fix: Use modern uv versions in CI (#380)

# [Pull request title here]

## Description

Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.

Fixes # (issue)

## Type of change

Please delete options that are not relevant.

- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] This change requires a documentation update

## How has this been tested?

Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration

- [ ] Test A
- [ ] Test B

**Test Configuration**:

- Firmware version:
- Hardware:
- Toolchain:
- SDK:

## Checklist

- [ ] My code follows the style guidelines of this project
- [ ] I have performed a self-review of my own code
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] I have made corresponding changes to the documentation
- [ ] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [ ] New and existing unit tests pass locally with my changes
- [ ] Any dependent changes have been merged and published in downstream
modules

Author: Diapolo10

.github/dependabot.yml

@@ -15,7 +15,7 @@ updates:
     schedule:
       interval: "daily"
 
-  - package-ecosystem: "pip"
+  - package-ecosystem: "uv"
     directory: "/"
     open-pull-requests-limit: 10
     schedule:

.github/workflows/build_release.yml

@@ -1,6 +1,6 @@
 # This workflow automatically creates a GitHub release for the project on successful version update
 
-name: Create a GitHub release
+name: Create a release
 
 on:
   push:
@@ -11,97 +11,79 @@ permissions:
   contents: write
 
 jobs:
-  linux:
+  generate-matrix:
+    name: Derive Python version matrix from pyproject.toml
     runs-on: ubuntu-latest
+    outputs:
+      python-versions: ${{ steps.python-versions.outputs.python-versions }}
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v7
-
-    - name: Install uv
-      uses: astral-sh/setup-uv@v7
-      with:
-        cache-dependency-glob: "uv.lock"
-        enable-cache: true
-        python-version: "3.12"
-        version: "0.5.13"
-
-    - name: Install library and dependencies
-      run: |
-        uv sync --frozen
-
-    - uses: messense/maturin-action@v1
-      with:
-        manylinux: auto
-        command: build
-        args: --release --sdist -o dist --find-interpreter
-
-    - name: Upload wheels
-      uses: actions/upload-artifact@v7
-      with:
-        name: wheels
-        path: dist
 
-  windows:
-    runs-on: windows-latest
-    steps:
     - name: Checkout repository
       uses: actions/checkout@v7
 
-    - name: Install uv
-      uses: astral-sh/setup-uv@v7
-      with:
-        cache-dependency-glob: "uv.lock"
-        enable-cache: true
-        python-version: "3.12"
-        version: "0.5.13"
-
-    - name: Install library and dependencies
+    - name: Read supported versions from classifiers
+      id: python-versions
       run: |
-        uv sync --frozen
-
-    - uses: messense/maturin-action@v1
-      with:
-        command: build
-        args: --release -o dist --find-interpreter
+        python - <<'EOF' >> "$GITHUB_OUTPUT"
+        import json
+        import tomllib
+
+        with open("pyproject.toml", "rb") as f:
+            classifiers = tomllib.load(f)["project"]["classifiers"]
+        
+        prefix = "Programming Language :: Python :: 3."
+        versions = [
+            classifier.rsplit("::", 1)[-1].strip()
+            for classifier in classifiers
+            if classifier.startswith(prefix)
+        ]
+        print(f"python-versions={json.dumps(versions)}")
+        EOF
+
+  build:
+    needs: generate-matrix
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, ubuntu-latest, windows-latest]
+        python-version: ${{ fromJson(needs.generate-matrix.outputs.python-versions) }}
+
+    env:
+      PYTHON_VERSION: ${{ matrix.python-version }}
 
-    - name: Upload wheels
-      uses: actions/upload-artifact@v7
-      with:
-        name: wheels
-        path: dist
-
-  macos:
-    runs-on: macos-latest
     steps:
+
     - name: Checkout repository
       uses: actions/checkout@v7
 
     - name: Install uv
       uses: astral-sh/setup-uv@v7
       with:
         cache-dependency-glob: "uv.lock"
-        enable-cache: true
-        version: "0.5.13"
+        enable-cache: false
+        python-version: ${{ matrix.python-version }}
 
     - name: Install library and dependencies
       run: |
         uv sync --frozen
 
     - uses: messense/maturin-action@v1
       with:
+        manylinux: auto
         command: build
-        args: --release -o dist --universal2 --find-interpreter
+        args: --release --sdist --out dist --find-interpreter --auditwheel repair
 
-    - name: Upload wheels
+    - name: Upload builds
       uses: actions/upload-artifact@v7
       with:
-        name: wheels
-        path: dist
+        name: ${{ matrix.os }}-${{ matrix.python-version }}
+        path: dist/
 
   release:
     name: Release
     runs-on: ubuntu-latest
-    needs: [ macos, windows, linux ]
+    needs: build
     steps:
 
       - name: Checkout repository
@@ -110,7 +92,8 @@ jobs:
       - name: Download Artifacts
         uses: actions/download-artifact@v8
         with:
-          name: wheels
+          merge-multiple: true
+          path: dist/
 
       - name: Check Version
         uses: nowsprinting/check-version-format-action@v5
@@ -146,9 +129,7 @@ jobs:
             *.tar.gz
 
