nox refactoring and use --frozen in CI / testing scenarios

fixes #74

Author: rsyring

.github/workflows/nox.yaml

@@ -58,4 +58,4 @@ jobs:
       #     mise sandbox --doctor
 
       - name: nox
-        run: mise exec -- uv run --only-group nox nox
+        run: mise exec -- uv run --frozen --only-group nox nox

changelog.d/74.changed.md

@@ -0,0 +1,2 @@
+Use uv's `--frozen` in CI and testing scenarios to help ensure depedency updates are handled
+explicitly by the developer.

changelog.d/74.breaking.md changelog.d/78.breaking.mdchangelog.d/74.breaking.md renamed to changelog.d/78.breaking.md

@@ -23,4 +23,4 @@ runs:
     - name: Run Nox Session
       shell: bash
       run: |
-        uv run --only-group ${{ inputs.uv-group }} -- nox -s ${{ inputs.nox-session }}
+        uv run --frozen --only-group ${{ inputs.uv-group }} -- nox -s ${{ inputs.nox-session }}

gh-actions/nox-run/action.yaml

@@ -7,9 +7,13 @@
 nox.options.default_venv_backend = 'uv'
 
 
+def uv_sync(session, group: str):
+    session.run('uv', 'sync', '--active', '--frozen', '--only-group', group)
+
+
 @nox.session
 def tests(session: nox.Session):
-    session.run('uv', 'sync', '--active', '--no-dev', '--group', 'tests')
+    uv_sync(session, 'tests')
     session.run(
         'pytest',
         '-ra',
@@ -22,7 +26,7 @@ def tests(session: nox.Session):
 
 @nox.session
 def standards(session: nox.Session):
-    session.run('uv', 'sync', '--active', '--only-group', 'pre-commit')
+    uv_sync(session, 'pre-commit')
     session.run(
         'pre-commit',
         'run',

noxfile.py

@@ -33,4 +33,4 @@ jobs:
 
       - name: Run Tests
         run: |
-          uv run --only-group nox -- nox
+          uv run --frozen --only-group nox -- nox

src/tests/data/gh-nox.yaml

@@ -35,4 +35,4 @@ jobs:
 
       - name: Run Tests
         run: |
-          uv run --only-group nox -- nox
+          uv run --frozen --only-group nox -- nox

template/.github/workflows/{% if use_gh_nox %}nox.yaml{% endif %}.jinja

@@ -8,7 +8,7 @@ nox.options.default_venv_backend = 'uv'
 
 
 def uv_sync(session, group: str):
-    session.run('uv', 'sync', '--active', '--no-default-groups', '--group', group)
+    session.run('uv', 'sync', '--active', '--frozen', '--only-group', group)
 
 
 @nox.session

template/noxfile.py.jinja

@@ -29,7 +29,7 @@ jobs:
       - run:
           name: run nox
           command: |
-            mise exec -- uv run --only-group nox nox
+            mise exec -- uv run --frozen --only-group nox nox
 
       - store_test_results:
           path: ci/test-reports/