Update CI

Author: gerrod3

.ci/ansible/inventory.yaml

@@ -5,7 +5,7 @@ all:
       hosts:
         pulp:
         pulp-fixtures:
-        minio:
+        rustfs:
         ci-sftp:
       vars:
         ansible_connection: docker

.ci/ansible/start_container.yaml

@@ -64,9 +64,9 @@
             from botocore.exceptions import ClientError
             client = boto3.client(
                 "s3",
-                aws_access_key_id="{{ minio_access_key }}",
-                aws_secret_access_key="{{ minio_secret_key }}",
-                endpoint_url="http://minio:9000",
+                aws_access_key_id="{{ rustfs_access_key }}",
+                aws_secret_access_key="{{ rustfs_secret_key }}",
+                endpoint_url="http://rustfs:9000",
                 region_name="eu-central-1",
             )
             try:

.ci/assets/ci_constraints.txt

@@ -1,6 +1,6 @@
 # Pulpcore versions without the openapi command do no longer work in the CI
 # Pulpcore versions without the django 5 storage compatibility will fail, >3.63,<3.70
-pulpcore>=3.21.30,!=3.23.*,!=3.24.*,!=3.25.*,!=3.26.*,!=3.27.*,!=3.29.*,!=3.30.*,!=3.31.*,!=3.32.*,!=3.33.*,!=3.34.*,!=3.35.*,!=3.36.*,!=3.37.*,!=3.38.*,!=3.40.*,!=3.41.*,!=3.42.*,!=3.43.*,!=3.44.*,!=3.45.*,!=3.46.*,!=3.47.*,!=3.48.*,!=3.50.*,!=3.51.*,!=3.52.*,!=3.53.*,!=3.54.*,!=3.64.*,!=3.65.*,!=3.66.*,!=3.67.*,!=3.68.*,!=3.69.*
+pulpcore>=3.49.0,!=3.50.*,!=3.51.*,!=3.52.*,!=3.53.*,!=3.54.*,!=3.64.*,!=3.65.*,!=3.66.*,!=3.67.*,!=3.68.*,!=3.69.*
 
 
 tablib!=3.6.0

.ci/scripts/calc_constraints.py

@@ -26,10 +26,14 @@
 def fetch_pulpcore_upper_bound(requirement):
     with urllib.request.urlopen(CORE_TEMPLATE_URL) as f:
         template = yaml.safe_load(f.read())
-    supported_versions = template["supported_release_branches"]
-    supported_versions.append(template["latest_release_branch"])
+    supported_branches = [
+        *template["supported_release_branches"],
+        template["latest_release_branch"],
+    ]
     applicable_versions = sorted(
-        requirement.specifier.filter((Version(v) for v in supported_versions))
+        Version(branch)
+        for branch in supported_branches
+        if requirement.specifier.contains(Version(f"{branch}.999999"))
     )
     if len(applicable_versions) == 0:
         raise Exception("No supported pulpcore version in required range.")

.ci/scripts/pr_labels.py

@@ -1,4 +1,10 @@
 #!/bin/env python3
+# /// script
+# requires-python = ">=3.12"
+# dependencies = [
+#     "gitpython>=3.1.62",
+# ]
+# ///
 
 # This script is running with elevated privileges from the main branch against pull requests.
 

.ci/scripts/skip_tests.py

@@ -1,4 +1,10 @@
 #!/usr/bin/env python3
+# /// script
+# requires-python = ">=3.12"
+# dependencies = [
+#     "gitpython>=3.1.62",
+# ]
+# ///
 """
 skip_tests.py - Check if only documentation files were changed in a git branch
 

.ci/scripts/validate_commit_message.py

@@ -1,6 +1,14 @@
 # This file is managed by the plugin template.
 # Do not edit.
 
+# /// script
+# requires-python = ">=3.12"
+# dependencies = [
+#     "pygithub",
+#     "pyyaml",
+# ]
+# ///
+
 import os
 import re
 import subprocess

.github/workflows/build.yml

@@ -38,15 +38,13 @@ jobs:
         uses: "astral-sh/setup-uv@v7"
         with:
           enable-cache: true
-      - name: "Install python dependencies"
-        run: |
-          uv pip install build packaging twine wheel mkdocs jq
       - name: "Build package"
         run: |
-          python3 -m build
-          twine check dist/*
+          uv build
+          uvx twine check dist/*
       - name: "Install built packages"
         run: |
+          # This seems to be the only way to inject the constraints file.
           uv pip install dist/pulp_python-*-py3-none-any.whl -c .ci/assets/ci_constraints.txt
       - name: "Generate api specs"
         run: |
@@ -88,15 +86,6 @@ jobs:
           if-no-files-found: "error"
           retention-days: 5
           overwrite: true
-      - name: "Upload python client docs"
-        uses: "actions/upload-artifact@v7"
-        with:
-          name: "python-client-docs.tar"
-          path: |
-            pulp_python/python-python-client-docs.tar
-          if-no-files-found: "error"
-          retention-days: 5
-          overwrite: true
       - name: "Build Ruby bindings packages"
         run: |
           .github/workflows/scripts/build_ruby_client.sh

.github/workflows/ci.yml

@@ -30,16 +30,12 @@ jobs:
           path: "pulp_python"
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.12"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
           enable-cache: true
-      - name: "Install python dependencies"
-        run: |
-          uv pip install requests pygithub pyyaml
       - name: "Check commit message"
-        if: github.event_name == 'pull_request'
         env:
           PY_COLORS: "1"
           ANSIBLE_FORCE_COLOR: "1"
@@ -61,16 +57,12 @@ jobs:
 
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.12"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
           enable-cache: true
 
-      - name: "Install python dependencies"
-        run: |
-          uv pip install gitpython
-
       - name: "Analyze changed files"
         id: "check"
         shell: "bash"
@@ -86,7 +78,7 @@ jobs:
           BASE_REF=${{ github.event.pull_request.base.sha }}
           echo "Checking against:"
           git name-rev $BASE_REF
-          python3 .ci/scripts/skip_tests.py . $BASE_REF
+          uv run --script .ci/scripts/skip_tests.py . $BASE_REF
           exit_code=$?
           if [ $exit_code -ne 0 ] && [ $exit_code -ne 1 ]; then
             echo "Error: skip_tests.py returned unexpected exit code $exit_code"

.github/workflows/pr_checks.yml

@@ -40,16 +40,15 @@ jobs:
           fetch-depth: 0
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.14"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
           enable-cache: true
       - name: "Determine PR labels"
         run: |
-          uv pip install GitPython==3.1.42
           git fetch origin ${{ github.event.pull_request.head.sha }}
-          python .ci/scripts/pr_labels.py "origin/${{ github.base_ref }}" "${{ github.event.pull_request.head.sha }}" >> "$GITHUB_ENV"
+          uv run --script .ci/scripts/pr_labels.py "origin/${{ github.base_ref }}" "${{ github.event.pull_request.head.sha }}" >> "$GITHUB_ENV"
       - uses: "actions/github-script@v8"
         name: "Apply PR Labels"
         with: