ci: simplify lockstep release tooling

Signed-off-by: Christoph Auer <cau@zurich.ibm.com>

Author: cau-git

.github/scripts/build-packages.sh

@@ -7,8 +7,6 @@ set -x  # display command on output
 # can upload them independently (a single `dist/` makes the second publish step
 # re-upload the first package's files and fail on `skip-existing: false`).
 
-python3 .github/scripts/check_lockstep.py
-
 echo "Building docling-core package..."
 uv build --package docling-core --out-dir dist/docling-core
 

.github/scripts/check_lockstep.py

@@ -12,11 +12,9 @@ CHGLOG_FILE="${CHGLOG_FILE:-CHANGELOG.md}"
 # update package versions:
 #   - root pyproject.toml               = docling-core
 #   - packages/dlgrep/pyproject.toml    = dlgrep (lockstep, incl. its docling-core== pin)
-uvx --from=toml-cli toml set --toml-path=pyproject.toml project.version "${TARGET_VERSION}"
-uvx --from=toml-cli toml set --toml-path=packages/dlgrep/pyproject.toml project.version "${TARGET_VERSION}"
-sed -i.bak -E "s/\"docling-core==[0-9][^\"]*\"/\"docling-core==${TARGET_VERSION}\"/" packages/dlgrep/pyproject.toml
-rm -f packages/dlgrep/pyproject.toml.bak
-python3 .github/scripts/check_lockstep.py
+uv version "${TARGET_VERSION}" --package docling-core --frozen
+uv version "${TARGET_VERSION}" --package dlgrep --frozen
+uv add "docling-core==${TARGET_VERSION}" --package dlgrep --frozen
 
 uv lock --upgrade-package docling-core --upgrade-package dlgrep
 

.github/scripts/release.sh

@@ -25,7 +25,7 @@ jobs:
         with:
           enable-cache: true
       - name: Install dependencies
-        run: uv sync --only-dev
+        run: uv sync --frozen --only-dev
       - name: Check version of potential release
         id: version_check
         run: |
@@ -55,7 +55,7 @@ jobs:
         with:
           enable-cache: true
       - name: Install dependencies
-        run: uv sync --only-dev
+        run: uv sync --frozen --only-dev
       - name: Run release script
         env:
           GH_TOKEN: ${{ steps.app-token.outputs.token }}

.github/workflows/cd.yml

@@ -61,7 +61,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
           enable-cache: true
       - name: Install dependencies
-        run: uv sync --all-extras --all-packages
+        run: uv sync --frozen --all-extras --all-packages
       - name: Build packages
         run: bash .github/scripts/build-packages.sh
       - name: Check content of wheels

.github/workflows/checks.yml

@@ -21,7 +21,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
           enable-cache: true
       - name: Install dependencies
-        run: uv sync --all-extras --all-packages
+        run: uv sync --frozen --all-extras --all-packages
       - name: Build packages
         run: bash .github/scripts/build-packages.sh
       # Last gate before anything is public. Installing both wheels in one
@@ -62,13 +62,11 @@ jobs:
           packages-dir: dist/docling-core/
 
   publish-dlgrep:
-    # dlgrep pins docling-core exactly, so publish it second. No propagation
-    # wait: at worst an install in the seconds between the two uploads has to
-    # be retried - not a reason to hold up a release.
+    # dlgrep pins docling-core exactly, so publish it second.
     needs: publish-docling-core
     runs-on: ubuntu-latest
     environment:
-      name: pypi-dlgrep
+      name: pypi
       url: https://pypi.org/p/dlgrep
     permissions:
       id-token: write  # IMPORTANT: mandatory for trusted publishing

.github/workflows/pypi.yml

@@ -35,12 +35,6 @@ repos:
         pass_filenames: false
         language: system
         files: '\.py$'
-      - id: lockstep-version
-        name: "dlgrep/docling-core version lockstep"
-        entry: uv run --no-sync python .github/scripts/check_lockstep.py
-        pass_filenames: false
-        language: system
-        files: 'pyproject\.toml$'
   - repo: local
     hooks:
       - id: docs