@@ -15,34 +15,23 @@ jobs:
1515 with :
1616 python-version : " 3.10"
1717
18- - name : Set up Poetry
19- uses : ./.github/actions/ setup-poetry
18+ - name : Install uv
19+ uses : astral-sh/ setup-uv@v5
2020
2121 - name : Install dependencies
22- run : poetry install --no-interaction --no-root
22+ run : uv sync
2323
2424 - name : Audit with pip-audit
2525 run : |
2626 # GHSA-4xh5-x5gv-qwph is safe to ignore since we are using a python version that is not affected
2727 # can remove once pip has fix
28- # audit non dev dependencies, no exclusions
29- poetry export --without=dev > requirements.txt && poetry run pip-audit -r requirements.txt --ignore-vuln GHSA-4xh5-x5gv-qwph
30-
31- # audit all dependencies, with exclusions.
28+ # Audit all installed dependencies with exclusions
3229 # If a vulnerability is found in a dev dependency without an available fix,
3330 # it can be temporarily ignored by adding --ignore-vuln e.g.
3431 # --ignore-vuln "GHSA-hcpj-qp55-gfph" # GitPython vulnerability, dev only dependency
35- poetry run pip-audit --ignore-vuln GHSA-4xh5-x5gv-qwph
32+ uv run pip-audit --ignore-vuln GHSA-4xh5-x5gv-qwph
3633
37- - name : Check formatting with Ruff
34+ - name : Check codebase with ruff and mypy
3835 run : |
3936 # stop the build if there are files that don't meet formatting requirements
40- poetry run ruff format --check .
41-
42- - name : Check linting with Ruff
43- run : |
44- # stop the build if there are Python syntax errors or undefined names
45- poetry run ruff check .
46-
47- - name : Check types with mypy
48- run : poetry run mypy
37+ uv run poe lint
0 commit comments