Update workflows to use uv

Update Github workflows to use uv

…

Co-authored-by: Oliver Copping <[email protected]>

Author: callumforrester

.github/actions/install_requirements/action.yml

@@ -1,12 +1,12 @@
 name: Install requirements
-description: Install a version of python then call pip install and report what was installed
+description: Install uv, use it to install dependencies and report what was installed
 inputs:
   python-version:
     description: Python version to install, default is from Dockerfile
     default: "dev"
-  pip-install:
-    description: Parameters to pass to pip install
-    default: "$([ -f dev-requirements.txt ] && echo '-c dev-requirements.txt') -e .[dev]"
+  uv-sync:
+    description: Parameters to pass to uv sync
+    default: "--locked"
 
 runs:
   using: composite
@@ -20,15 +20,17 @@ runs:
         echo "PYTHON_VERSION=$PYTHON_VERSION" >> "$GITHUB_ENV"
       shell: bash
 
-    - name: Setup python
-      uses: actions/setup-python@v5
+    - name: Install uv and set the python version
+      uses: astral-sh/setup-uv@v5
       with:
         python-version: ${{ env.PYTHON_VERSION }}
+        enable-cache: true
+        cache-dependency-glob: "uv.lock"
 
     - name: Install packages
-      run: pip install ${{ inputs.pip-install }}
+      run: uv sync ${{ inputs.uv-sync }}
       shell: bash
 
     - name: Report what was installed
-      run: pip freeze
+      run: uv pip freeze
       shell: bash

.github/workflows/_dist.yml

@@ -27,9 +27,7 @@ jobs:
         run: pipx run twine check --strict dist/*
 
       - name: Install produced wheel
-        uses: ./.github/actions/install_requirements
-        with:
-          pip-install: dist/*.whl
+        run: pipx run pip install dist/*.whl
 
       - name: Test module --version works using the installed wheel
         # If more than one module in src/ replace with module name to test

.github/workflows/_release.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Create GitHub Release
         # We pin to the SHA, not the tag, for security reasons.
         # https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
-        uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # v2.2.0
+        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
         with:
           prerelease: ${{ contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc') }}
           files: "*"

.github/workflows/_test.yml

@@ -34,7 +34,7 @@ jobs:
 
       - if: inputs.python-version == 'dev'
         name: Write the requirements as an artifact
-        run: pip freeze --exclude-editable > /tmp/dev-requirements.txt
+        run: uv pip freeze --exclude-editable > /tmp/dev-requirements.txt
 
       - if: inputs.python-version == 'dev'
         name: Upload dev-requirements.txt
@@ -48,7 +48,7 @@ jobs:
         uses: ./.github/actions/install_requirements
         with:
           python-version: ${{ inputs.python-version }}
-          pip-install: ".[dev]"
+          uv-sync: ""
 
       - name: Run tests
         run: tox -e tests