Separate security scanned lockfile #1952

	name: Continuous Integration

	on:
	pull_request:
	schedule:
	- cron: "0 0 * * *"

	jobs:
	test:
	runs-on: ${{ matrix.platform }}

	strategy:
	matrix:
	platform: [ ubuntu-latest, macos-latest, windows-latest ]
	python-version: [ "3.9", "3.10", "3.11", "3.12" ]

	steps:
	- uses: actions/checkout@v4

	- name: Install uv and set the python version
	uses: astral-sh/setup-uv@v5
	with:
	python-version: ${{ matrix.python-version }}

	- name: Install dependencies
	env:
	UV_SYSTEM_PYTHON: 1
	run: uv pip install --constraint requirements.txt --editable .[test]
	- name: Run tests
	run: ./test
	test_docs:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Setup Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	- name: Install dependencies
	env:
	UV_SYSTEM_PYTHON: 1
	run: \|
	uv pip install --constraint requirements.txt --editable .[docs]
	sudo apt-get install graphviz
	- name: Test if docs can be built
	run: ./docbuild

	test_requirements_lock:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Setup Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	- name: Install dependencies
	env:
	UV_SYSTEM_PYTHON: 1
	run: uv pip install --constraint requirements.txt --editable .
	- name: Regenerate requirements.txt
	run: python update-requirements.py
	- name: Check lockfile is up-to-date
	run: git diff --exit-code HEAD requirements.txt

Provide feedback