# Path-filtered CI may skip; this always runs. Push includes main so the check
# runs on the default branch — GitHub only lists a workflow under “required status
# checks” after it has completed on the default branch at least once.
name: PR gate

on:
  pull_request:
    branches: [main]
  push:
    branches:
      - "**"

jobs:
  build:
    # Branch-protection search matches job name, not workflow title — keep unique.
    name: pr-gate
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"
          cache: pip
          cache-dependency-path: scripts/requirements-content.txt

      - name: Validate content catalogs
        run: |
          pip install -r scripts/requirements-content.txt
          python scripts/validate_content.py

      - name: Gate
        run: "true"