Separate security scanned lockfile #1971

	name: Continuous Integration

	on:
	pull_request:
	schedule:
	- cron: "0 0 * * *"

	jobs:
	test:
	runs-on: ${{ matrix.platform }}
	strategy:
	matrix:
	platform: [ ubuntu-latest, macos-latest, windows-latest ]
	python-version: [ "3.10", "3.11", "3.12" ]
	steps:
	- uses: actions/checkout@v4
	- name: Install uv and set the python version
	uses: astral-sh/setup-uv@v5
	with:
	python-version: ${{ matrix.python-version }}
	- name: Install dependencies
	run: uv pip install --constraint requirements.txt --editable .[cicd,testing]
	- name: Run tests
	run: ./test

	test_docs:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Install uv and set the python version
	uses: astral-sh/setup-uv@v5
	with:
	python-version: "3.12"
	- name: Install dependencies
	run: \|
	uv pip install --constraint requirements.txt --editable .[cicd,docs]
	sudo apt-get install graphviz
	- name: Test if docs can be built
	run: ./docbuild

	test_requirements_lock:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Install uv and set the python version
	uses: astral-sh/setup-uv@v5
	with:
	python-version: "3.12"
	- name: Install dependencies
	run: uv pip install --constraint requirements.txt --editable .[cicd]
	- name: Regenerate requirements.txt
	run: python update-requirements.py
	- name: Check lockfile is up-to-date
	run: git diff --exit-code HEAD requirements.txt

Provide feedback