chore: uv as package manager (#926)

* chore: swap poetry for UV

* ci: make actions use UV

* chore: move pre-commit constraints to pyproject.toml

* chore: add uv lock hook to pre-commit

* ci: add snyk workflow

* Update .pre-commit-config.yaml

* ci: replace final poetry with uv

* docs: update readme with uv

* chore: add build system and package mode to pyproject

* fix: version

* chore: Remove all traces of poetry

* chore: fix dependency specification

* ci: fix broken workflows

* fix: neqsim service fixture

* Potential fix for code scanning alert no. 36: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* chore: sync uv.lock

* chore: revise dockerfile

* chore: fix devcontainer

* docs: Review comment

* chore: update uv lock

* ci: update dependabot config & add snyk code test

Author: Aleksander-Karlsson

.devcontainer/python/Dockerfile

@@ -1,14 +1,13 @@
 ARG VARIANT="3.11-bookworm"
 FROM mcr.microsoft.com/devcontainers/python:${VARIANT}
 
+COPY --from=ghcr.io/astral-sh/uv:0.7.15 /uv /uvx /bin/
 
 ARG DEBIAN_FRONTEND=noninteractive
-ARG POETRY_VERSION=1.8.3
-ARG POETRY_VIRTUALENVS_PATH
 ENV USER=vscode
 
 RUN DEBIAN_FRONTEND=noninteractive \
-    && apt-get update \ 
+    && apt-get update \
     && apt-get install -y build-essential --no-install-recommends make \
         ca-certificates \
         git \
@@ -34,27 +33,9 @@ USER $USER
 ENV HOME="/home/$USER"
 ENV PATH="${HOME}/.local/bin:$PATH"
 
-# Set poetry related env vars
-# Set poetry virtualenv path in writable dir outsde mounted workspace
-ENV POETRY_VIRTUALENVS_PATH="$HOME/.venv"
-ENV POETRY_VIRTUALENVS_CREATE=true
-ENV POETRY_VIRTUALENVS_IN_PROJECT=false
-ENV POETRY_VIRTUALENVS_PROMPT='ecalc-py{python_version}'
 ENV PIP_DEFAULT_TIMEOUT=100
 
-# Python and poetry installation
-RUN echo $(which python) && echo $(which python3)  \
-    && python3 -m pip install --upgrade pip pipx \
-    && pipx install "poetry==${POETRY_VERSION}" \
-    && pip install pre-commit \
-    && poetry --version \
-    && pre-commit --version
-
-# Set workdir to ecalc project
-WORKDIR /workspaces/ecalc
+WORKDIR /project/libecalc
 
 # Copy essential file (devcontainer setup takes care of other files)
-COPY pyproject.toml poetry.lock ./
-
-# Install poetry environment without root package
-RUN poetry install --no-interaction --no-ansi --no-root
+COPY pyproject.toml uv.lock ./

.devcontainer/python/devcontainer.json

@@ -5,8 +5,7 @@
     "dockerfile": "Dockerfile",
     "context": "../..",
     "args": {
-      "VARIANT": "3.11-bookworm",
-      "POETRY_VERSION": "1.8.3",
+      "VARIANT": "3.11-bookworm"
     }
   },
   "containerEnv": {

.devcontainer/python/post-create.sh

@@ -3,11 +3,14 @@
 # Exit immediately if a command exits with a non-zero status
 set -e
 
+# Install uv environment
+uv venv
+uv sync --group dev --locked
+
 # Install Pre-commit hooks
 echo "Installing Pre-commit hooks..."
+uv tool install pre-commit
 pre-commit install
 
-# Install poetry environment
-poetry install
 
 echo "Post-create script completed successfully."

.github/dependabot.yml

@@ -10,7 +10,7 @@ updates:
 
   # Monitor Python dependencies (pip ecosystem = poetry; poetry.lock) for security vulnerabilities only
   # TODO: Rename pre-commit-requirements.txt to requirements.txt or similar to detect it.
-  - package-ecosystem: "pip"
+  - package-ecosystem: "uv"
     directory: "/"
     schedule:
       interval: "daily"

.github/workflows/docs-ci.yml

@@ -14,29 +14,25 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
 
-      - name: Install Poetry
-        run: pipx install poetry==1.8.4
-
-      - name: Setup Python
-        uses: actions/setup-python@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
         with:
-          python-version: "3.11"
-          cache: 'poetry'
+          enable-cache: true
 
-      - name: Check pyproject.toml validity
-        run: poetry check --no-interaction
+      - name: Set up Python
+        run: uv python install
 
-      - name: Install deps
-        run: poetry install --no-interaction
+      - name: Install the project
+        run: uv sync --locked --all-extras --dev
 
       - name: Generate CLI reference
         run: |
-          poetry run typer src/ecalc_cli/main.py utils docs > ./docs/docs/about/getting_started/cli/cli_reference.md
+          uv run typer src/ecalc_cli/main.py utils docs > ./docs/docs/about/getting_started/cli/cli_reference.md
 
       - name: Generate JSON Schema
         run: |
           cd src
-          poetry run python generate_json_schema.py > ../docs/docs/about/getting_started/yaml/ecalc_json_schema.json
+          uv run python generate_json_schema.py > ../docs/docs/about/getting_started/yaml/ecalc_json_schema.json
 
       - name: Setup node
         uses: actions/setup-node@v4

.github/workflows/docs-publish.yml

@@ -20,29 +20,25 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
 
-      - name: Install Poetry
-        run: pipx install poetry==1.8.4
-
-      - name: Setup Python
-        uses: actions/setup-python@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
         with:
-          python-version: "3.11"
-          cache: 'poetry'
+          enable-cache: true
 
-      - name: Check pyproject.toml validity
-        run: poetry check --no-interaction
+      - name: Set up Python
+        run: uv python install
 
-      - name: Install deps
-        run: poetry install --no-interaction
+      - name: Install the project
+        run: uv sync --locked --all-extras --dev
 
       - name: Generate CLI reference
         run: |
-          poetry run typer src/ecalc_cli/main.py utils docs > ./docs/docs/about/getting_started/cli/cli_reference.md
+          uv run typer src/ecalc_cli/main.py utils docs > ./docs/docs/about/getting_started/cli/cli_reference.md
 
       - name: Generate JSON Schema
         run: |
           cd src
-          poetry run python generate_json_schema.py > ../docs/docs/about/getting_started/yaml/ecalc_json_schema.json
+          uv run python generate_json_schema.py > ../docs/docs/about/getting_started/yaml/ecalc_json_schema.json
 
       - name: Setup node
         uses: actions/setup-node@v4

.github/workflows/examples-ci.yml

@@ -12,24 +12,20 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
 
-      - name: Install Poetry
-        run: pipx install poetry==1.8.4
-
-      - name: Setup Python
-        uses: actions/setup-python@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
         with:
-          python-version: "3.11"
-          cache: 'poetry'
+          enable-cache: true
 
-      - name: Check pyproject.toml validity
-        run: poetry check --no-interaction
+      - name: Set up Python
+        run: uv python install
 
-      - name: Install deps
-        run: poetry install --no-interaction --all-extras
+      - name: Install the project
+        run: uv sync --locked --all-extras --dev
 
       - name: Convert example Jupyter notebooks to Python code
-        run: poetry run jupyter nbconvert --to python examples/*.ipynb
+        run: uv run jupyter nbconvert --to python examples/*.ipynb
 
       # This will not log any tests per se, but it will fail if there are any errors raised in the generated Python files.
       - name: Run tests
-        run: poetry run pytest examples/*.py
+        run: uv run pytest examples/*.py

.github/workflows/lib-ci.yml

@@ -10,7 +10,6 @@ env:
 
 # TODO: BuildX and publish to use as in order for web to always be able to fetch image to matching branch?
 jobs:
-
   run-tests-with-coverage:
     runs-on: ubuntu-24.04
     strategy:
@@ -21,40 +20,37 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
 
-      - name: Install Poetry
-        run: pipx install poetry==1.8.4
-
-      - name: Setup Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
         with:
+          enable-cache: true
           python-version: ${{ matrix.python-version }}
-          cache: 'poetry'
 
