build(deps): bump streamlink from 6.5.0 to 8.4.0 in /packages/clip-processor-py

.github/workflows/builder.yml

@@ -5,132 +5,97 @@ on:
   push:
     branches:
       - "**"
-    paths:
-      - 'packages/dota/**'           # Dota service and related changes
-      - 'packages/twitch-chat/**'    # Twitch Chat service changes
-      - 'packages/steam/**'          # Steam service changes
-      - 'packages/twitch-events/**'  # Twitch Events service changes
-      - 'packages/shared-utils/**'   # Shared utilities used by multiple services
-      - 'packages/profanity-filter/**'
-      - 'package.json'
-      - 'bun.lock'
-      - 'packages/Dockerfile.bun'    # Shared Dockerfile for bun-based services
-      - 'docker-compose.yml'         # Compose file changes might affect all services
-      - '.github/workflows/builder.yml' # The build workflow itself (affects all images)
+
+concurrency:
+  group: builder-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
-  # Dota job remains separate because it has extra change checks
-  dota:
+  changes:
     runs-on: ubuntu-latest
-    environment: prod
-    permissions:
-      packages: write
+    outputs:
+      services: ${{ steps.select.outputs.services }}
     steps:
       - uses: actions/checkout@v6
         with:
-          fetch-depth: 2
-
-      - name: Check for changes in dota service
-        id: dota-changes
-        run: |
-          git diff --name-only HEAD^ HEAD | grep -q "^packages/profanity-filter/" && echo "profanity_filter_changed=true" >> $GITHUB_OUTPUT || echo "profanity_filter_changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^package.json\|^bun.lock" && echo "deps_changed=true" >> $GITHUB_OUTPUT || echo "deps_changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^packages/dota/" && echo "changed=true" >> $GITHUB_OUTPUT || echo "changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^packages/shared-utils/" && echo "shared_utils_changed=true" >> $GITHUB_OUTPUT || echo "shared_utils_changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^packages/Dockerfile.bun" && echo "dockerfile_changed=true" >> $GITHUB_OUTPUT || echo "dockerfile_changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^docker-compose.yml" && echo "compose_changed=true" >> $GITHUB_OUTPUT || echo "compose_changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^.github/workflows/builder.yml" && echo "workflow_changed=true" >> $GITHUB_OUTPUT || echo "workflow_changed=false" >> $GITHUB_OUTPUT
-
-      - name: Extract branch name
-        if: ${{ github.event_name == 'workflow_dispatch' || steps.dota-changes.outputs.changed == 'true' || steps.dota-changes.outputs.dockerfile_changed == 'true' || steps.dota-changes.outputs.compose_changed == 'true' || steps.dota-changes.outputs.deps_changed == 'true' || steps.dota-changes.outputs.profanity_filter_changed == 'true' || steps.dota-changes.outputs.shared_utils_changed == 'true' || steps.dota-changes.outputs.workflow_changed == 'true' }}
-        shell: bash
-        run: |
-          echo "BRANCH_NAME=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
-          # Sanitize branch name for Docker tag (replace '/' with '-')
-          echo "DOCKER_TAG=$(echo ${GITHUB_REF#refs/heads/} | sed 's/\//-/g')" >> $GITHUB_ENV
-          # Immutable per-commit tag + OCI label metadata
-          echo "GIT_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
-          echo "BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> $GITHUB_ENV
+          fetch-depth: 0
 
-      - name: Set up Docker Buildx
-        if: ${{ github.event_name == 'workflow_dispatch' || steps.dota-changes.outputs.changed == 'true' || steps.dota-changes.outputs.dockerfile_changed == 'true' || steps.dota-changes.outputs.compose_changed == 'true' || steps.dota-changes.outputs.deps_changed == 'true' || steps.dota-changes.outputs.profanity_filter_changed == 'true' || steps.dota-changes.outputs.shared_utils_changed == 'true' || steps.dota-changes.outputs.workflow_changed == 'true' }}
-        uses: docker/setup-buildx-action@v4
+      # Single source of truth for the build dependency graph. paths-filter
+      # diffs the full push range (github.event.before..after), so multi-commit
+      # pushes can't skip a rebuild. package.json/bun.lock are listed for every
+      # service since they all share the root lockfile + bun install.
+      - uses: dorny/paths-filter@v4.0.1
+        id: filter
         with:
-          driver-opts: |
-            network=host
-            image=moby/buildkit:latest
-          buildkitd-flags: --debug
+          filters: |
+            dota:
+              - 'packages/dota/**'
+              - 'packages/profanity-filter/**'
+              - 'packages/shared-utils/**'
+              - 'packages/Dockerfile.bun'
+              - 'docker-compose.yml'
+              - 'package.json'
+              - 'bun.lock'
+              - '.github/workflows/builder.yml'
+            twitch-chat:
+              - 'packages/twitch-chat/**'
+              - 'packages/shared-utils/**'
+              - 'packages/Dockerfile.bun'
+              - 'docker-compose.yml'
+              - 'package.json'
+              - 'bun.lock'
+              - '.github/workflows/builder.yml'
+            steam:
+              - 'packages/steam/**'
+              - 'packages/shared-utils/**'
+              - 'packages/Dockerfile.bun'
+              - 'docker-compose.yml'
+              - 'package.json'
+              - 'bun.lock'
+              - '.github/workflows/builder.yml'
+            twitch-events:
+              - 'packages/twitch-events/**'
+              - 'packages/shared-utils/**'
+              - 'packages/Dockerfile.bun'
+              - 'docker-compose.yml'
+              - 'package.json'
+              - 'bun.lock'
+              - '.github/workflows/builder.yml'
 
-      - name: Login to ghcr
-        if: ${{ github.event_name == 'workflow_dispatch' || steps.dota-changes.outputs.changed == 'true' || steps.dota-changes.outputs.dockerfile_changed == 'true' || steps.dota-changes.outputs.compose_changed == 'true' || steps.dota-changes.outputs.deps_changed == 'true' || steps.dota-changes.outputs.profanity_filter_changed == 'true' || steps.dota-changes.outputs.shared_utils_changed == 'true' || steps.dota-changes.outputs.workflow_changed == 'true' }}
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GHA_PAT }}
-
-      - name: Build and push
-        if: ${{ github.event_name == 'workflow_dispatch' || steps.dota-changes.outputs.changed == 'true' || steps.dota-changes.outputs.dockerfile_changed == 'true' || steps.dota-changes.outputs.compose_changed == 'true' || steps.dota-changes.outputs.deps_changed == 'true' || steps.dota-changes.outputs.profanity_filter_changed == 'true' || steps.dota-changes.outputs.shared_utils_changed == 'true' || steps.dota-changes.outputs.workflow_changed == 'true' }}
-        uses: docker/bake-action@v7
-        with:
-          push: true
-          provenance: false
-          targets: dota
-          set: |
-            *.platform=linux/arm64
-            dota.tags=ghcr.io/${{ github.repository_owner }}/dota:${{ env.DOCKER_TAG }}
-            dota.tags+=ghcr.io/${{ github.repository_owner }}/dota:sha-${{ env.GIT_SHA }}
-            *.labels.org.opencontainers.image.revision=${{ github.sha }}
-            *.labels.org.opencontainers.image.created=${{ env.BUILD_DATE }}
-            *.labels.org.opencontainers.image.version=${{ env.DOCKER_TAG }}
-            *.cache-from=
-            *.cache-to=
+      - name: Select services to build
+        id: select
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            echo 'services=["dota","twitch-chat","steam","twitch-events"]' >> "$GITHUB_OUTPUT"
+          else
+            echo 'services=${{ steps.filter.outputs.changes }}' >> "$GITHUB_OUTPUT"
+          fi
 
-  # Combined job for twitch-chat, steam, and twitch-events using a matrix
-  services:
+  build:
+    needs: changes
+    if: needs.changes.outputs.services != '[]'
     runs-on: ubuntu-latest
     environment: prod
     permissions:
       packages: write
     strategy:
+      fail-fast: false
       matrix:
-        include:
-          - service: twitch-chat
-            changed_path: "^packages/twitch-chat/"
-            dockerfile: "packages/Dockerfile.bun"
-          - service: steam
-            changed_path: "^packages/steam/"
-            dockerfile: "packages/Dockerfile.bun"
-          - service: twitch-events
-            changed_path: "^packages/twitch-events/"
-            dockerfile: "packages/Dockerfile.bun"
+        service: ${{ fromJSON(needs.changes.outputs.services) }}
     steps:
       - uses: actions/checkout@v6
-        with:
-          fetch-depth: 2
-
-      - name: Check for changes in ${{ matrix.service }} service
-        id: changes
-        run: |
-          git diff --name-only HEAD^ HEAD | grep -q "${{ matrix.changed_path }}" && echo "changed=true" >> $GITHUB_OUTPUT || echo "changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^packages/shared-utils/" && echo "shared_utils_changed=true" >> $GITHUB_OUTPUT || echo "shared_utils_changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^${{ matrix.dockerfile }}" && echo "dockerfile_changed=true" >> $GITHUB_OUTPUT || echo "dockerfile_changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^docker-compose.yml" && echo "compose_changed=true" >> $GITHUB_OUTPUT || echo "compose_changed=false" >> $GITHUB_OUTPUT
-          git diff --name-only HEAD^ HEAD | grep -q "^.github/workflows/builder.yml" && echo "workflow_changed=true" >> $GITHUB_OUTPUT || echo "workflow_changed=false" >> $GITHUB_OUTPUT
 
