Postgres and crypto are optionals, the others are groups

Author: bjester

.github/actionlint.yml

@@ -0,0 +1,4 @@
+paths:
+  .github/workflows/check_migrations_sqlite.yml:
+    ignore:
+      - 'SC2086:info:10:54'

.github/workflows/check-docs.yml

@@ -1,5 +1,7 @@
 name: Docs
+
 on: [push, pull_request]
+
 jobs:
   pre_job:
     name: Path match check
@@ -13,26 +15,27 @@ jobs:
         with:
           github_token: ${{ github.token }}
           paths: '["docs/**", "pyproject.toml", "uv.lock"]'
+
   docs:
     name: Checking docs build
     needs: pre_job
     if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
       - name: Install system dependencies
         run: |
           sudo apt-get -y -qq update
           sudo apt-get install -y swig openssl libssl-dev
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v8.2.0
         with:
           python-version: "3.10"
           activate-environment: "true"
           enable-cache: "true"
       - name: Install dependencies
-        run: uv sync --extra docs
+        run: uv sync --frozen --group docs
       - name: Check Docs build
         run: make docs

.github/workflows/check_migrations_sqlite.yml

@@ -1,5 +1,7 @@
 name: Migrations for SQLite versions
+
 on: [push, pull_request]
+
 jobs:
   pre_job:
     name: Path match check
@@ -13,33 +15,34 @@ jobs:
         with:
           github_token: ${{ github.token }}
           paths: '["morango/migrations/*.py", ".github/workflows/check_migrations_sqlite.yml", "pyproject.toml", "uv.lock"]'
+
   build:
     name: Build wheel
     needs: pre_job
+    if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
       - name: Install uv
-        if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v8.2.0
         with:
           python-version: 3.9
           enable-cache: "true"
       - name: Build wheel
-        if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
         run: uv build --wheel
       - name: Upload wheel artifact
-        if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: wheel
           path: dist/*.whl
           retention-days: 1
+
   migration_test:
     name: SQLite migration tests
     needs: [pre_job, build]
+    if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
     runs-on: ubuntu-latest
     container:
       image: python:3.7-buster
@@ -52,19 +55,16 @@ jobs:
           echo "Acquire::Check-Valid-Until \"false\";" > /etc/apt/apt.conf.d/99archive
           apt-get -y -qq update
           apt-get install -y build-essential tcl git-lfs
-      - uses: actions/checkout@v6
-        if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
+      - uses: actions/checkout@v6.0.2
         with:
           lfs: true
           fetch-depth: 0
       - name: Download wheel artifact
-        if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.1
         with:
           name: wheel
           path: dist/
       - name: Build SQLite 3.25.3
-        if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
         run: |
           # Following the instructions from https://til.simonwillison.net/sqlite/ld-preload
           # to build SQLite from source, using version 3.25.3
@@ -76,16 +76,21 @@ jobs:
           'import sqlite3; assert sqlite3.connect(":memory").execute("select sqlite_version()").fetchone()[0] == "3.25.3"'
           # Once we have confirmed that this works, set it for subsequent steps
           echo "LD_PRELOAD=$(realpath .libs/libsqlite3.so)" >> $GITHUB_ENV
-      - uses: actions/cache@v5
-        if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
+      - uses: actions/cache@v5.0.5
         with:
           path: ~/.cache/pip
           key: ${{ runner.os }}-pip-${{ hashFiles('setup.py') }}
           restore-keys: |
             ${{ runner.os }}-pip-
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.2.0
+        with:
+          enable-cache: "true"
+      - name: Manually install test dependencies
+        run: |
+          uv pip install --system --group test
       - name: Install dependencies
-        if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
-        run: pip install $(ls dist/*.whl | head -n 1)[test]
+        run: pip install "$(find dist -name '*.whl' | head -n 1)"
       - name: Run migrations
         if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
         run: python tests/testapp/manage.py migrate

.github/workflows/python-publish.yml

@@ -1,19 +1,18 @@
-# This workflow will upload a Python Package using uv when a release is created
-# uv provides fast, modern Python package building and publishing
-
 name: Upload Python Package
+
 on:
   release:
     types: [published]
+
 jobs:
   deploy:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v8.2.0
         with:
           python-version: 3.9
           activate-environment: "true"