publish: Preserve downloaded models.json while run is waiting for approval #12

	name: CI

	on:
	push:
	branches:
	- main
	pull_request:

	permissions:
	contents: read

	jobs:
	zizmor:
	name: zizmor
	runs-on: ubuntu-latest
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
	with:
	inputs: .github
	advanced-security: false
	annotations: true

	test:
	name: test (py${{ matrix.python-version }})
	runs-on: ubuntu-latest
	environment: ci
	strategy:
	fail-fast: false
	matrix:
	python-version: ["3.12", "3.13", "3.14"]
	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Install uv
	uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0

	- name: Run tests, lint and typecheck
	run: uv run pytest

	ci-conclusion:
	name: CI Conclusion
	if: ${{ !cancelled() }}
	needs:
	- test
	- zizmor
	runs-on: ubuntu-latest
	steps:
	- name: Fail if any dependency did not succeed
	if: ${{ contains(needs..result, 'failure') \|\| contains(needs..result, 'cancelled') \|\| contains(needs.*.result, 'skipped') }}
	run: exit 1

	- name: Success
	run: echo "all CI jobs passed"

Provide feedback