MAINT: Update CIs

Author: larsoner

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      actions:
+        patterns:
+          - "*"

.github/release.yaml

@@ -0,0 +1,6 @@
+changelog:
+  exclude:
+    authors:
+      - dependabot
+      - pre-commit-ci
+      - github-actions

.github/workflows/release.yml

@@ -0,0 +1,49 @@
+# Upload a Python Package using Twine when a release is created
+
+name: Build
+on:  # yamllint disable-line rule:truthy
+  release:
+    types: [published]
+  push:
+    branches: ["main", "maint/*"]
+  pull_request:
+    branches: ["main", "maint/*"]
+
+permissions:
+  contents: read
+
+jobs:
+  package:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.10'
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install build twine
+      - run: python -m build --sdist --wheel
+      - run: twine check --strict dist/*
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist
+
+  pypi-upload:
+    needs: package
+    runs-on: ubuntu-latest
+    if: github.event_name == 'release'
+    permissions:
+      id-token: write  # for trusted publishing
+    environment:
+      name: pypi
+      url: https://pypi.org/p/mne
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        if: github.event_name == 'release'

.github/workflows/tests.yml

@@ -0,0 +1,68 @@
+name: 'Tests'
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.number }}-${{ github.event.ref }}
+  cancel-in-progress: true
+on:  # yamllint disable-line rule:truthy
+  push:
+    branches: ["master", "maint/*"]
+  pull_request:
+    branches: ["master", "maint/*"]
+
+permissions:
+  contents: read
+
+jobs:
+  pytest:
+    name: '${{ matrix.os }} / ${{ matrix.python }}'
+    timeout-minutes: 70
+    runs-on: ${{ matrix.os }}
+    defaults:
+      run:
+        shell: bash -el {0}
+    env:
+      MNE_HCP_N_RUNS: '3'
+      SUBJECTS_DIR: '${{ github.workspace }}/subjects'
+      MNE_LOGGING_LEVEL: warning
+    strategy:
+      matrix:
+        include:
+          - os: ubuntu-latest
+            python: '3.8'  # TODO: Bump to 3.12
+          # - os: macos-latest  # arm64 (Apple Silicon)
+          #   python: '3.12'
+          #   kind: mamba
+          # - os: macos-13  # latest Intel release
+          #   python: '3.12'
+          #   kind: mamba
+          # - os: windows-latest
+          #   python: '3.12'
+          # - os: ubuntu-20.04
+          #   python: '3.8'
+      fail-fast: false
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - uses: pyvista/setup-headless-display-action@main
+        with:
+          qt: true
+          pyvista: false
+      - run: pip install --upgrade pip setuptools
+      # TODO: Relax this pin
+      # TODO: Remove nose dependency
+      - run: pip install -ve . s3cmd mne scikit-learn nose pytest pytest-cov "mne<0.24" nibabel
+      - run: openssl aes-256-cbc -K "${{ secrets.encrypted_73bd2a498087_key }}" -iv "${{ secrets.encrypted_73bd2a498087_iv }}" -in .s3cfg.enc -out ~/.s3cfg -d
+      - run: python -c "from pathlib import Path; assert (Path('~').expanduser() / '.s3cfg').is_file()"
+      - run: mkdir ~/mne-hcp-data
+      - run: s3cmd get s3://mne-hcp-testing-data/mne-hcp-testing.tar.gz ~/mne-hcp-data/
+      - run: cd ~/mne-hcp-data/ && tar -xvzf mne-hcp-testing.tar.gz
+      - run: find ~/mne-hcp-data/mne-hcp-testing/105923 -name "*" > output.txt && cat output.txt | wc -l && head output.txt
+      - run: mkdir -p "${{ env.SUBJECTS_DIR}}" && python -c "import mne; mne.datasets.fetch_fsaverage(subjects_dir='${{ env.subjects_dir }}')"
+      - run: pytest -rfEXs --cov-report= --tb=short --durations 30 -v --cov=mne --cov-report xml hcp
+      - uses: codecov/codecov-action@v4
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+        if: success()