{ hashFiles('.pre-commit-config.yaml', 'tools/test-eco.sh', 'requirements.yml', 'examples/playbooks/collections/requirements.yml') }}
-
-      - name: Set up Python ${{ matrix.python_version || '3.10' }}
-        if: "!contains(matrix.shell, 'wsl')"
-        uses: actions/setup-python@v6
-        with:
-          cache: pip
-          python-version: ${{ matrix.python_version || '3.10' }}
-
-      - uses: actions/setup-node@v5
-        with:
-          node-version: 22
-          cache: "npm"
-          cache-dependency-path: test/schemas/package-lock.json
-
-      - name: Run ./tools/test-setup.sh
-        run: ./tools/test-setup.sh
-
-      - name: Install tox
-        run: |
-          python3 -m pip install --upgrade pip
-          python3 -m pip install --upgrade "tox>=4.0.0" "tox-uv>=1.25.0" "uv>=0.6.6"
-
-      - name: Log installed dists
-        run: python3 -m pip freeze --all
-
-      - run: ${{ matrix.command }}
-
-      - run: ${{ matrix.command2 }}
-        if: ${{ matrix.command2 }}
-
-      - run: ${{ matrix.command3 }}
-        if: ${{ matrix.command3 }}
-
-      - run: ${{ matrix.command4 }}
-        if: ${{ matrix.command4 }}
-
-      - run: ${{ matrix.command5 }}
-        if: ${{ matrix.command5 }}
-
-      - name: Archive logs
-        uses: coactions/upload-artifact@v4
-        with:
-          name: logs-${{ matrix.name }}.zip
-          include-hidden-files: true
-          if-no-files-found: ignore
-          path: |
-            .tox/**/coverage.xml
-
-      - name: Report failure if git reports dirty status
-        run: |
-          git checkout HEAD -- src/ansiblelint/schemas/__store__.json
-          if [[ -n $(git status -s) ]]; then
-            # shellcheck disable=SC2016
-            echo -n '::error file=git-status::'
-            printf '### Failed as git reported modified and/or untracked files\n```\n%s\n```\n' "$(git status -s)" | tee -a "$GITHUB_STEP_SUMMARY"
-            exit 99
-          fi
-        # https://github.com/actions/toolkit/issues/193
-  codeql:
-    name: codeql
-    runs-on: ubuntu-24.04
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: ["python"]
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v5
-
-      # Initializes the CodeQL tools for scanning.
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
-        with:
-          languages: ${{ matrix.language }}
-          # If you wish to specify custom queries, you can do so here or in a config file.
-          # By default, queries listed here will override any specified in a config file.
-          # Prefix the list here with "+" to use these queries and those in the config file.
-
-          # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
-          # queries: security-extended,security-and-quality
-
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
-        with:
-          category: "/language:${{matrix.language}}"
-
-  check:
-    if: always()
-    permissions:
-      id-token: write
-      checks: read
-
-    needs:
-      - build
-      - test-action
-
-    runs-on: ubuntu-24.04
-
-    steps:
-      # checkout needed for codecov action which needs codecov.yml file
-      - uses: actions/checkout@v5
-
-      - name: Set up Python # likely needed for coverage
-        uses: actions/setup-python@v6
-        with:
-          python-version: "3.13"
-
-      - run: pip3 install 'coverage>=7.5.1'
-
-      - name: Merge logs into a single archive
-        uses: actions/upload-artifact/merge@v4
-        with:
-          name: logs.zip
-          include-hidden-files: true
-          pattern: logs-*.zip
-          # artifacts like py312.zip and py312-macos do have overlapping files
-          separate-directories: true
-
-      - name: Download artifacts
-        uses: actions/download-artifact@v5
-        continue-on-error: true # to allow rerunning this job
-        with:
-          name: logs.zip
-          path: .
-
-      - name: Upload coverage data
-        uses: codecov/[email protected]
-        with:
-          name: ${{ matrix.name }}
-          # verbose: true # optional (default = false)
-          fail_ci_if_error: true
-          use_oidc: ${{ !(github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork) }} # cspell:ignore oidc
-
-      - name: Decide whether the needed jobs succeeded or failed
-        uses: re-actors/alls-green@release/v1
-        with:
-          jobs: ${{ toJSON(needs) }}
-
-      - name: Delete Merged Artifacts
-        uses: actions/upload-artifact/merge@v4
-        with:
-          include-hidden-files: true
-          delete-merged: true
-          pattern: logs-*.zip
+  tox:
+    uses: ansible/team-devtools/.github/workflows/tox.yml@main
+    secrets: inherit
+    with:
+      min_python: "3.10"
+      default_python: "3.13"
+      max_python: "3.13"
+      other_names: |
+        lint-pkg-schemas-eco:tox -e lint;tox -e pkg;tox -e schemas;tox -e eco
+        hook
+        docs
+        py312-devel
+        py310-lower
+        py312-lower
+        py314-devel
+      platforms: linux,macos

pyproject.toml

@@ -624,7 +624,6 @@ env_list = [
   "docs",
   "schemas",
   "lower",
-  "pre",
   "eco",
 ]
 requires = ["setuptools>=65.3", "tox>=4.30.2", "tox-extra>=2.1", "tox-uv>=1.28"]