       - name: Publish to PyPI
-        uses: messense/maturin-action@v1
-        env:
-          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_PASSWORD }}
+        uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          command: upload
-          args: --skip-existing *
+          print-hash: true
+          skip-existing: true

.github/workflows/codeql-analysis.yml

@@ -5,9 +5,6 @@ name: "CodeQL"
 on:
   push:
     branches: [ "main" ]
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [ "main" ]
   schedule:
     - cron: '41 10 * * 5'
 

.github/workflows/ruff.yml

@@ -6,9 +6,8 @@ on:
   push:
     branches:
       - '**'
-  pull_request:
-    branches:
-      - '**'
+    tags-ignore:
+      - 'v*'  # Avoid re-running existing commit on release
 
 permissions:
   contents: write

.github/workflows/unit_tests.yml

@@ -14,9 +14,6 @@ on:
       - 'gh-pages'  # GitHub Pages do not trigger all tests
     tags-ignore:
       - 'v*'  # Avoid re-running existing commit on release
-  pull_request:
-    branches:
-      - 'main'
 
 permissions:
   contents: read
@@ -25,17 +22,43 @@ env:
   FORCE_COLOR: 1
 
 jobs:
-  test:
+  generate-matrix:
+    name: Derive Python version matrix from pyproject.toml
+    runs-on: ubuntu-latest
+    outputs:
+      python-versions: ${{ steps.python-versions.outputs.python-versions }}
+    steps:
+
+    - name: Checkout repository
+      uses: actions/checkout@v7
+
+    - name: Read supported versions from classifiers
+      id: python-versions
+      run: |
+        python - <<'EOF' >> "$GITHUB_OUTPUT"
+        import json
+        import tomllib
+
+        with open("pyproject.toml", "rb") as f:
+            classifiers = tomllib.load(f)["project"]["classifiers"]
+        
+        prefix = "Programming Language :: Python :: 3."
+        versions = [
+            classifier.rsplit("::", 1)[-1].strip()
+            for classifier in classifiers
+            if classifier.startswith(prefix)
+        ]
+        print(f"python-versions={json.dumps(versions)}")
+        EOF
+
+  test-and-build:
+    needs: generate-matrix
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
         os: [macos-latest, ubuntu-latest, windows-latest]
-        python-version: [
-          '3.11',
-          '3.12',
-          '3.13',
-        ]
+        python-version: ${{ fromJson(needs.generate-matrix.outputs.python-versions) }}
 
     env:
       PYTHON_VERSION: ${{ matrix.python-version }}
@@ -51,16 +74,16 @@ jobs:
         cache-dependency-glob: "uv.lock"
         enable-cache: false
         python-version: ${{ matrix.python-version }}
-        version: "0.5.13"
 
     - name: Install library and dependencies
       run: |
         uv sync --frozen
-        uv run maturin develop
+        uvx maturin develop
 
-    - name: Run Tox (Pytest + Coverage)
+    - name: Run tests (Pytest + Coverage)
       run: |
-        uvx --with tox-uv tox
+        uv run --frozen pytest
+        uv run --frozen coverage report
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         PLATFORM: ${{ matrix.os }}
@@ -69,46 +92,43 @@ jobs:
       if: success()
       uses: codecov/codecov-action@v7
       with:
-        env_vars: TOXENV
+        env_vars: PYTHON_VERSION
         fail_ci_if_error: false
         files: ./tests/reports/coverage-html/index.html,./tests/reports/coverage.xml
         flags: unittests
         name: "${{ matrix.os }} - Python ${{ matrix.python-version }}"
         token: ${{ secrets.CODECOV_TOKEN }}
 
+    - name: Build binaries for ${{ matrix.os }}-${{ matrix.python-version }}
+      run: |
+        uv build
+
+    - name: Upload builds
+      uses: actions/upload-artifact@v7
+      with:
+        name: ${{ matrix.os }}-${{ matrix.python-version }}
+        path: dist/
+
 
   testpypi-deploy:
     name: Build and publish Python 🐍 distributions 📦 to TestPyPI
+    environment: testpypi
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
-    needs: test
+    needs: test-and-build
     steps:
 
-    - name: Checkout repository
-      uses: actions/checkout@v7
-
-    - name: Install uv
-      uses: astral-sh/setup-uv@v7
-      with:
-        cache-dependency-glob: "uv.lock"
-        enable-cache: true
-
-    - name: Install Python
-      uses: actions/setup-python@v7
+    - name: Download Artifacts
+      uses: actions/download-artifact@v8
       with:
-        python-version-file: "pyproject.toml"
+        merge-multiple: true
+        path: dist/
 
-    - name: Build test release 📦
-      uses: messense/maturin-action@v1
-      with:
-        manylinux: auto
-        command: build
-        args: --release --sdist -o dist --find-interpreter
-
-    - name: Publish test release 📦 to Test PyPI
-      uses: messense/maturin-action@v1
+    - name: Publish to Test PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
       continue-on-error: true
-      env:
-        MATURIN_PYPI_TOKEN: ${{ secrets.TEST_PYPI_PASSWORD }}
       with:
-        command: upload
-        args: --skip-existing * --repository-url "https://test.pypi.org/legacy"
+        print-hash: true
+        repository-url: https://test.pypi.org/legacy/
+        skip-existing: true