       - name: Extract branch name
-        if: ${{ github.event_name == 'workflow_dispatch' || steps.changes.outputs.changed == 'true' || steps.changes.outputs.shared_utils_changed == 'true' || steps.changes.outputs.dockerfile_changed == 'true' || steps.changes.outputs.compose_changed == 'true' || steps.changes.outputs.workflow_changed == 'true' }}
         shell: bash
         run: |
-          echo "BRANCH_NAME=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
+          echo "BRANCH_NAME=${GITHUB_REF#refs/heads/}" >> "$GITHUB_ENV"
           # Sanitize branch name for Docker tag (replace '/' with '-')
-          echo "DOCKER_TAG=$(echo ${GITHUB_REF#refs/heads/} | sed 's/\//-/g')" >> $GITHUB_ENV
+          echo "DOCKER_TAG=$(echo ${GITHUB_REF#refs/heads/} | sed 's/\//-/g')" >> "$GITHUB_ENV"
           # Immutable per-commit tag + OCI label metadata
-          echo "GIT_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
-          echo "BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> $GITHUB_ENV
+          echo "GIT_SHA=$(git rev-parse --short HEAD)" >> "$GITHUB_ENV"
+          echo "BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> "$GITHUB_ENV"
 
       - name: Set up Docker Buildx
-        if: ${{ github.event_name == 'workflow_dispatch' || steps.changes.outputs.changed == 'true' || steps.changes.outputs.shared_utils_changed == 'true' || steps.changes.outputs.dockerfile_changed == 'true' || steps.changes.outputs.compose_changed == 'true' || steps.changes.outputs.workflow_changed == 'true' }}
         uses: docker/setup-buildx-action@v4
         with:
           driver-opts: |
@@ -139,15 +104,13 @@ jobs:
           buildkitd-flags: --debug
 
       - name: Login to ghcr
-        if: ${{ github.event_name == 'workflow_dispatch' || steps.changes.outputs.changed == 'true' || steps.changes.outputs.shared_utils_changed == 'true' || steps.changes.outputs.dockerfile_changed == 'true' || steps.changes.outputs.compose_changed == 'true' || steps.changes.outputs.workflow_changed == 'true' }}
         uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GHA_PAT }}
 
       - name: Build and push
-        if: ${{ github.event_name == 'workflow_dispatch' || steps.changes.outputs.changed == 'true' || steps.changes.outputs.shared_utils_changed == 'true' || steps.changes.outputs.dockerfile_changed == 'true' || steps.changes.outputs.compose_changed == 'true' || steps.changes.outputs.workflow_changed == 'true' }}
         uses: docker/bake-action@v7
         with:
           push: true
@@ -160,5 +123,5 @@ jobs:
             *.labels.org.opencontainers.image.revision=${{ github.sha }}
             *.labels.org.opencontainers.image.created=${{ env.BUILD_DATE }}
             *.labels.org.opencontainers.image.version=${{ env.DOCKER_TAG }}
-            *.cache-from=
-            *.cache-to=
+            *.cache-from=type=gha,scope=${{ matrix.service }}
+            *.cache-to=type=gha,mode=max,scope=${{ matrix.service }}

.github/workflows/ci.yml

@@ -6,23 +6,27 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: latest
+          bun-version: 1.3.14
       - name: Cache bun install
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.bun/install/cache
           key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock') }}
           restore-keys: |
             ${{ runner.os }}-bun-
       - name: Install dependencies
-        uses: nick-fields/retry@v3
+        uses: nick-fields/retry@v4
         with:
           timeout_minutes: 5
           max_attempts: 3

