Skip to content

dev: Converts project to using uv as the package manager#236

Closed
asullivan-blze wants to merge 2 commits into
mainfrom
kphoenix-opsyseng-1733-convert-to-uv-package-mgr
Closed

dev: Converts project to using uv as the package manager#236
asullivan-blze wants to merge 2 commits into
mainfrom
kphoenix-opsyseng-1733-convert-to-uv-package-mgr

Conversation

@asullivan-blze

Copy link
Copy Markdown
Contributor

What and why?

This PR:

  • Converts the project to using uv, with the Makefile and CI preferring to use versions as specified in uv.lock.
  • Opts to just delete the built docs directories directly instead of using the Makefile in docs/.
  • Removes useless Makefile dependency for the docs target on develop (opting to just directly sync the venv with the correct group).
  • Bumps pyright, since it was having issues parsing the grouped dependency format in pyproject.toml.
  • Raises the floor for pytest to 9.0.3 to address CVE-2025-71176.
  • Updates the CI workflows to account for the changeover to uv.

Internal reference: OPSYSENG-1733

How was this tested?

make test; and with this PR, the CI/CD actions will also execute.

Checklist

  • [n/a] Have you updated the version in the [project] section of
    the pyproject.toml file (if applicable)?
    -> Not applicable; no substantive code changes requiring a bump of the package version are present in this changeset.

@asullivan-blze asullivan-blze added CI/CD Items affecting GitHub Actions CI/CD security This relates to, or affects, the security of boardwalk/boardwalkd dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 22, 2026
This commit:
- Converts the project to using `uv`, with the Makefile and CI
  preferring to use versions as specified in `uv.lock`.
- Opts to just delete the built docs directories directly instead
  of using the Makefile in `docs/`.
- Removes useless Makefile dependency for the `docs` target on
  `develop` (opting to just directly sync the venv with the correct
  group).
- Bumps pyright, since it was having issues parsing the grouped
  dependency format in `pyproject.toml`.
- Raises the floor for `pytest` to `9.0.3` to address CVE-2025-71176.
- Updates the CI workflows to account for the changeover to uv.

---
Internal reference: OPSYSENG-1733
@asullivan-blze asullivan-blze force-pushed the kphoenix-opsyseng-1733-convert-to-uv-package-mgr branch from df86c5e to 0c765d8 Compare June 22, 2026 20:19
@asullivan-blze

Copy link
Copy Markdown
Contributor Author

Investigating the Snyk issues out-of-band; seems to be some Snyk-side issues.

My scientific, wild approximate guess is that it's probably some parsing issue with the PEP 735 dependency group include syntax, given that pyright==1.1.350 did not seem to correctly parse the pyproject.toml, and after altering the dependency to pyright >= 1.1.350 -- which selected 1.1.410 as in the uv.lock -- and upgrading the venv, the make test-pyright invocation succeeded.

@asullivan-blze

Copy link
Copy Markdown
Contributor Author

Closing, then recreating this PR, as the Snyk documentation on this error suggests to try.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI/CD Items affecting GitHub Actions CI/CD dependencies Pull requests that update a dependency file python Pull requests that update Python code security This relates to, or affects, the security of boardwalk/boardwalkd

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant