name: gatelock pre-commit

on:
  push:
    branches: [main]
    # The workflow's own file counts as gatelock: editing only this file used
    # to trigger nothing, so a fix to the job itself could never prove itself.
    paths: ['gatelock/**', '.github/workflows/gatelock-precommit.yml']
  pull_request:
    branches: [main]
    paths: ['gatelock/**', '.github/workflows/gatelock-precommit.yml']

jobs:
  pre-commit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.x"
          cache: pip
          cache-dependency-path: gatelock/requirements.txt
      - name: Install dependencies
        working-directory: gatelock
        run: pip install -r requirements.txt

      # Keyed on THIS package's config. pre-commit/action@v3.0.1 caches on
      # hashFiles('.pre-commit-config.yaml') -- the repo ROOT's -- so all three
      # package jobs shared one key, raced to overwrite it with hook sets built
      # from four different configs, and editing a per-package config did not
      # invalidate it. The cache was therefore silently wrong rather than
      # missing, and the hooks reinstalled from scratch on every run (38-49s).
      - uses: actions/cache@v4
        with:
          path: ~/.cache/pre-commit
          key: >-
            pre-commit-gatelock-${{ env.pythonLocation }}-${{
            hashFiles('gatelock/.pre-commit-config.yaml') }}
      - name: Run the hooks
        run: >-
          pre-commit run --config gatelock/.pre-commit-config.yaml
          --all-files --show-diff-on-failure