chore: more modernizing (#33)

* chore: more modernizing

Signed-off-by: Henry Schreiner <[email protected]>

* style: pre-commit fixes

---------

Signed-off-by: Henry Schreiner <[email protected]>
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Author: henryiii

.github/workflows/cd.yml

@@ -13,6 +13,8 @@ concurrency:
 env:
   FORCE_COLOR: 3
 
+permissions: {}
+
 jobs:
   dist:
     name: Distribution build
@@ -22,9 +24,9 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
-      - name: Build sdist and wheel
-        uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@v2
 
   publish:
     needs: [dist]
@@ -34,6 +36,7 @@ jobs:
       url: https://pypi.org/p/dynamic-metadata
     permissions:
       id-token: write
+      attestations: write
     runs-on: ubuntu-latest
     if: github.event_name == 'release' && github.event.action == 'published'
 
@@ -43,4 +46,9 @@ jobs:
           name: Packages
           path: dist
 
+      - name: Generate artifact attestation for sdist and wheel
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: "dist/*"
+
       - uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/ci.yml

@@ -14,55 +14,69 @@ concurrency:
 env:
   FORCE_COLOR: 3
 
+permissions: {}
+
 jobs:
   pre-commit:
     name: Format
     runs-on: ubuntu-latest
+    timeout-minutes: 8
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
       - uses: actions/setup-python@v5
         with:
-          python-version: "3.x"
-      - uses: pre-commit/[email protected]
+          python-version: "3.13"
+      - uses: astral-sh/setup-uv@v5
+      - uses: actions/cache@v4
         with:
-          extra_args: --hook-stage manual --all-files
+          path: ~/.cache/pre-commit
+          key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}
+      - name: Run pre-commit
+        run:
+          uvx --with pre-commit-uv pre-commit run --all-files
+          --show-diff-on-failure
       - name: Run PyLint
-        run: |
-          echo "::add-matcher::$GITHUB_WORKSPACE/.github/matchers/pylint.json"
-          pipx run nox -s pylint
+        run: uvx nox -s pylint -- --output-format=github
 
   checks:
     name: Check Python ${{ matrix.python-version }} on ${{ matrix.runs-on }}
     runs-on: ${{ matrix.runs-on }}
-    needs: [pre-commit]
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.8", "3.11", "3.12"]
+        python-version: ["3.13"]
         runs-on: [ubuntu-latest, macos-latest, windows-latest]
 
         include:
-          - python-version: pypy-3.9
+          - python-version: pypy-3.10
+            runs-on: ubuntu-latest
+          - python-version: "3.11"
+            runs-on: ubuntu-latest
+          - python-version: "3.8"
             runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
           allow-prereleases: true
 
+      - uses: astral-sh/setup-uv@v5
+
       - name: Install package
-        run: python -m pip install .[test]
+        run: uv sync
 
       - name: Test package
         run: >-
-          python -m pytest -ra --cov --cov-report=xml --cov-report=term
+          uv run pytest -ra --cov --cov-report=xml --cov-report=term
           --durations=20
 
       - name: Upload coverage report

noxfile.py

@@ -1,14 +1,23 @@
+#!/usr/bin/env -S uv run -q
+
+# /// script
+# dependencies = ["nox>=2025.2.9"]
+# ///
+
 from __future__ import annotations
 
 import argparse
-import shutil
 from pathlib import Path
 
 import nox
 
-DIR = Path(__file__).parent.resolve()
+nox.needs_version = ">=2025.2.9"
+nox.options.default_venv_backend = "uv|virtualenv"
 
-nox.options.sessions = ["lint", "pylint", "tests"]
+DIR = Path(__file__).parent.resolve()
+PYPROJECT = nox.project.load_toml("pyproject.toml")
+TEST_DEPS = nox.project.dependency_groups(PYPROJECT, "test")
+DOCS_DEPS = nox.project.dependency_groups(PYPROJECT, "docs")
 
 
 @nox.session
@@ -36,11 +45,11 @@ def tests(session: nox.Session) -> None:
     """
     Run the unit and regular tests. Use --cov to activate coverage.
     """
-    session.install(".[test]")
+    session.install("-e.", *TEST_DEPS)
     session.run("pytest", *session.posargs)
 
 
-@nox.session
+@nox.session(default=False)
 def docs(session: nox.Session) -> None:
     """
     Build the docs. Pass "--serve" to serve.
@@ -56,7 +65,7 @@ def docs(session: nox.Session) -> None:
     if args.builder != "html" and args.serve:
         session.error("Must not specify non-HTML builder with --serve")
 
-    session.install(".[docs]")
+    session.install("-e.", *DOCS_DEPS)
     session.chdir("docs")
 
     if args.builder == "linkcheck":
@@ -83,7 +92,7 @@ def docs(session: nox.Session) -> None:
         session.run("python", "-m", "http.server", "8000", "-d", "_build/html")
 
 
-@nox.session
+@nox.session(default=False)
 def build_api_docs(session: nox.Session) -> None:
     """
     Build (regenerate) API docs.
@@ -102,15 +111,15 @@ def build_api_docs(session: nox.Session) -> None:
     )
 
 
-@nox.session
+@nox.session(default=False)
 def build(session: nox.Session) -> None:
     """
     Build an SDist and wheel.
     """
 
-    build_p = DIR.joinpath("build")
-    if build_p.exists():
-        shutil.rmtree(build_p)
-
     session.install("build")
     session.run("python", "-m", "build")
+
+
+if __name__ == "__main__":
+    nox.main()

pyproject.toml

@@ -33,15 +33,21 @@ dependencies = [
   "typing_extensions >=4.6; python_version<'3.11'",
 ]
 
-[project.optional-dependencies]
+[project.urls]
+Homepage = "https://github.com/scikit-build/dynamic-metadata"
+"Bug Tracker" = "https://github.com/scikit-build/dynamic-metadata/issues"
+Discussions = "https://github.com/scikit-build/dynamic-metadata/discussions"
+Changelog = "https://github.com/scikit-build/dynamic-metadata/releases"
+
+[project.entry-points."validate_pyproject.tool_schema"]
+dynamic-metadata = "dynamic_metadata.schema:get_schema"
+
+[dependency-groups]
 test = [
-  "pytest >=6",
-  "pytest-cov >=3",
-]
-dev = [
-  "pytest >=6",
+  "pytest >=7",
   "pytest-cov >=3",
 ]
+dev = [{ include-group = "test" }]
 docs = [
   "sphinx>=4.0",
   "myst_parser>=0.13",
@@ -51,24 +57,12 @@ docs = [
   "furo",
 ]
 
-[project.urls]
-Homepage = "https://github.com/scikit-build/dynamic-metadata"
-"Bug Tracker" = "https://github.com/scikit-build/dynamic-metadata/issues"
-Discussions = "https://github.com/scikit-build/dynamic-metadata/discussions"
-Changelog = "https://github.com/scikit-build/dynamic-metadata/releases"
-
 [tool.hatch]
 version.path = "src/dynamic_metadata/__init__.py"
-envs.default.dependencies = [
-  "pytest",
-  "pytest-cov",
-]
 
-[project.entry-points."validate_pyproject.tool_schema"]
-dynamic-metadata = "dynamic_metadata.schema:get_schema"
 
 [tool.pytest.ini_options]
-minversion = "6.0"
+minversion = "7.0"
 addopts = ["-ra", "--showlocals", "--strict-markers", "--strict-config"]
 xfail_strict = true
 filterwarnings = [