ci: refactor workflows and improve CI reliability

  - Rename CI job from build-test to check-code for clarity
  - Add explicit Python setup step for better version control
  - Replace just commands with direct uv calls for consistency
  - Update Nix workflow trigger to include test-ci branch
  - Reorganize justfile commands and add new check command
  - Set Python version support to 3.10-3.12 range
  - Update dependencies via uv.lock refresh

Note: PyO3 does not support CPython 3.13 as of now

Author: steinerkelvin

.github/workflows/check-code.yml

@@ -10,7 +10,6 @@ on:
       - "tests/**"
       - "pyproject.toml"
       - "uv.lock"
-      - "justfile"
       - "nix/**"
       - "flake.nix"
       - "flake.lock"
@@ -21,47 +20,56 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  build-test:
+  check-code:
     # Ubicloud managed runner
     runs-on: ubicloud-standard-2
 
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.10", "3.13"]
+        python-version: ["3.10", "3.12"]
 
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: "Set up Python"
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
       - name: Setup uv (with caching)
         uses: astral-sh/setup-uv@v6
         with:
           enable-cache: true
           ignore-nothing-to-cache: true
 
-      - name: Install Python ${{ matrix.python-version }}
-        run: uv python install ${{ matrix.python-version }}
-
-      - name: Install just
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y just
+    #   - name: Create venv for ${{ matrix.python-version }}
+    #     run: uv venv --python ${{ matrix.python-version }}
 
       - name: Sync dependencies
-        run: uv sync
+        run: uv sync --python ${{ matrix.python-version }} --frozen
 
-      - name: Lint & Format (via just)
-        run: just lint
+      # Optional: prove we're using the right interpreter
+      - name: Show Python used by uv
+        run: uv run --python ${{ matrix.python-version }} python -V
 
-      - name: Typecheck (via just)
-        run: just typecheck
+      - name: Lint
+        run: uv run --python ${{ matrix.python-version }} ruff check ./src
+
+      - name: Typecheck
+        run: |
+          uv run --python ${{ matrix.python-version }} basedpyright ./src
+
+      - name: Check formatting
+        run: |
+          uv run --python ${{ matrix.python-version }} ruff format --check ./src
 
-      - name: Test (via just)
-        run: just test
+      - name: Test
+        run: uv run --python ${{ matrix.python-version }} pytest -q
 
-      - name: Coverage (via just)
-        run: just cov
+      - name: Coverage
+        run: uv run --python ${{ matrix.python-version }} pytest --cov=torusdk --cov-report=term-missing --cov-report=xml
 
       - name: Upload coverage XML
         uses: actions/upload-artifact@v4
@@ -71,21 +79,7 @@ jobs:
 
       - name: Enforce Towncrier fragment on PRs
         if: ${{ github.event_name == 'pull_request' }}
-        run: just news-check
+        run: uv run --python ${{ matrix.python-version }} towncrier check --compare-with origin/main
 
       - name: Build package
-        run: just build
-
-  # Separate job for Nix-specific checks
-  nix-checks:
-    runs-on: ubicloud-standard-2
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@main
-
-      - name: Check Nix flake
-        run: nix flake check
+        run: uv run --python ${{ matrix.python-version }} uv build

.github/workflows/check-nix.yml

@@ -3,19 +3,20 @@ name: Nix checks
 on:
   pull_request:
   push:
-    branches: [main, dev]
+    branches: [main, test-ci]
 
 jobs:
-  checks:
+  check-nix:
     runs-on: ubicloud-standard-2
     permissions:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Install Nix
         uses: DeterminateSystems/nix-installer-action@main
+
       # - uses: DeterminateSystems/magic-nix-cache-action@main
 
       - name: Check health of flake.lock

justfile

@@ -45,25 +45,25 @@ update:
 
 # ==== Code Quality ====
 
-# Format + autofix lint where possible (developer use)
-fmt:
-    uv run ruff format ./src
-    uv run ruff check --fix ./src
-
-# Check formatting without changing files (CI use)
+# Check formatting without changing files
 fmt-check:
     uv run ruff format --check ./src
-    uv run ruff check ./src
+
+# Format files
+fmt:
+    uv run ruff format ./src
 
 # Static analysis: lints + types (CI and local)
-lint: fmt-check
+lint:
     uv run ruff check ./src
-    uv run basedpyright ./src
 
-# Only run type checker (useful locally)
+# Run typechecker
 typecheck:
     uv run basedpyright ./src
 
+# Run all checks
+check: lint typecheck fmt-check
+
 # ==== Tests & Coverage ====
 
 # Run tests (when they exist)

pyproject.toml

@@ -5,7 +5,7 @@ description = "Torus official Python SDK / CLI"
 authors = [{ name = "Renlabs", email = "[email protected]" }]
 license = { text = "MIT" }
 readme = "README.md"
-requires-python = ">=3.11"
+requires-python = ">=3.10,<3.13"
 classifiers = [
     "Intended Audience :: Developers",
     "License :: OSI Approved :: MIT License",