chore: updating actions/checkout and adding setup-uv instead of using pip (#614)

Author: yaleman

.github/workflows/bandit.yml

@@ -12,8 +12,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          activate-environment: "true"
+          github-token: ${{ github.token }}
       - name: Run bandit
         run: |
-          python --version
-          python -m pip install --quiet --no-cache-dir --upgrade uv
           uv run bandit -r $(basename $(pwd) | sed -E 's/-/_/')

.github/workflows/build_container.yml

@@ -1,5 +1,5 @@
 ---
-name: 'Build container'
+name: "Build container"
 "on":
   pull_request:
   push:
@@ -14,16 +14,11 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v6
-
-      - name: Set up Python
-        uses: actions/setup-python@v6
-        with:
-          python-version: '3.12'
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-      -   # https://github.com/docker/login-action/#github-container-registry
+      - # https://github.com/docker/login-action/#github-container-registry
         name: Login to GitHub Container Registry
         uses: docker/login-action@v3
         with:

.github/workflows/codeql-analysis.yml.disabled

@@ -38,7 +38,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/mypy.yml

@@ -12,7 +12,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          activate-environment: "true"
+          github-token: ${{ github.token }}
       - name: Running mypy
         run: |
-          python -m pip install --quiet --no-cache-dir --upgrade uv
           uv run mypy --strict $(basename $(pwd)) tests

.github/workflows/pylint.yml

@@ -1,5 +1,5 @@
 ---
-name: pylint
+name: Python Linting
 
 "on":
   push:
@@ -12,8 +12,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - name: Running pylint
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          activate-environment: "true"
+          github-token: ${{ github.token }}
+      - name: Running ruff
         run: |
-          python --version
-          python -m pip install --quiet --no-cache-dir --upgrade uv
           uv run ruff check $(basename $(pwd)) tests

.github/workflows/pytest.yml

@@ -12,8 +12,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          activate-environment: "true"
+          github-token: ${{ github.token }}
       - name: Running pytest
         run: |
-          python --version
-          python -m pip install --quiet --no-cache-dir --upgrade uv
           uv run python -m pytest -m 'not network'

github_linter/fixes/dependabot/dependabot_auto_merge.yml

@@ -19,9 +19,8 @@ jobs:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
           alert-lookup: true
           compat-lookup: true
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Approve a PR if not already approved
-
         run: |
           # sets the upstream metadata for `gh pr status`
           gh pr checkout "$PR_URL"

github_linter/fixes/github_actions/dependency_review.yml

@@ -13,6 +13,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout Repository"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Dependency Review"
         uses: actions/dependency-review-action@v3

github_linter/fixes/github_actions/templates/Dockerfile/build_container.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Setup sccache
         uses: mozilla-actions/[email protected]
       - name: Set up QEMU

github_linter/fixes/github_actions/templates/Python/bandit.yml

@@ -11,9 +11,12 @@ jobs:
   bandit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          activate-environment: "true"
+          github-token: ${{ github.token }}
       - name: Run bandit
         run: |
-          python --version
-          python -m pip install --quiet --no-cache-dir --upgrade uv
           uv run bandit -r $(basename $(pwd) | sed -E 's/-/_/g'))