Update deps lockfiles and use uv sync in CI

.github/dependabot.yml

@@ -7,7 +7,6 @@ updates:
     day: monday
     time: "05:43"
   target-branch: main
-  versioning-strategy: lockfile-only
   labels:
   - dependency_updates
   groups:

.github/workflows/ci.yml

@@ -26,21 +26,21 @@ jobs:
         with:
           python-version: "3.10"
 
-      - name: Set up uv (latest)
-        run: curl -LsSf https://astral.sh/uv/install.sh | sh
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v3
+        with:
+          version: "0.4.x"
+          enable-cache: true
 
       - name: Install dependencies
         working-directory: ./pydatalab
         run: |
-          uv venv
-          uv pip install -r requirements/requirements-all-dev.txt
-          uv pip install -e '.[all, dev]'
+          uv sync --all-extras
 
       - name: Run pre-commit
         working-directory: ./pydatalab
         run: |
-          source .venv/bin/activate
-          pre-commit run --all-files --show-diff-on-failure
+          uv run pre-commit run --all-files --show-diff-on-failure
 
   pytest:
     name: Run Python unit tests
@@ -74,21 +74,21 @@ jobs:
         run: |
           wget https://fastdl.mongodb.org/tools/db/mongodb-database-tools-ubuntu2204-x86_64-100.9.0.deb && sudo apt install ./mongodb-database-tools-*-100.9.0.deb
 
-      - name: Set up uv (latest)
-        run: curl -LsSf https://astral.sh/uv/install.sh | sh
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v3
+        with:
+          version: "0.4.x"
+          enable-cache: true
 
       - name: Install locked versions of dependencies
         working-directory: ./pydatalab
         run: |
-          uv venv
-          uv pip install -r requirements/requirements-all-dev.txt
-          uv pip install -e '.[all, dev]'
+          uv sync --all-extras
 
       - name: Run all tests
         working-directory: ./pydatalab
         run: |
-          source .venv/bin/activate
-          pytest -rs -vvv --cov-report=term --cov-report=xml --cov ./pydatalab ./tests
+          uv run pytest -rs -vvv --cov-report=term --cov-report=xml --cov ./pydatalab ./tests
 
       - name: Upload coverage to Codecov
         if: matrix.python-version == '3.10' && github.repository == 'datalab-org/datalab'

INSTALL.md

@@ -178,11 +178,16 @@ Finally, recreate the lock files with:
 ```shell
 uv pip compile pyproject.toml -o requirements/requirements-all-dev.txt --extra all --extra dev
 uv pip compile pyproject.toml -o requirements/requirements-all.txt --extra all
+uv lock
 ```
 
 You should then inspect the changes to the requirements files (only your new
 package and its subdependencies should have been added) and commit the changes.
 
+> Regenerating the `Pipfile.lock` will not be necessary for long, but in this
+> case it can be synced with the requirements.txt files via `pipenv install -r requirements/requirements-all-dev.txt`,
+> and the resulting `Pipfile.lock` can be committed to the repository.
+
 ### Test server authentication/authorisation
 
 There are two approaches to authentication when developing *datalab* features locally.