-      - name: Check pyproject.toml validity
-        run: poetry check --no-interaction
+      - name: Set up Python
+        run: uv python install
 
-      - name: Install deps
-        run: poetry install --no-interaction
+      - name: Install the project
+        run: uv sync --locked --all-extras --dev
 
       - name: List pydantic version
-        run: poetry show pydantic
+        run: uv pip show pydantic
 
       - name: Run tests with coverage
-        run: poetry run python -m coverage run -m pytest -n auto
+        run: uv run python -m coverage run -m pytest -n auto
 
       - name: Get Test Coverage score
         id: total
         if: matrix.python-version == '3.11'
         run: |
-          poetry run python -m coverage report --fail-under 40
-          poetry run python -m coverage html -d build/
-          poetry run python -m coverage json -o build/coverage.json
+          uv run python -m coverage report --fail-under 40
+          uv run python -m coverage html -d build/
+          uv run python -m coverage json -o build/coverage.json
           echo '# Code Coverage Report\n See the index.html for a more detailed report.\n' >> build/README.md
-          echo "$(poetry run python -m coverage report --format=markdown)" >> build/README.md
+          echo "$(uv run python -m coverage report --format=markdown)" >> build/README.md
           rm build/.gitignore
 
       - name: Build artifacts
-        run: poetry build
+        run: uv build
 
       - name: Push coverage report to coverage-report branch
         if: github.ref == 'refs/heads/main' && matrix.python-version == '3.11'

.github/workflows/pre-ci.yml

@@ -6,25 +6,23 @@ on:
   # Workflow call is used for called from another workflow
   workflow_call:
 
+env:
+  UV_SYSTEM_PYTHON: 1
+
 jobs:
   pre-commit: # Static analyzers, formatters and verifying pre-commit hooks has been run for both API and Web
     name: Build & Run Pre Commit hooks to verify code structure, quality etc. from pre-commit hooks
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v5
 
-      - name: Set up python
-        id: setup-python
-        uses: actions/setup-python@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
         with:
-          python-version: "3.11"
-          cache: "pip"
+          enable-cache: true
 
       - name: Install pre-commit
-        run: python -m pip install -r pre-commit-requirements.txt
-      - uses: actions/cache@v4
-        with:
-          path: ~/.cache/pre-commit/
-          key: pre-commit-4|${{ env.pythonLocation }}|${{ hashFiles('.pre-commit-config.yaml') }}
+        run: uv sync --only-group dev -v
+
       - name: Run pre-commit
-        run: SKIP=trufflehog pre-commit run --all-files --verbose
+        run: SKIP=trufflehog uv run pre-commit run --all-files --verbose

.github/workflows/publish.yml

@@ -11,7 +11,7 @@ on:
   # order for this workflow to be the owner of the PyPI publishing job, and can be verified. This limits
   # us to only allow this workflow to be allowed to publish to PyPI trustedly.
 
-  workflow_dispatch: # Trigger manually, if needed
+  workflow_dispatch: # Trigger manually, if needed.
 
   # NOTE!: When using Trusted Publishing to PyPI, we cannot do that from within a reusable workflow, therefore
   # we make it independent, and trigger it with published event from release-please workflow, instead of calling explicitly.
@@ -53,22 +53,22 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
         with:
-          # NOTE: Make sure we publish from main branch, not the triggering ref
+          # NOTE: Make sure we publish from the main branch, not the triggering ref
           ref: ${{ github.event.repository.default_branch }}
 
-      - name: Setup Python 3.11
-        uses: actions/setup-python@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
         with:
-          python-version: '3.11'
+          enable-cache: true
 
-      - uses: snok/install-poetry@v1
-        with:
-          version: 1.8.4
-          virtualenvs-create: true
+      - name: Set up Python
+        run: uv python install
+
+      - name: Install the project
+        run: uv sync --locked --all-extras --dev
 
       - name: Build the libecalc package (wheel and sdist by default)
-        run: |
-          poetry build
+        run: uv build
 
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1