CI validation draft (not for merge) — vector search Python/Go/TS

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7

.github/workflows/vector-search-go-ci.yml

@@ -0,0 +1,75 @@
+# CI for the Azure SQL Vector Search Go quickstart sample.
+# Security: uses `pull_request` (read-only token, no secrets on forks)
+# with an explicit same-repo check to skip fork PRs entirely.
+#
+# This CI runs static analysis and unit tests only — no live Azure SQL
+# Database or Azure OpenAI resource is required or contacted. Live
+# end-to-end validation is a separate, manual step (see the sample's
+# README and output/sample-output.txt for the explicit no-live-run
+# disclosure).
+
+name: "Vector Search Go — Build"
+
+on:
+  pull_request:
+    branches: [master]
+    paths:
+      - "samples/features/vector-search/vector-search-query-go/**"
+  push:
+    branches: [master]
+    paths:
+      - "samples/features/vector-search/vector-search-query-go/**"
+
+# Cancel redundant runs for the same PR / branch.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Vet, format-check, build, and test
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    # Skip CI on fork PRs — prevents external actors from consuming minutes.
+    if: >-
+      github.event_name == 'push' ||
+      github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name
+
+    defaults:
+      run:
+        working-directory: samples/features/vector-search/vector-search-query-go
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Setup Go
+        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+        with:
+          go-version: "1.25"
+          cache-dependency-path: samples/features/vector-search/vector-search-query-go/go.sum
+
+      - name: Download dependencies
+        run: go mod download
+
+      - name: Format check (gofmt)
+        run: |
+          unformatted=$(gofmt -l .)
+          if [ -n "$unformatted" ]; then
+            echo "The following files are not gofmt-formatted:"
+            echo "$unformatted"
+            exit 1
+          fi
+
+      - name: Vet
+        run: go vet ./...
+
+      - name: Build
+        run: go build ./...
+
+      - name: Unit tests (no Azure connectivity required)
+        run: go test ./... -v

.github/workflows/vector-search-python-ci.yml

@@ -0,0 +1,74 @@
+# CI for the Azure SQL Vector Search Python quickstart sample.
+# Security: uses `pull_request` (read-only token, no secrets on forks)
+# with an explicit same-repo check to skip fork PRs entirely.
+#
+# This CI runs static analysis and unit tests only — no live Azure SQL
+# Database or Azure OpenAI resource is required or contacted. Live
+# end-to-end validation is a separate, manual step (see the sample's
+# README and output/sample-output.txt for the explicit no-live-run
+# disclosure).
+
+name: "Vector Search Python — Build"
+
+on:
+  pull_request:
+    branches: [master]
+    paths:
+      - "samples/features/vector-search/vector-search-query-python/**"
+  push:
+    branches: [master]
+    paths:
+      - "samples/features/vector-search/vector-search-query-python/**"
+
+# Cancel redundant runs for the same PR / branch.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Lint, type-check, and test
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    # Skip CI on fork PRs — prevents external actors from consuming minutes.
+    if: >-
+      github.event_name == 'push' ||
+      github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name
+
+    defaults:
+      run:
+        working-directory: samples/features/vector-search/vector-search-query-python
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Setup Python
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.13"
+          cache: "pip"
+          cache-dependency-path: |
+            samples/features/vector-search/vector-search-query-python/requirements.txt
+            samples/features/vector-search/vector-search-query-python/requirements-dev.txt
+
+      - name: Install dependencies
+        run: |
+          pip install -r requirements.txt
+          pip install -r requirements-dev.txt
+
+      - name: Lint
+        run: python -m ruff check .
+
+      - name: Format check
+        run: python -m ruff format --check .
+
+      - name: Type-check
+        run: python -m mypy src
+
+      - name: Unit tests (no Azure connectivity required)
+        run: python -m pytest -v

.github/workflows/vector-search-typescript-ci.yml

@@ -0,0 +1,61 @@
+# CI for the Azure SQL Vector Search TypeScript quickstart sample.
+# Security: uses `pull_request` (read-only token, no secrets on forks)
+# with an explicit same-repo check to skip fork PRs entirely.
+
+name: "Vector Search TypeScript — Build"
+
+on:
+  pull_request:
+    branches: [master]
+    paths:
+      - "samples/features/vector-search/vector-search-query-typescript/**"
+  push:
+    branches: [master]
+    paths:
+      - "samples/features/vector-search/vector-search-query-typescript/**"
+
+# Cancel redundant runs for the same PR / branch.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build & type-check
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    # Skip CI on fork PRs — prevents external actors from consuming minutes.
+    if: >-
+      github.event_name == 'push' ||
+      github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name
+
+    defaults:
+      run:
+        working-directory: samples/features/vector-search/vector-search-query-typescript
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: "22"
+          cache: "npm"
+          cache-dependency-path: samples/features/vector-search/vector-search-query-typescript/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Format check
+        run: npm run format:check
+
+      - name: Type-check (build)
+        run: npm run build