ref: migrate to uv

.github/workflows/fast-revert.yml

@@ -19,10 +19,10 @@ jobs:
     if: |
       github.event_name == 'workflow_dispatch' || github.event.label.name == 'Trigger: Revert'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           token: ${{ secrets.BUMP_SENTRY_TOKEN }}
-      - uses: getsentry/[email protected]
+      - uses: getsentry/action-fast-revert@35b4b6c1f8f91b5911159568b3b15e531b5b8174 # v2.0.1
         with:
           pr: ${{ github.event.number || github.event.inputs.pr }}
           co_authored_by: ${{ github.event.inputs.co_authored_by || format('{0} <{1}+{0}@users.noreply.github.com>', github.event.sender.login, github.event.sender.id) }}

.github/workflows/pre-commit.yml

@@ -12,8 +12,8 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
-    - uses: actions/setup-python@v6
+    - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
       with:
         python-version: 3.x
-    - uses: pre-commit/[email protected]
+    - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1

.github/workflows/release.yml

@@ -27,13 +27,13 @@ jobs:
         with:
           app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }}
           private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }}
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           token: ${{ steps.token.outputs.token }}
           fetch-depth: 0
       - name: Prepare release
         id: prepare-release
-        uses: getsentry/action-prepare-release@v1
+        uses: getsentry/action-prepare-release@3cea80dc3938c0baf5ec4ce752ecb311f8780cdc # v1.6.4
         env:
           GITHUB_TOKEN: ${{ steps.token.outputs.token }}
         with:
@@ -48,10 +48,10 @@ jobs:
     name: Create release on self-hosted dogfood instance
     needs: release
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           fetch-depth: 0
-      - uses: getsentry/action-release@v3
+      - uses: getsentry/action-release@128c5058bbbe93c8e02147fe0a9c713f166259a6 # v3.4.0
         env:
           SENTRY_ORG: self-hosted
           SENTRY_PROJECT: installer

.github/workflows/shellcheck.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Repository checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           fetch-depth: 0
 

.github/workflows/test.yml

@@ -32,7 +32,7 @@ jobs:
     name: ${{ matrix.os == 'ubuntu-24.04-arm' && 'unit tests (arm64)' || 'unit tests' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Get Compose
         uses: ./get-compose-action
@@ -56,7 +56,7 @@ jobs:
       CONTAINER_ENGINE_PODMAN: ${{ matrix.container_engine == 'podman' && '1' || '0' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Install Podman
         if: matrix.container_engine == 'podman'

action.yaml

@@ -48,11 +48,17 @@ runs:
         ### Inspired by https://github.com/endersonmenezes/free-disk-space ###
         sudo rm -rf /usr/local/.ghcup
 
+    - name: Setup uv
+      uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 # v7.1.4
+      with:
+        working-directory: ${{ github.action_path }}
+
     - name: Setup dev environment
       shell: bash
       run: |
         cd ${{ github.action_path }}
-        pip install -r requirements-dev.txt
+        uv sync
+
         echo "PY_COLORS=1" >> "$GITHUB_ENV"
         ### pytest-sentry configuration ###
         if [ "$GITHUB_REPOSITORY" = "getsentry/self-hosted" ]; then
@@ -183,12 +189,12 @@ runs:
           /var/lib/docker/volumes/sentry-kafka \
           "$RUNNER_TEMP/volumes/"
         cd ${{ github.action_path }}
-        pytest -x --cov --junitxml=junit.xml _integration-test/
+        uv run pytest -x --cov --junitxml=junit.xml _integration-test/
 
     - name: Upload coverage to Codecov
       if: inputs.CODECOV_TOKEN
       continue-on-error: true
-      uses: codecov/codecov-action@v5
+      uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
       with:
         directory: ${{ github.action_path }}
         token: ${{ inputs.CODECOV_TOKEN }}
@@ -197,7 +203,7 @@ runs:
     - name: Upload test results to Codecov
       if: inputs.CODECOV_TOKEN && !cancelled()
       continue-on-error: true
-      uses: codecov/test-results-action@v1
+      uses: codecov/test-results-action@47f89e9acb64b76debcd5ea40642d25a4adced9f # v1.1.1
       with:
         directory: ${{ github.action_path }}
         token: ${{ inputs.CODECOV_TOKEN }}

pyproject.toml

@@ -0,0 +1,19 @@
+[project]
+name = "sentry-self-hosted"
+version = "0.1.0"
+description = "Sentry, feature-complete and packaged up for low-volume deployments and proofs-of-concept."
+readme = "README.md"
+requires-python = ">=3.11"
+dependencies = []
+
+[dependency-groups]
+dev = [
+    "beautifulsoup4>=4.7.1",
+    "cryptography>=43.0.3",
+    "httpx>=0.25.2",
+    "pytest>=8.0.0",
+    "pytest-cov>=4.1.0",
+    "pytest-rerunfailures>=11.0",
+    "pytest-sentry>=0.1.11",
+    "sentry-sdk>=2.4.0,<3.0.0",
+]