Move to uv for dependency management

Author: aenglander

.dockerignore

@@ -1,7 +1,7 @@
 *
 !content/
-!requirements/
 !src/
+!uv.lock
 !.flaskenv
 !gunicorn_conf.py
 !LICENSE.txt

Dockerfile

@@ -1,20 +1,18 @@
-FROM python:3.13 as build
-WORKDIR /opt
-RUN python -m venv --upgrade-deps venv
-COPY requirements requirements
-RUN venv/bin/pip install -r requirements/base.txt
+FROM python:3.13-slim AS builder
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+WORKDIR /app
+RUN --mount=type=cache,target=/root/.cache/uv \
+    --mount=type=bind,source=uv.lock,target=uv.lock \
+    --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
+    uv sync --frozen --no-install-project --no-editable --compile-bytecode
 
-FROM python:3.13-slim as deploy
-RUN useradd project
-USER project
+FROM python:3.13-slim
 EXPOSE 8000
-ENV PATH=/opt/venv/bin:$PATH \
-    FLASK_APP=pallets
-USER root
-COPY --from=build /opt/venv /opt/venv
-WORKDIR /opt
-COPY --chown=1000:1000 . project
-RUN venv/bin/pip install -e project
-COPY gunicorn_conf.py .
-USER project
+WORKDIR /app
+COPY --from=builder /app/.venv /app/.venv
+ADD . /app
+ENV PATH=/app/.venv/bin:$PATH
+ENV FLASK_APP=pallets
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv pip install -e .
 CMD ["gunicorn", "-c", "gunicorn_conf.py", "pallets:create_app()"]

pyproject.toml

@@ -18,6 +18,23 @@ dependencies = [
     "mdit-py-plugins",
     "pygments",
 ]
+[dependency-groups]
+dev = [
+    "ruff",
+    "tox",
+    "tox-uv",
+    "python-dotenv",
+    "watchdog",
+]
+pre-commit= [
+    "pre-commit",
+]
+typing= [
+    "mypy",
+    "pyright",
+    "types-beautifulsoup4",
+    "types-pygments",
+]
 
 [project.urls]
 Home = "https://palletsprojects.com"
@@ -65,3 +82,46 @@ select = [
 [tool.ruff.lint.isort]
 force-single-line = true
 order-by-type = false
+
+[tool.uv]
+default-groups = ["dev", "pre-commit", "typing"]
+
+[tool.tox]
+envlist = ["style", "typing"]
+
+[tool.tox.env.env_run_base]
+package = "wheel"
+wheel_build_env = ".pkg"
+constrain_package_deps = true
+use_frozen_constraints = true
+
+[tool.tox.env.style]
+dependency_groups = ["pre-commit"]
+skip_install = true
+commands = [["pre-commit", "run", "--all-files"]]
+
+[tool.tox.env.typing]
+dependency_groups = ["typing"]
+commands = [
+    ["mypy"],
+    ["pyright"]
+]
+
+[tool.tox.env.update-actions]
+labels = ["update"]
+dependency_groups = ["gha-update"]
+commands = [["gha-update"]]
+
+[tool.tox.env.update-pre_commit]
+labels = ["update"]
+dependency_groups = ["pre-commit"]
+skip_install = true
+commands = [["pre-commit", "autoupdate", "-j4"]]
+
+[tool.tox.env.update-requirements]
+description = "update uv lock"
+labels = ["update"]
+dependency_groups = []
+no_default_groups = true
+skip_install = true
+commands = [["uv", "lock", {replace = "posargs", default = ["-U"], extend = true}]]