Simplify publish workflow: no root/system deps needed for install

All dependencies (lxml, tree-sitter) ship pre-built wheels for
manylinux, musllinux, macOS, and Windows. Users just run:
  pip install code-intelligence
No gcc, no libxml2-dev, no root access required.

22 test environments verify this: Windows, macOS, Ubuntu, UBI 8/9,
Debian slim, Alpine, Amazon Linux, Fedora — all install with pip only.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: aksOps

.github/workflows/publish.yml

@@ -52,36 +52,24 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          # Windows 10/11 (latest runner is Windows Server 2022 = Win 11 compatible)
-          - os: windows-latest
-            python: "3.11"
-          - os: windows-latest
-            python: "3.12"
-          - os: windows-latest
-            python: "3.13"
-          # macOS (Intel + Apple Silicon)
-          - os: macos-latest
-            python: "3.11"
-          - os: macos-latest
-            python: "3.12"
-          - os: macos-latest
-            python: "3.13"
-          # Ubuntu (covers Debian-based Linux)
-          - os: ubuntu-latest
-            python: "3.11"
-          - os: ubuntu-latest
-            python: "3.12"
-          - os: ubuntu-latest
-            python: "3.13"
-          - os: ubuntu-22.04
-            python: "3.11"
-          - os: ubuntu-22.04
-            python: "3.12"
-          - os: ubuntu-20.04
-            python: "3.11"
+          # Windows 10/11
+          - { os: windows-latest, python: "3.11" }
+          - { os: windows-latest, python: "3.12" }
+          - { os: windows-latest, python: "3.13" }
+          # macOS (Apple Silicon + Intel)
+          - { os: macos-latest, python: "3.11" }
+          - { os: macos-latest, python: "3.12" }
+          - { os: macos-latest, python: "3.13" }
+          # Ubuntu / Linux
+          - { os: ubuntu-latest, python: "3.11" }
+          - { os: ubuntu-latest, python: "3.12" }
+          - { os: ubuntu-latest, python: "3.13" }
+          - { os: ubuntu-22.04, python: "3.11" }
+          - { os: ubuntu-22.04, python: "3.12" }
+          - { os: ubuntu-20.04, python: "3.11" }
     runs-on: ${{ matrix.os }}
     steps:
-      - name: Download build artifacts
+      - name: Download artifacts
         uses: actions/download-artifact@v4
         with:
           name: dist
@@ -92,18 +80,15 @@ jobs:
         with:
           python-version: ${{ matrix.python }}
 
-      - name: Install wheel
+      - name: Install from wheel (no root, no system deps)
         shell: bash
         run: pip install dist/*.whl
 
       - name: Verify CLI
         run: code-intelligence --help
 
-      - name: Verify detectors load
-        run: python -c "from code_intelligence.detectors.registry import DetectorRegistry; r = DetectorRegistry(); r.load_builtin_detectors(); print(f'{len(r.all_detectors())} detectors loaded')"
-
-      - name: Verify version
-        run: python -c "import importlib.metadata; print(importlib.metadata.version('code-intelligence'))"
+      - name: Verify detectors
+        run: python -c "from code_intelligence.detectors.registry import DetectorRegistry; r = DetectorRegistry(); r.load_builtin_detectors(); print(f'{len(r.all_detectors())} detectors')"
 
