fix: remove dev-latest extra that prevents PyPI upload

PyPI rejects packages with direct URL dependencies (git+https://).
The dev-latest extra contained git dependencies for testing with
unreleased WAMP packages, which caused the release workflow to fail
at the PyPI upload step with "Can't have direct dependency".

Changes:
- Remove dev-latest extra from pyproject.toml
- Remove allow-direct-references from [tool.hatch.metadata]
- Remove install-dev-latest recipe from justfile
- Remove dev-latest references from analyze-uvlock recipe
- Update docs/uvlock.rst to remove dev-latest examples
- Regenerate uv.lock without git dependencies

For development with unreleased WAMP packages, use the existing
install-dev-local recipe which installs from local editable checkouts.

Note: This work was completed with AI assistance (Claude Code).

Author: oberstet

docs/uvlock.rst

@@ -150,15 +150,13 @@ Example output:
      uv sync                      Runtime deps only (153 packages)
      uv sync --extra dev          Runtime + dev tools (247 packages)
      uv sync --extra docs         Runtime + docs tools (186 packages)
-     uv sync --extra dev-latest   Runtime + latest from GitHub (153 packages)
      uv sync --all-extras         All packages (257 packages)
 
    Extra markers in uv.lock (dependency graph entries):
    ─────────────────────────────────────────────────────────────────────────────
 
      extra == 'dev':        29 entries
      extra == 'docs':       12 entries
-     extra == 'dev-latest': 5 entries
 
    Note: Packages with extra markers are only installed when that extra is
          requested. The markers ensure selective installation.

justfile

@@ -346,22 +346,6 @@ install-dev-all:
         just install-dev ${venv}
     done
 
-# Install with latest unreleased WAMP packages from GitHub (usage: `just install-dev-latest cpy312` or `just install-dev-latest`)
-install-dev-latest venv="": (create venv)
-    #!/usr/bin/env bash
-    set -e
-    VENV_NAME="{{ venv }}"
-    if [ -z "${VENV_NAME}" ]; then
-        echo "==> No venv name specified. Auto-detecting from system Python..."
-        VENV_NAME=$(just --quiet _get-system-venv-name)
-        echo "==> Defaulting to venv: '${VENV_NAME}'"
-    fi
-    VENV_PATH="{{ VENV_DIR }}/${VENV_NAME}"
-    VENV_PYTHON=$(just --quiet _get-venv-python "${VENV_NAME}")
-    echo "==> Installing package in editable mode with [dev,dev-latest] extras in ${VENV_NAME}..."
-    echo "==> This will install WAMP packages from GitHub master (unreleased versions)..."
-    ${VENV_PYTHON} -m pip install -e .[dev,dev-latest]
-
 # Install with locally editable WAMP packages for cross-repo development (usage: `just install-dev-local cpy312` or `just install-dev-local`)
 install-dev-local venv="": (create venv)
     #!/usr/bin/env bash
@@ -851,7 +835,6 @@ analyze-uvlock:
     RUNTIME_COUNT=$(uv export --frozen --no-dev --no-hashes 2>/dev/null | grep -c '==' || echo "0")
     DEV_COUNT=$(uv export --frozen --extra dev --no-hashes 2>/dev/null | grep -c '==' || echo "0")
     DOCS_COUNT=$(uv export --frozen --extra docs --no-hashes 2>/dev/null | grep -c '==' || echo "0")
-    DEV_LATEST_COUNT=$(uv export --frozen --extra dev-latest --no-hashes 2>/dev/null | grep -c '==' || echo "0")
     ALL_COUNT=$(uv export --frozen --all-extras --no-hashes 2>/dev/null | grep -c '==' || echo "0")
 
     echo "Installation modes (using uv sync):"
@@ -860,21 +843,18 @@ analyze-uvlock:
     printf "  %-28s %s\n" "uv sync" "Runtime deps only (${RUNTIME_COUNT} packages)"
     printf "  %-28s %s\n" "uv sync --extra dev" "Runtime + dev tools (${DEV_COUNT} packages)"
     printf "  %-28s %s\n" "uv sync --extra docs" "Runtime + docs tools (${DOCS_COUNT} packages)"
-    printf "  %-28s %s\n" "uv sync --extra dev-latest" "Runtime + latest from GitHub (${DEV_LATEST_COUNT} packages)"
     printf "  %-28s %s\n" "uv sync --all-extras" "All packages (${ALL_COUNT} packages)"
     echo ""
 
     # Count extra marker entries in lock file
     DEV_ENTRIES=$(grep -c "extra == 'dev'" uv.lock 2>/dev/null || echo "0")
     DOCS_ENTRIES=$(grep -c "extra == 'docs'" uv.lock 2>/dev/null || echo "0")
-    DEV_LATEST_ENTRIES=$(grep -c "extra == 'dev-latest'" uv.lock 2>/dev/null || echo "0")
 
     echo "Extra markers in uv.lock (dependency graph entries):"
     echo "─────────────────────────────────────────────────────────────────────────────"
     echo ""
     echo "  extra == 'dev':        ${DEV_ENTRIES} entries"
     echo "  extra == 'docs':       ${DOCS_ENTRIES} entries"
-    echo "  extra == 'dev-latest': ${DEV_LATEST_ENTRIES} entries"
     echo ""
     echo "Note: Packages with extra markers are only installed when that extra is"
     echo "      requested. The markers ensure selective installation."

pyproject.toml

@@ -46,7 +46,6 @@ classifiers = [
 
 dependencies = [
     # WAMP ecosystem packages (using currently available PyPI versions)
-    # NOTE: For development/testing with unreleased versions, use: pip install -e .[dev,dev-latest]
     "autobahn[twisted,encryption,compress,serialization,scram]>=25.12.2",
     "txaio>=25.12.2",
     "zlmdb>=25.12.3",
@@ -186,17 +185,6 @@ dev = [
     "pyinstaller>=4.2",
 ]
 
-# For testing with unreleased WAMP packages from GitHub master branches
-# Usage: pip install -e .[dev,dev-latest]
-# This installs the latest development versions from GitHub instead of PyPI
-dev-latest = [
-    "txaio @ git+https://github.com/crossbario/txaio.git@master",
-    "autobahn[twisted,encryption,compress,serialization,scram] @ git+https://github.com/crossbario/autobahn-python.git@master",
-    "zlmdb @ git+https://github.com/crossbario/zlmdb.git@master",
-    "cfxdb @ git+https://github.com/crossbario/cfxdb.git@master",
-    "xbr @ git+https://github.com/wamp-proto/wamp-xbr.git@master",
-]
-
 # For testing with locally editable WAMP packages (cross-repo development)
 # Usage: First install WAMP packages in editable mode from local checkouts,
 #        then: pip install -e .[dev,dev-local]
@@ -248,10 +236,6 @@ Forum = "https://crossbar.discourse.group/"
 crossbar = "crossbar:run"
 
 # Hatchling build configuration
-[tool.hatch.metadata]
-# Allow git+https:// dependencies in dev-latest for cross-repo development
-allow-direct-references = true
-
 [tool.hatch.build.targets.wheel]
 packages = ["src/crossbar"]