Use uv.lock for CI dependencies; modernise Renovate config

.github/renovate.json

@@ -1,41 +1,45 @@
 {
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:base"
+    "config:recommended"
   ],
-  "azure-pipelines": {
-    "description": "Disable azure pipelines manager",
-    "enabled": false
-  },
   "labels": [
     "dependencies"
   ],
-  "pip_requirements": {
-    "fileMatch": [
-      "^requirements.*\\.txt$"
-    ],
-    "groupName": "all dependencies",
-    "groupSlug": "all",
-    "packageRules": [
-      {
-        "groupName": "all dependencies",
-        "groupSlug": "all",
-        "matchPackagePatterns": [
-          "*"
-        ]
-      }
-    ]
-  },
+  "timezone": "Europe/London",
+  "schedule": [
+    "* 7-15 * * 1"
+  ],
+  "minimumReleaseAge": "7 days",
   "prCreation": "not-pending",
   "prHourlyLimit": 2,
-  "pre-commit": {
+  "lockFileMaintenance": {
+    "enabled": true,
     "schedule": [
-      "after 10am and before 4pm every 3 months on the first day of the month"
-    ],
-    "stabilityDays": 10
+      "* 7-15 1 * *"
+    ]
   },
-  "schedule": [
-    "after 7am and before 4pm every monday"
-  ],
-  "stabilityDays": 2,
-  "timezone": "Europe/London"
+  "packageRules": [
+    {
+      "description": "Group all GitHub Actions updates into one PR",
+      "matchManagers": [
+        "github-actions"
+      ],
+      "groupName": "GitHub Actions"
+    },
+    {
+      "description": "Group non-major development dependency updates",
+      "matchManagers": [
+        "pep621"
+      ],
+      "matchDepTypes": [
+        "dependency-groups"
+      ],
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ],
+      "groupName": "dev dependencies"
+    }
+  ]
 }

.github/workflows/python.yml

@@ -34,14 +34,15 @@ jobs:
         with:
           name: artifact
           path: dist
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v6
+      - name: Set up uv with Python ${{ matrix.python-version }}
+        uses: astral-sh/setup-uv@v7
         with:
           python-version: ${{ matrix.python-version }}
+          activate-environment: true
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
-          pip install --group dev dist/*.whl
+          uv sync --locked --no-install-project
+          uv pip install dist/*.whl
       - name: Test with pytest
         run: |
           pytest tests

.pre-commit-config.yaml

@@ -1,5 +1,5 @@
 ci:
-  skip: [mypy]
+  skip: [mypy, uv-lock]
   autoupdate_schedule: quarterly
 
 repos:
@@ -38,3 +38,8 @@ repos:
     files: 'src/.*\.py$'
     additional_dependencies: ['types-setuptools>=57.0.2', 'pydantic>=2']
     language_version: python3.12
+
+- repo: https://github.com/astral-sh/uv-pre-commit
+  rev: 0.13.7
+  hooks:
+    - id: uv-lock

pyproject.toml

@@ -77,6 +77,9 @@ opentelemetry = "workflows.util.zocalo.configuration:OTEL"
 [project.scripts]
 "workflows.validate_recipe" = "workflows.recipe.validate:main"
 
+[tool.uv]
+exclude-newer = "7 days"
+
 [tool.isort]
 profile = "black"