   test-container:
     name: "${{ matrix.name }}"
@@ -113,61 +98,43 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          # RHEL/UBI (Red Hat Enterprise Linux)
-          - name: "UBI 8 / Python 3.11 (RHEL 8)"
-            container: "registry.access.redhat.com/ubi8/python-311:latest"
-            setup: "dnf install -y libxml2-devel libxslt-devel gcc python3-devel 2>/dev/null || true"
-          - name: "UBI 9 / Python 3.11 (RHEL 9)"
-            container: "registry.access.redhat.com/ubi9/python-311:latest"
-            setup: "dnf install -y libxml2-devel libxslt-devel gcc python3-devel 2>/dev/null || true"
-          - name: "UBI 9 / Python 3.12 (RHEL 9)"
-            container: "registry.access.redhat.com/ubi9/python-312:latest"
-            setup: "dnf install -y libxml2-devel libxslt-devel gcc python3-devel 2>/dev/null || true"
-          # Debian / Ubuntu
-          - name: "Debian Bookworm / Python 3.11"
-            container: "python:3.11-slim-bookworm"
-            setup: "apt-get update && apt-get install -y --no-install-recommends gcc libxml2-dev libxslt1-dev"
-          - name: "Debian Bookworm / Python 3.12"
-            container: "python:3.12-slim-bookworm"
-            setup: "apt-get update && apt-get install -y --no-install-recommends gcc libxml2-dev libxslt1-dev"
-          - name: "Debian Bookworm / Python 3.13"
-            container: "python:3.13-slim-bookworm"
-            setup: "apt-get update && apt-get install -y --no-install-recommends gcc libxml2-dev libxslt1-dev"
-          # Alpine (musl libc — strictest compatibility test)
-          - name: "Alpine / Python 3.11"
-            container: "python:3.11-alpine"
-            setup: "apk add --no-cache gcc musl-dev libxml2-dev libxslt-dev"
-          - name: "Alpine / Python 3.12"
-            container: "python:3.12-alpine"
-            setup: "apk add --no-cache gcc musl-dev libxml2-dev libxslt-dev"
-          # Amazon Linux (AWS Lambda / ECS)
-          - name: "Amazon Linux 2023 / Python 3.11"
-            container: "amazonlinux:2023"
-            setup: "dnf install -y python3.11 python3.11-pip python3.11-devel gcc libxml2-devel libxslt-devel"
-          # Fedora (latest glibc)
-          - name: "Fedora 40 / Python 3.12"
-            container: "fedora:40"
-            setup: "dnf install -y python3 python3-pip python3-devel gcc libxml2-devel libxslt-devel"
+          # RHEL / UBI — pip install only, NO root, NO dnf
+          - { name: "UBI 8 / RHEL 8 (Python 3.11)", container: "registry.access.redhat.com/ubi8/python-311:latest" }
+          - { name: "UBI 9 / RHEL 9 (Python 3.11)", container: "registry.access.redhat.com/ubi9/python-311:latest" }
+          - { name: "UBI 9 / RHEL 9 (Python 3.12)", container: "registry.access.redhat.com/ubi9/python-312:latest" }
+          # Debian / Ubuntu slim
+          - { name: "Debian Bookworm (3.11)", container: "python:3.11-slim-bookworm" }
+          - { name: "Debian Bookworm (3.12)", container: "python:3.12-slim-bookworm" }
+          - { name: "Debian Bookworm (3.13)", container: "python:3.13-slim-bookworm" }
+          # Alpine (musl libc)
+          - { name: "Alpine (3.11)", container: "python:3.11-alpine" }
+          - { name: "Alpine (3.12)", container: "python:3.12-alpine" }
+          # Amazon Linux
+          - { name: "Amazon Linux 2023", container: "public.ecr.aws/amazonlinux/amazonlinux:2023" }
+          # Fedora
+          - { name: "Fedora 40", container: "fedora:40" }
     container:
       image: ${{ matrix.container }}
     steps:
-      - name: Download build artifacts
+      - name: Download artifacts
         uses: actions/download-artifact@v4
         with:
           name: dist
           path: dist/
 
-      - name: Install system deps
-        run: ${{ matrix.setup }}
+      - name: Install Python (Amazon Linux / Fedora only)
+        if: contains(matrix.container, 'amazonlinux') || contains(matrix.container, 'fedora')
+        run: |
+          dnf install -y python3 python3-pip 2>/dev/null || yum install -y python3 python3-pip 2>/dev/null || true
 
-      - name: Install wheel
+      - name: Install from wheel (no root system deps needed)
         run: pip install dist/*.whl || pip3 install dist/*.whl
 
       - name: Verify CLI
         run: code-intelligence --help || python3 -m code_intelligence.cli --help
 
-      - name: Verify detectors load
-        run: python3 -c "from code_intelligence.detectors.registry import DetectorRegistry; r = DetectorRegistry(); r.load_builtin_detectors(); print(f'{len(r.all_detectors())} detectors loaded')"
+      - name: Verify detectors
+        run: python3 -c "from code_intelligence.detectors.registry import DetectorRegistry; r = DetectorRegistry(); r.load_builtin_detectors(); print(f'{len(r.all_detectors())} detectors')"
 
   publish-pypi:
     name: Publish to PyPI
@@ -178,7 +145,7 @@ jobs:
       name: pypi
       url: https://pypi.org/p/code-intelligence
     steps:
-      - name: Download build artifacts
+      - name: Download artifacts
         uses: actions/download-artifact@v4
         with:
           name: dist