Standardize Python 3.11 with uv

Author: LEANDERANTONY

.devcontainer/devcontainer.json

@@ -17,9 +17,9 @@
       ]
     }
   },
-  "updateContentCommand": "[ -f packages.txt ] && sudo apt update && sudo apt upgrade -y && sudo xargs apt install -y <packages.txt; [ -f requirements.txt ] && pip3 install --user -r requirements.txt; pip3 install --user streamlit; echo '✅ Packages installed and Requirements met'",
+  "updateContentCommand": "[ -f packages.txt ] && sudo apt update && sudo xargs apt install -y <packages.txt; python3 -m pip install --user uv; [ -f pyproject.toml ] && ~/.local/bin/uv sync --python 3.11; [ -f pyproject.toml ] && ~/.local/bin/uv run playwright install chromium; echo '✅ uv environment synced'",
   "postAttachCommand": {
-    "server": "streamlit run app.py --server.enableCORS false --server.enableXsrfProtection false"
+    "server": "~/.local/bin/uv run streamlit run app.py --server.enableCORS false --server.enableXsrfProtection false"
   },
   "portsAttributes": {
     "8501": {

.github/workflows/ci.yml

@@ -11,19 +11,21 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+
       - name: Check out repository
         uses: actions/checkout@v4
 
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: "3.11"
+          python-version-file: ".python-version"
 
-      - name: Install dependencies
+      - name: Sync dependencies
         run: |
-          python -m pip install --upgrade pip
-          pip install -r requirements.txt
+          uv sync --frozen
 
       - name: Run unit tests
         run: |
-          python -m unittest tests.test_analysis_store tests.test_report_builder tests.test_exporters tests.test_repo_checks tests.test_github_auth tests.test_github_client tests.test_openai_service
+          uv run python -m unittest tests.test_analysis_store tests.test_report_builder tests.test_exporters tests.test_repo_checks tests.test_github_auth tests.test_github_client tests.test_openai_service

.python-version

@@ -0,0 +1 @@
+3.11

DEVLOG.md

@@ -4,6 +4,16 @@ This log tracks the major implementation milestones for the current modular Stre
 
 ---
 
+## March 13, 2026 - Python 3.11 and uv Environment Standardization
+
+Standardized local development and CI around a reproducible Python toolchain:
+
+- added `pyproject.toml` so direct dependencies are declared in one place
+- targeted Python `3.11` explicitly with a tracked `.python-version`
+- switched CI to `uv sync --frozen` and `uv run`
+- updated the devcontainer bootstrap flow to sync dependencies with uv
+- prepared the repository for a pinned `requirements.txt` exported from the uv lockfile
+
 ## March 7, 2026 - Modular Audit Pipeline
 
 Implemented the current application architecture:

README.md

@@ -183,20 +183,21 @@ Module responsibilities:
 
 ## Setup
 
-### 1. Create and activate a virtual environment
+### 1. Install uv and Python 3.11
 
 ```powershell
-python -m venv venv
-venv\Scripts\activate
+uv python install 3.11
 ```
 
-### 2. Install dependencies
+### 2. Sync the project environment
 
 ```powershell
-pip install -r requirements.txt
-venv\Scripts\python.exe -m playwright install chromium
+uv sync --python 3.11
+uv run playwright install chromium
 ```
 
+This project now targets Python `3.11` explicitly via [`.python-version`](.python-version) and [pyproject.toml](pyproject.toml). The checked-in `requirements.txt` is an exported, pinned snapshot of the uv lockfile for reproducible installs.
+
 ### 3. Add credentials
 
 Create these files in the project root as needed:
@@ -233,7 +234,7 @@ OAuth scope default:
 ## Running the App
 
 ```powershell
-streamlit run app.py
+uv run streamlit run app.py
 ```
 
 Then:

pyproject.toml

@@ -0,0 +1,17 @@
+[project]
+name = "github-portfolio-reviewer-agent"
+version = "0.1.0"
+description = "Streamlit app for auditing GitHub repositories and portfolios."
+readme = "README.md"
+requires-python = ">=3.11,<3.12"
+dependencies = [
+    "markdown-it-py",
+    "openai",
+    "playwright",
+    "reportlab",
+    "requests",
+    "streamlit",
+]
+
+[tool.uv]
+package = false

requirements.txt

@@ -1,7 +1,154 @@
-openai
-requests
-streamlit
-reportlab==3.6.12
-markdown-it-py
-playwright
-
+# This file was autogenerated by uv via the following command:
+#    uv export --format requirements-txt --no-hashes -o requirements.txt
+altair==6.0.0
+    # via streamlit
+annotated-types==0.7.0
+    # via pydantic
+anyio==4.12.1
+    # via
+    #   httpx
+    #   openai
+attrs==25.4.0
+    # via
+    #   jsonschema
+    #   referencing
+blinker==1.9.0
+    # via streamlit
+cachetools==7.0.5
+    # via streamlit
+certifi==2026.2.25
+    # via
+    #   httpcore
+    #   httpx
+    #   requests
+charset-normalizer==3.4.5
+    # via
+    #   reportlab
+    #   requests
+click==8.3.1
+    # via streamlit
+colorama==0.4.6 ; sys_platform == 'win32'
+    # via
+    #   click
+    #   tqdm
+distro==1.9.0
+    # via openai
+gitdb==4.0.12
+    # via gitpython
+gitpython==3.1.46
+    # via streamlit
+greenlet==3.3.2
+    # via playwright
+h11==0.16.0
+    # via httpcore
+httpcore==1.0.9
+    # via httpx
+httpx==0.28.1
+    # via openai
+idna==3.11
+    # via
+    #   anyio
+    #   httpx
+    #   requests
+jinja2==3.1.6
+    # via
+    #   altair
+    #   pydeck
+jiter==0.13.0
+    # via openai
+jsonschema==4.26.0
+    # via altair
+jsonschema-specifications==2025.9.1
+    # via jsonschema
+markdown-it-py==4.0.0
+    # via github-portfolio-reviewer-agent
+markupsafe==3.0.3
+    # via jinja2
+mdurl==0.1.2
+    # via markdown-it-py
+narwhals==2.18.0
+    # via altair
+numpy==2.4.3
+    # via
+    #   pandas
+    #   pydeck
+    #   streamlit
+openai==2.26.0
+    # via github-portfolio-reviewer-agent
+packaging==26.0
+    # via
+    #   altair
+    #   streamlit
+pandas==2.3.3
+    # via streamlit
+pillow==12.1.1
+    # via
+    #   reportlab
+    #   streamlit
+playwright==1.58.0
+    # via github-portfolio-reviewer-agent
+protobuf==6.33.5
+    # via streamlit
+pyarrow==23.0.1
+    # via streamlit
+pydantic==2.12.5
+    # via openai
+pydantic-core==2.41.5
+    # via pydantic
+pydeck==0.9.1
+    # via streamlit
+pyee==13.0.1
+    # via playwright
+python-dateutil==2.9.0.post0
+    # via pandas
+pytz==2026.1.post1
+    # via pandas
+referencing==0.37.0
+    # via
+    #   jsonschema
+    #   jsonschema-specifications
+reportlab==4.4.10
+    # via github-portfolio-reviewer-agent
+requests==2.32.5
+    # via
+    #   github-portfolio-reviewer-agent
+    #   streamlit
+rpds-py==0.30.0
+    # via
+    #   jsonschema
+    #   referencing
+six==1.17.0
+    # via python-dateutil
+smmap==5.0.3
+    # via gitdb
+sniffio==1.3.1
+    # via openai
+streamlit==1.55.0
+    # via github-portfolio-reviewer-agent
+tenacity==9.1.4
+    # via streamlit
+toml==0.10.2
+    # via streamlit
+tornado==6.5.5
+    # via streamlit
+tqdm==4.67.3
+    # via openai
+typing-extensions==4.15.0
+    # via
+    #   altair
+    #   anyio
+    #   openai
+    #   pydantic
+    #   pydantic-core
+    #   pyee
+    #   referencing
+    #   streamlit
+    #   typing-inspection
+typing-inspection==0.4.2
+    # via pydantic
+tzdata==2025.3
+    # via pandas
+urllib3==2.6.3
+    # via requests
+watchdog==6.0.0 ; sys_platform != 'darwin'
+    # via streamlit

src/analysis_store.py

@@ -1,5 +1,6 @@
 import json
 import sqlite3
+from contextlib import closing
 from dataclasses import asdict
 from datetime import datetime, timezone
 from hashlib import sha256
@@ -23,7 +24,7 @@ def _connect(db_path=None):
 
 
 def initialize_analysis_store(db_path=None):
-    with _connect(db_path) as connection:
+    with closing(_connect(db_path)) as connection:
         connection.execute(
             """
             CREATE TABLE IF NOT EXISTS analysis_cache (
@@ -156,7 +157,7 @@ def _report_from_payload(payload):
 def load_cached_report(analysis_key, freshness_signature, db_path=None):
     initialize_analysis_store(db_path=db_path)
 
-    with _connect(db_path) as connection:
+    with closing(_connect(db_path)) as connection:
         row = connection.execute(
             """
             SELECT report_json, updated_at
@@ -184,7 +185,7 @@ def save_cached_report(analysis_key, github_username, freshness_signature, repor
     serialized_report = json.dumps(asdict(report), ensure_ascii=True)
     timestamp = datetime.now(timezone.utc).isoformat()
 
-    with _connect(db_path) as connection:
+    with closing(_connect(db_path)) as connection:
         connection.execute(
             """
             INSERT INTO analysis_cache (