.github/workflows/subscription-health-check.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: latest
+          bun-version: 1.3.14
 
       - name: Delete Steam package.json
         run: rm -f packages/steam/package.json

docker-compose.yml

@@ -16,11 +16,6 @@ services:
       args:
         - DOTABOD_ENV=${DOTABOD_ENV:-development}
         - BUILD_CONTEXT=packages/twitch-chat
-      x-bake:
-        cache-from:
-          - "ghcr.io/dotabod/cache-twitch-chat:master"
-        cache-to:
-          - "ghcr.io/dotabod/cache-twitch-chat:master"
     hostname: twitch-chat
     environment:
       - DATABASE_URL
@@ -42,11 +37,6 @@ services:
       args:
         - DOTABOD_ENV=${DOTABOD_ENV:-development}
         - BUILD_CONTEXT=packages/steam
-      x-bake:
-        cache-from:
-          - "ghcr.io/dotabod/cache-steam:master"
-        cache-to:
-          - "ghcr.io/dotabod/cache-steam:master"
     hostname: steam
     environment:
       - MONGO_URL
@@ -67,11 +57,6 @@ services:
       args:
         - DOTABOD_ENV=${DOTABOD_ENV:-development}
         - BUILD_CONTEXT=packages/twitch-events
-      x-bake:
-        cache-from:
-          - "ghcr.io/dotabod/cache-twitch-events:master"
-        cache-to:
-          - "ghcr.io/dotabod/cache-twitch-events:master"
     hostname: twitch-events
     environment:
       - DATABASE_URL
@@ -104,11 +89,6 @@ services:
       args:
         - DOTABOD_ENV=${DOTABOD_ENV:-development}
         - BUILD_CONTEXT=packages/dota
-      x-bake:
-        cache-from:
-          - "ghcr.io/dotabod/cache-dota:master"
-        cache-to:
-          - "ghcr.io/dotabod/cache-dota:master"
     hostname: dota
     environment:
       - D2PT_TOKEN

package.json

@@ -15,7 +15,7 @@
     "typecheck:all": "bun run --cwd packages/shared-utils typecheck && bun run --cwd packages/profanity-filter typecheck && bun run --cwd packages/dota typecheck && bun run --cwd packages/twitch-chat typecheck && bun run --cwd packages/twitch-events typecheck && bun run --cwd packages/steam typecheck",
     "lint:all": "biome check .",
     "test": "bun run --cwd packages/dota test",
-    "test:all": "bun run --cwd packages/shared-utils test && bun run --cwd packages/profanity-filter test && bun run --cwd packages/dota test"
+    "test:all": "bun run --cwd packages/shared-utils test && bun run --cwd packages/profanity-filter test && bun run --cwd packages/dota test && bun run --cwd packages/twitch-events test && bun run --cwd packages/twitch-chat test"
   },
   "trustedDependencies": [
     "@biomejs/biome",

packages/clip-processor-py/.gitignore

@@ -33,8 +33,14 @@ assets/reference.png
 
 # Virtual environment
 venv/
+.venv/
 .env/
 
+# pytest / coverage
+.pytest_cache/
+.coverage
+htmlcov/
+
 # Editor files
 .vscode/
 .idea/

packages/clip-processor-py/pyproject.toml

@@ -0,0 +1,22 @@
+[tool.pytest.ini_options]
+minversion = "8.0"
+addopts = "-ra -q --strict-markers --import-mode=importlib"
+testpaths = ["tests"]
+# api_server.py imports both `dota_hero_detection` (needs src on path) and
+# `src.postgresql_client` (needs the package root on path), so expose both.
+pythonpath = [".", "src"]
+
+[dependency-groups]
+dev = [
+    "pytest>=8",
+    "pytest-cov",
+    "pytest-mock",
+    # Light runtime deps the modules import at module load time. The heavy native
+    # deps (opencv/numpy/streamlink/etc.) are stubbed in tests/conftest.py.
+    "flask",
+    "requests",
+    "psutil",
+    "psycopg2-binary",
+    "beautifulsoup4",
+    "Pillow",
+]

packages/clip-processor-py/requirements.txt

@@ -8,7 +8,7 @@ beautifulsoup4==4.12.2
 tqdm==4.66.3
 flask==3.1.3
 gunicorn==23.0.0
-streamlink==6.5.0
+streamlink==8.4.0
 psycopg2-binary==2.9.9
 waitress==3.0.1
 psutil==5.9.8