chore(ci): only install a native build toolchain for PyPy jobs (#3171)

Co-authored-by: spencer <spencer.tb@ethereum.org>

Author: danceratopz

.github/actions/build-evmone/action.yaml

@@ -66,10 +66,10 @@ runs:
       with:
         cmake-version: '3.x'
 
-    - name: Install GMP Linux
+    - name: Install build dependencies Linux
       if: runner.os == 'Linux' && steps.cache-restore.outputs.cache-hit != 'true'
       shell: bash
-      run: sudo apt-get -q update && sudo apt-get -qy install libgmp-dev
+      run: sudo apt-get -q update && sudo apt-get -qy install build-essential libgmp-dev
 
     - name: Install GMP macOS
       if: runner.os == 'macOS' && steps.cache-restore.outputs.cache-hit != 'true'

.github/actions/build-fixtures/action.yaml

@@ -28,7 +28,6 @@ runs:
     - uses: ./.github/actions/setup-uv
       with:
         enable-cache: "false"
-    - uses: ./.github/actions/setup-env
     - name: Install EEST
       shell: bash
       run: uv sync --no-progress

.github/actions/setup-env-pypy/action.yaml

@@ -0,0 +1,15 @@
+name: Setup PyPy Build Toolchain
+description: |
+  Install the native toolchain needed to build sdists for PyPy jobs.
+  Several dependencies publish no PyPy wheels and are built from source:
+  libcst needs Rust; pycryptodome, PyYAML, regex, and MarkupSafe need a C
+  compiler. CPython jobs install wheels only and must not use this action.
+runs:
+  using: "composite"
+  steps:
+    - name: Install C and Rust toolchains
+      shell: bash
+      run: |
+        sudo apt-get -q update
+        sudo DEBIAN_FRONTEND=noninteractive apt-get -qy install build-essential rustup
+        rustup update --no-self-update 1.89.0 && rustup default 1.89.0

.github/actions/setup-env/action.yaml

@@ -161,10 +161,6 @@ jobs:
         with:
           cache-dependency-glob: "execution-specs/uv.lock"
 
-      - name: Setup environment
-        if: matrix.mode == 'dev'
-        uses: ./execution-specs/.github/actions/setup-env
-
       - name: Load cached Docker images
         uses: ./execution-specs/.github/actions/load-docker-images
 

.github/workflows/hive-consume.yaml

@@ -71,9 +71,6 @@ jobs:
         with:
           cache-dependency-glob: "execution-specs/uv.lock"
 
-      - name: Setup environment
-        uses: ./execution-specs/.github/actions/setup-env
-
       - name: Load cached Docker images
         uses: ./execution-specs/.github/actions/load-docker-images
 

.github/workflows/hive-execute.yaml

@@ -37,9 +37,6 @@ jobs:
       - name: Ensure SHA pinned actions
         uses: zgosalvez/github-actions-ensure-sha-pinned-actions@70c4af2ed5282c51ba40566d026d6647852ffa3e # v5.0.1
       - uses: ./.github/actions/setup-uv
-      - name: Install build dependencies
-        shell: bash
-        run: sudo DEBIAN_FRONTEND=noninteractive apt-get install --yes --force-yes build-essential pkg-config
       - name: Detect Python version
         id: python
         shell: bash
@@ -99,7 +96,6 @@ jobs:
       - uses: ./.github/actions/setup-uv
         with:
           python-version: "3.14"
-      - uses: ./.github/actions/setup-env
       - name: Run fill (${{ matrix.label }})
         run: >
           just fill --from ${{ matrix.from_fork }} --until ${{ matrix.until_fork }}
@@ -121,7 +117,7 @@ jobs:
       - uses: ./.github/actions/setup-uv
         with:
           python-version: "pypy3.11"
-      - uses: ./.github/actions/setup-env
+      - uses: ./.github/actions/setup-env-pypy
       - name: Run fill-pypy tests
         run: just fill-pypy
         env:
@@ -136,7 +132,6 @@ jobs:
       - uses: ./.github/actions/setup-uv
         with:
           python-version: "3.14"
-      - uses: ./.github/actions/setup-env
       - name: Fill and run json-loader tests
         run: just json-loader
         env:
@@ -156,7 +151,6 @@ jobs:
       - uses: ./.github/actions/setup-uv
         with:
           python-version: "3.14"
-      - uses: ./.github/actions/setup-env
       - name: Run spec-tools tests
         run: just spec-tools
         env:
@@ -168,7 +162,6 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: ./.github/actions/setup-uv
-      - uses: ./.github/actions/setup-env
       - uses: ./.github/actions/build-evmone
       - name: Run test-tests
         run: just test-tests
@@ -183,7 +176,7 @@ jobs:
       - uses: ./.github/actions/setup-uv
         with:
           python-version: "pypy3.11"
-      - uses: ./.github/actions/setup-env
+      - uses: ./.github/actions/setup-env-pypy
       - uses: ./.github/actions/build-evmone
       - name: Run test-tests-pypy
         run: just test-tests-pypy

.github/workflows/test.yaml

@@ -64,10 +64,10 @@ deadcode:
 format-check *args:
     uv run ruff format --check "$@"
 
-# Run type checking with mypy
+# Run type checking with mypy (installs the optimized dependency group)
 [group('static analysis')]
 typecheck *args:
-    uv run mypy "$@"
+    uv run --group optimized mypy "$@"
 
 # Check EELS import isolation
 [group('static analysis')]

Justfile

@@ -61,7 +61,8 @@ Development dependencies are grouped into `[dependency-groups]`, one group per c
 Groups defined by the specs package:
 
 - `test`, `lint`, `actionlint`, `doc`, `mkdocs`.
-- `dev` includes all of the above plus the `optimized` extra.
+- `dev` includes all of the above.
+- `optimized` pulls in the `optimized` extra for the sync tool. It is not part of `dev` because `ethash` has no CPython 3.14 wheels and would require a C toolchain to install; enable it with `uv sync --group optimized` when needed.
 
 Groups defined by the testing package:
 

docs/dev/deps_and_packaging.md

@@ -161,7 +161,7 @@ The following must be updated manually afterwards:
 
 The sync tool uses an RPC provider to fetch and validate blocks against EELS. The validated state can be stored in a local DB. Because syncing directly with the specs is very slow, the sync tool can also leverage the `ethereum_optimized` module, which contains alternative implementations of routines in EELS optimized for speed rather than clarity/readability.
 
-Invoke the tool with `ethereum-spec-sync`. Arguments:
+Invoke the tool with `uv run --group optimized ethereum-spec-sync` (the `optimized` dependency group provides the `ethereum_optimized` module). Arguments:
 
 - `rpc-url`: Endpoint providing the Ethereum RPC API. Defaults to `http://localhost:8545/`.
 - `unoptimized`: Don't use the optimized state/ethash (this can be extremely slow).