chore: Migrate from pip to uv package manager (#100)

Switch to uv for Python package management with exclude-newer=1week
to prevent supply chain attacks.

Author: erezrokah

.github/workflows/ci.yml

@@ -15,15 +15,15 @@ jobs:
 
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
+      - name: Install uv
+        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8
+        with:
+          version: "0.11.2"
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: ${{ matrix.python-version }}
-          cache: "pip"
-          cache-dependency-path: "requirements.txt"
-
       - name: Install dependencies
-        run: pip install -r requirements.txt
+        run: uv sync --frozen
       - name: fmt
         run: make fmt-check

Makefile

@@ -1,5 +1,5 @@
 fmt:
-	black .
+	uv run black .
 
 fmt-check:
-	black --check .
+	uv run black --check .

pyproject.toml

@@ -0,0 +1,20 @@
+[project]
+name = "benchmark"
+version = "0.1.0"
+requires-python = ">=3.11"
+dependencies = [
+    "colorlog>=6.9.0",
+    "fastparquet>=2024.11.0",
+    "pandas>=2.3.2",
+    "pyarrow>=21.0.0",
+    "python-snappy>=0.7.3",
+    "psutil>=7.0.0",
+]
+
+[dependency-groups]
+dev = [
+    "black>=24.3.0",
+]
+
+[tool.uv]
+exclude-newer = "1 week"