chore: port build tooling to uv

This commit replaces the existing build-tooling with uv. In addition,
all CI operations are captured in scripts to make it easier to run
linting, formatting, unit tests, and system tests locally without having
to remember the exact set of commands.

Fixes #443.

Author: enocom

.github/workflows/coverage.yaml

@@ -33,25 +33,14 @@ jobs:
         with:
           python-version: "3.14"
 
-      - run: pip install nox coverage
+      - name: Install uv
+        uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5.4.1
 
       - name: Checkout PR branch
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
-      - name: Calculate PR code coverage
-        run: |
-          nox --sessions unit-3.14
-          coverage report --show-missing
-          export PR_COVER=$(coverage report | awk '$1 == "TOTAL" {print $NF+0}')
-          echo "PR_COVER=$PR_COVER" >> $GITHUB_ENV
-          coverage erase
-
-      - name: Verify code coverage. If your reading this and the step has failed, please add tests to cover your changes.
-        run: |
-          echo "PULL REQUEST CODE COVERAGE is ${{ env.PR_COVER }}%"
-          if [ "${{ env.PR_COVER }}" -lt "90"  ]; then
-            exit 1;
-          fi
+      - name: Verify code coverage
+        run: ./scripts/coverage.sh

.github/workflows/lint.yaml

@@ -34,14 +34,14 @@ jobs:
         with:
           python-version: "3.14"
 
-      - name: Install nox
-        run: pip install nox
+      - name: Install uv
+        uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5.4.1
 
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
-      - name: Run nox lint session
-        run: nox -s lint
+      - name: Run lint
+        run: ./scripts/lint.sh

.github/workflows/tests.yaml

@@ -52,8 +52,8 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
-      - name: Install nox
-        run: pip install nox
+      - name: Install uv
+        uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5.4.1
 
       - id: 'auth'
         name: Authenticate to Google Cloud
@@ -66,7 +66,8 @@ jobs:
           access_token_lifetime: 600s
 
       - name: Run tests
-        run: nox -s unit-${{ matrix.python-version }}
+        shell: bash
+        run: ./scripts/test_unit.sh
 
       - name: FlakyBot (Linux)
         # only run flakybot on periodic (schedule) and continuous (push) events
@@ -118,8 +119,8 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
-      - name: Install nox
-        run: pip install nox
+      - name: Install uv
+        uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5.4.1
 
       - id: 'auth'
         name: 'Authenticate to Google Cloud'
@@ -149,7 +150,7 @@ jobs:
           ALLOYDB_INSTANCE_IP: '${{ steps.secrets.outputs.ALLOYDB_INSTANCE_IP }}'
           ALLOYDB_INSTANCE_URI: '${{ steps.secrets.outputs.ALLOYDB_INSTANCE_URI }}'
           ALLOYDB_PSC_INSTANCE_URI: '${{ steps.secrets.outputs.ALLOYDB_PSC_INSTANCE_URI }}'
-        run: nox -s system-${{ matrix.python-version }}
+        run: ./scripts/test_system.sh
 
       - name: FlakyBot (Linux)
         # only run flakybot on periodic (schedule) and continuous (push) events

.gitignore

@@ -50,6 +50,10 @@ docs.metadata
 
 # Virtual environment
 env/
+.venv
+
+# uv lock file (library — consumers resolve their own deps)
+uv.lock
 
 # Test logs
 coverage.xml

google/cloud/alloydbconnector/async_connector.py

@@ -119,10 +119,17 @@ def __init__(
 
         # check if AsyncConnector is being initialized with event loop running
         # Otherwise we will lazy init keys
+        self._keys: Optional[asyncio.Task] = None
         try:
-            self._keys: Optional[asyncio.Task] = asyncio.create_task(generate_keys())
+            # Try to get the running loop before creating a task. The call here
+            # will raise a RuntimeError if no loop is running. Without calling
+            # get_running_loop, a direct call to create_task would also raise
+            # an exception but it would leak the generate_keys coroutine. To
+            # avoid leaking the coroutine, we call get_running_loop first.
+            asyncio.get_running_loop()
+            self._keys = asyncio.create_task(generate_keys())
         except RuntimeError:
-            self._keys = None
+            pass
         self._client: Optional[AlloyDBClient] = None
         self._closed = False
 

google/cloud/alloydbconnector/client.py

@@ -18,6 +18,7 @@
 import logging
 from typing import TYPE_CHECKING
 from typing import Optional
+from typing import Union
 
 from cryptography import x509
 
@@ -95,7 +96,7 @@ def __init__(
         # API, even from multiple threads, need to be made to a single-event
         # loop. See https://github.com/GoogleCloudPlatform/alloydb-python-connector/issues/435
         # for more details.
-        self._is_sync = False
+        self._client: Union[v1beta.AlloyDBAdminClient, v1beta.AlloyDBAdminAsyncClient]
         if client:
             self._client = client
         elif driver == "pg8000" or driver == "psycopg":
@@ -110,7 +111,6 @@ def __init__(
                     user_agent=user_agent,
                 ),
             )
-            self._is_sync = True
         else:
             self._client = v1beta.AlloyDBAdminAsyncClient(
                 credentials=credentials,
@@ -163,7 +163,7 @@ async def _get_metadata(
         )
 
         req = v1beta.GetConnectionInfoRequest(parent=parent)
-        if self._is_sync:
+        if isinstance(self._client, v1beta.AlloyDBAdminClient):
             resp = self._client.get_connection_info(request=req)
         else:
             resp = await self._client.get_connection_info(request=req)
@@ -213,11 +213,11 @@ async def _get_client_certificate(
             public_key=pub_key,
             use_metadata_exchange=self._use_metadata,
         )
-        if self._is_sync:
+        if isinstance(self._client, v1beta.AlloyDBAdminClient):
             resp = self._client.generate_client_certificate(request=req)
         else:
             resp = await self._client.generate_client_certificate(request=req)
-        return (resp.ca_cert, resp.pem_certificate_chain)
+        return (resp.ca_cert, list(resp.pem_certificate_chain))
 
     async def get_connection_info(
         self,

noxfile.py

@@ -62,6 +62,31 @@ pg8000 = ["pg8000>=1.31.1"]
 asyncpg = ["asyncpg>=0.31.0"]
 psycopg = ["psycopg>=3.1.0"]
 
+[dependency-groups]
+test = [
+    "asyncpg>=0.31.0",
+    "mock>=5.2.0",
+    "pg8000>=1.31.5",
+    "psycopg2-binary>=2.9.11",
+    "psycopg>=3.3.3",
+    "psycopg-binary>=3.3.3",
+    "pytest>=9.0.2",
+    "pytest-asyncio>=1.3.0",
+    "pytest-cov>=7.0.0",
+    "SQLAlchemy[asyncio]>=2.0.48",
+    "aioresponses>=0.7.8",
+    "coverage",
+]
+lint = [
+    "ruff==0.11.2",
+    "mypy",
+    "types-aiofiles",
+    "types-requests",
+    "build",
+    "twine",
+    {include-group = "test"},
+]
+
 [tool.setuptools.dynamic]
 version = { attr = "google.cloud.alloydbconnector.version.__version__" }
 
@@ -98,7 +123,6 @@ ignore = [
 ]
 
 [tool.ruff.lint.per-file-ignores]
-"noxfile.py" = ["ANN"]
 "tests/*" = ["ANN"]
 
 [tool.ruff.lint.isort]