Migrate ci to uv

Also update dependencies.

Author: maread99

.github/dependabot.yml

@@ -5,11 +5,17 @@
 
 version: 2
 updates:
-  # Configuration for pip
-  - package-ecosystem: "pip" # See documentation for possible values
-    directory: "/etc/requirements_dependabot" # Location of package manifests
+  - package-ecosystem: "uv" # See documentation for possible values
+    directory: "/" # Location of package manifests
     schedule:
-      interval: "daily"
+      interval: "monthly"
+    allow:
+      # Allow only direct dependencies (in theory not indirect or sub-dependencies)
+      - dependency-type: "direct"
+    groups:
+      direct-deps:
+        patterns:
+          - "*"
 # for reference:
 #     ignore:
 #       # Ignore updates to packages that start with 'aws'
@@ -23,4 +29,4 @@ updates:
   - package-ecosystem: "github-actions" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
-      interval: "daily"
+      interval: "monthly"

.github/workflows/build-test.yml

@@ -24,19 +24,17 @@ jobs:
         python-version: ["3.10", "3.13"]
 
     steps:
-      - uses: actions/checkout@v4
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+      - uses: actions/checkout@v5
+      - name: Install uv and set the Python version
+        uses: astral-sh/setup-uv@v6
         with:
           python-version: ${{ matrix.python-version }}
-          cache: 'pip'
-          cache-dependency-path: 'etc/requirements_dependabot/requirements_tests.txt'
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install -r etc/requirements_dependabot/requirements_tests.txt
-          pip install -e .
-      - name: Test with pytest
-        # fail it if doesn't pass test suite
-        run: |
-          pytest
+      - name: Enable caching
+        uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+
+      - name: Install the project
+        run: uv sync --locked --group test --no-dev
+      - name: Run tests
+        run: uv run pytest

.github/workflows/release.yml

@@ -1,65 +1,54 @@
-# Workflow to upload a Python Package using Twine when a release is created
-name: Release to PyPI
+# Workflow to upload a Python Package when a release is created
+name: Publish to PyPI
 
 on:
   release:
     types: [released]
 
 permissions:
+  id-token: write
   contents: read
 
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
     steps:
-    - uses: actions/checkout@v4
-
-    - name: Set up Python
-      uses: actions/setup-python@v5
-      with:
-        python-version: '3.x'
-
-    - name: Install build dependencies
-      run: |
-        python -m pip install --upgrade pip
-        pip install build
-
-    - name: Build package
-      run: python -m build
-
-    - name: Publish to Test PyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_TEST_API_TOKEN }}
-        repository-url: https://test.pypi.org/legacy/
-
-    - name: Install from testpypi and import
-      shell: bash
-      run: |
-        sleep 5
-        while [ "${{ github.ref_name }}" != $(pip index versions -i https://test.pypi.org/simple --pre market-analy | cut -d'(' -f2 | cut -d')' -f1 | sed 1q) ];\
-          do echo "waiting for package to appear in test index, sleeping 5s"; sleep 5s; echo "woken up"; done
-        pip install --index-url https://test.pypi.org/simple market-analy==${{ github.ref_name }} --no-deps
-        pip install -r etc/requirements.txt
-        python -c 'import market_analy;print(market_analy.__version__)'
-
-    - name: Clean pip
-      run: |
-        pip uninstall -y market_analy
-        pip cache purge
-
-    - name: Publish to PyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
-
-    - name: Install and import
-      shell: bash
-      run: |
-        sleep 5
-        while [ "${{ github.ref_name }}" != $(pip index versions -i https://pypi.org/simple --pre market-analy | cut -d'(' -f2 | cut -d')' -f1 | sed 1q) ];\
-          do echo "waiting for package to appear in index, sleeping 5s"; sleep 5s; echo "woken up"; done
-        pip install --index-url https://pypi.org/simple market-analy==${{ github.ref_name }}
-        python -c 'import market_analy;print(market_analy.__version__)'
+      - uses: actions/checkout@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
+      - name: Install Python
+        run: uv python install
+      - name: Build
+        run: uv build
+
+      - name: Publish to Test PyPI
+        run: uv publish --index testpypi
+      - name: Check test install and import
+        run: |
+          sleep 5  # Wait for Test Pypi to publish
+          # Include pypi index for deps not available from test pypi...
+          uv run \
+            --with market-analy \
+            --refresh-package market-analy \
+            --index https://test.pypi.org/simple \
+            --index https://pypi.org/simple \
+            --index-strategy unsafe-best-match \
+            --no-project \
+            --isolated \
+            -- \
+            python -c 'import market_analy; print(f"{market_analy.__version__=}")'
+
+      - name: Publish to PyPI
+        run: uv publish
+      - name: Check install and import
+        run: |
+          sleep 5  # Wait for Pypi to publish
+          uv run \
+          --with market-analy \
+          --refresh-package market-analy \
+          --no-project \
+          --isolated \
+          -- \
+          python -c 'import market_analy;print(f"{market_analy.__version__=}")'

.python-version

@@ -0,0 +1 @@
+3.10