Migrate to uv and use dependency groups

Author: lafrech

.github/workflows/build-release.yml

@@ -1,7 +1,7 @@
 name: build
 on:
   push:
-    branches: ["main", "*.x-line"]
+    branches: ["dev", "*.x-line"]
     tags: ["*"]
   pull_request:
 
@@ -16,20 +16,16 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - { name: '3.10', python: '3.10', tox: py310 }
-          - { name: '3.14', python: '3.14', tox: py314 }
+          - { name: "3.10", tox: py310 }
+          - { name: "3.14", tox: py314 }
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
-        with:
-          python-version: ${{ matrix.python }}
-          allow-prereleases: true
-      - name: Run test
-        run: |
-          python -m pip install tox
-          python -m tox -e ${{ matrix.tox }}
+      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with: # zizmor: ignore[cache-poisoning] cache key is lockfile-derived
+          enable-cache: true
+      - run: uv run tox -e ${{ matrix.tox }}
       - name: Upload coverage
         uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
   build:
@@ -39,17 +35,11 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
-        with:
-          python-version: "3.14"
-      - name: Install pypa/build
-        run: python -m pip install build
-      - name: Build a binary wheel and a source tarball
-        run: python -m build
-      - name: Install twine
-        run: python -m pip install twine
-      - name: Check build
-        run: python -m twine check --strict dist/*
+      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with: # zizmor: ignore[cache-poisoning] cache key is lockfile-derived
+          enable-cache: true
+      - run: uv build
+      - run: uvx twine check --strict dist/*
       - name: Store the distribution packages
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
@@ -64,11 +54,10 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
-        with:
-          python-version: "3.14"
-      - run: python -m pip install tox
-      - run: python -m tox -e lint
+      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with: # zizmor: ignore[cache-poisoning] cache key is lockfile-derived
+          enable-cache: true
+      - run: uv run tox -e lint
   publish-to-pypi:
     name: PyPI release
     if: startsWith(github.ref, 'refs/tags/')

.pre-commit-config.yaml

@@ -21,3 +21,7 @@ repos:
   hooks:
   - id: blacken-docs
     additional_dependencies: [black==23.12.1]
+- repo: https://github.com/astral-sh/uv-pre-commit
+  rev: 0.10.9
+  hooks:
+    - id: uv-lock

.readthedocs.yaml

@@ -0,0 +1,19 @@
+# https://docs.readthedocs.com/platform/stable/build-customization.html#install-dependencies-with-uv
+version: 2
+sphinx:
+  configuration: docs/conf.py
+formats:
+  - pdf
+build:
+  os: ubuntu-24.04
+  tools:
+    python: "3.13"
+  jobs:
+    pre_create_environment:
+      - asdf plugin add uv
+      - asdf install uv latest
+      - asdf global uv latest
+    create_environment:
+      - uv venv "${READTHEDOCS_VIRTUALENV_PATH}"
+    install:
+      - UV_PROJECT_ENVIRONMENT="${READTHEDOCS_VIRTUALENV_PATH}" uv sync --frozen --group docs

.readthedocs.yml

@@ -14,22 +14,20 @@ Setting Up for Local Development
     $ git clone https://github.com/marshmallow-code/flask-smorest.git
     $ cd flask-smorest
 
-2. Install development requirements.
-   **It is highly recommended that you use a virtualenv.**
-   Use the following command to install an editable version of
-   flask-smorest along with its development requirements.
+2. Install `uv <https://docs.astral.sh/uv/getting-started/installation/>`_.
+
+3. Install development requirements.
 
 ::
 
-    # After activating your virtualenv
-    $ pip install -e '.[dev]'
+    $ uv sync
 
-3. Install the pre-commit hooks, which will format and lint your git staged files.
+4. (Optional but recommended) Install the pre-commit hooks, which will format and lint your git staged files.
 
 ::
 
-    # The pre-commit CLI was installed above
-    $ pre-commit install
+    $ uv run pre-commit install --allow-missing-config
+
 
 Git Branch Structure
 ++++++++++++++++++++
@@ -71,7 +69,7 @@ Running tests
 
 To run all tests: ::
 
-    $ pytest
+    $ uv run pytest
 
 To run formatting and syntax checks: ::
 

CONTRIBUTING.rst

@@ -37,30 +37,34 @@ Issues = "https://github.com/marshmallow-code/flask-smorest/issues"
 Source = "https://github.com/marshmallow-code/flask-smorest"
 Tidelift = "https://tidelift.com/subscription/pkg/pypi-marshmallow?utm_source=pypi-marshmallow&utm_medium=pypi"
 
-[project.optional-dependencies]
+[dependency-groups]
 docs = [
-  "sphinx==9.1.0",
-  "sphinx-issues==6.0.0",
-  "alabaster==1.0.0",
+  "sphinx",
+  "sphinx-issues",
+  "alabaster",
 ]
 tests = [
-  "packaging>=24.2",
-  "pytest==9.0.3",
-  "pytest-cov==7.1.0",
-  "coverage==7.13.5",
-  "werkzeug==3.1.8",
-  "flask[async]==3.1.3",
+  "packaging",
+  "pytest",
+  "pytest-cov",
+  "coverage",
+  "werkzeug",
+  "flask[async]",
   "marshmallow",
-  "webargs==8.7.1",
-  "apispec==6.10.0",
-  "PyYAML==6.0.3",
+  "webargs",
+  "apispec",
+  "PyYAML",
 ]
 dev = [
-  "flask-smorest[tests]",
+  { include-group = "tests" },
   "tox",
+  "tox-uv",
   "pre-commit>=3.6,<5.0",
 ]
 
+[tool.uv]
+default-groups = ["dev"]
+
 [build-system]
 requires = ["flit_core<4"]
 build-backend = "flit_core.buildapi"

docs/requirements.txt

@@ -5,7 +5,7 @@ envlist =
 skip_missing_interpreters = True
 
 [testenv]
-extras = tests
+dependency_groups = tests
 commands =
     pytest --cov=flask_smorest --cov-branch --cov-report=term-missing --cov-report=xml