Improve CI workflows and Docker uv integration

- Pin setup-uv to v8.0.0 and use activate-environment to avoid
  uv run wrappers in all workflows
- Fix test.yml: pass matrix python-version to setup-python so tox
  actually tests against 3.12, 3.13, and 3.14
- Add --frozen to lint.yml install step for CI consistency
- Move UV_PROJECT_ENVIRONMENT to ENV in Dockerfile.baseimage so it
  propagates to child images automatically
- Bump uv Docker image from 0.5 to 0.11

Author: jonathangreen

.github/workflows/build.yml

@@ -49,17 +49,21 @@ jobs:
 
       # Creates version files we use to track the version of code in the container
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v8.0.0
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
           python-version: "3.12"
+          activate-environment: true
+
+      - name: Setup Dunamai (uv ci group)
+        run: uv sync --frozen --only-group ci
 
       - name: Create version file
         run: |
-          echo "__version__ = '$(uv run --only-group ci dunamai from git --style semver)'" >> src/palace/manager/_version.py
-          echo "__commit__ = '$(uv run --only-group ci dunamai from git --format {commit} --full-commit)'" >> src/palace/manager/_version.py
-          echo "__branch__ = '$(uv run --only-group ci dunamai from git --format {branch})'" >> src/palace/manager/_version.py
+          echo "__version__ = '$(dunamai from git --style semver)'" >> src/palace/manager/_version.py
+          echo "__commit__ = '$(dunamai from git --format {commit} --full-commit)'" >> src/palace/manager/_version.py
+          echo "__branch__ = '$(dunamai from git --format {branch})'" >> src/palace/manager/_version.py
           cat src/palace/manager/_version.py
 
       # Docker doesn't support uppercase letters in repo names, so we need to lowercase the owner
@@ -361,7 +365,7 @@ jobs:
           bash -c "
             cat src/palace/manager/_version.py &&
             source env/bin/activate &&
-            UV_PROJECT_ENVIRONMENT=/var/www/circulation/env uv sync --frozen &&
+            uv sync --frozen --active &&
             pytest --no-cov tests
           "
 

.github/workflows/lint.yml

@@ -14,14 +14,15 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v8.0.0
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
           python-version: ${{ env.PYTHON_VERSION }}
+          activate-environment: true
 
       - name: Install Pre-commit
-        run: uv sync --only-group ci
+        run: uv sync --frozen --only-group ci
 
       - name: Restore pre-commit cache
         uses: actions/cache@v5
@@ -31,4 +32,4 @@ jobs:
           restore-keys: pre-commit-${{ runner.os }}-py${{ env.PYTHON_VERSION }}
 
       - name: Lint
-        run: uv run pre-commit run --all-files --show-diff-on-failure
+        run: pre-commit run --all-files --show-diff-on-failure

.github/workflows/mypy.yml

@@ -12,15 +12,16 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - name: Install uv 🌀
-        uses: astral-sh/setup-uv@v4
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.0.0
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
           python-version: ${{ env.PYTHON_VERSION }}
+          activate-environment: true
 
       - name: Install Python Packages 📦
         run: uv sync --frozen --no-group ci
 
       - name: Run MyPy 🪄
-        run: uv run mypy
+        run: mypy

.github/workflows/test.yml

@@ -28,18 +28,23 @@ jobs:
       - name: Disable network offload
         run: sudo ethtool -K eth0 tx off rx off
 
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v8.0.0
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
-          python-version: ${{ matrix.python-version }}
+          activate-environment: true
 
       - name: Install Tox
-        run: uv sync --only-group ci
+        run: uv sync --frozen --only-group ci
 
       - name: Run Tests
-        run: uv run tox
+        run: tox
         env:
           # Workaround for tox-docker not supporting Docker 29+, which removed
           # the top-level NetworkSettings.Gateway key from the container API.

docker/Dockerfile

@@ -19,16 +19,14 @@ RUN mv /etc/cron.daily/logrotate /etc/cron.hourly/logrotate
 
 # Copy our uv files into the image and install our dependencies.
 COPY --chown=palace:palace uv.lock pyproject.toml /var/www/circulation/
-RUN UV_PROJECT_ENVIRONMENT=/var/www/circulation/env \
-      uv sync --frozen --no-dev --no-install-project
+RUN uv sync --frozen --no-dev --no-install-project
 
 COPY --chown=palace:palace . /var/www/circulation
 
 # Install the project itself as a non-editable install. Omitting
 # --no-install-project (and passing --no-editable) is the recommended
 # pattern for production Docker builds with uv.
-RUN UV_PROJECT_ENVIRONMENT=/var/www/circulation/env \
-      uv sync --frozen --no-dev --no-editable
+RUN uv sync --frozen --no-dev --no-editable
 
 ###############################################################################
 ## Circ-exec Image

docker/Dockerfile.baseimage

@@ -22,8 +22,11 @@ RUN apt-get update && \
     apt-get upgrade -y --no-install-recommends -o Dpkg::Options::="--force-confold" && \
     /bd_build/cleanup.sh
 
+ENV UV_PROJECT_ENVIRONMENT=/var/www/circulation/env
+
 # Install uv (pinned to a specific minor for reproducibility).
-COPY --from=ghcr.io/astral-sh/uv:0.5 /uv /uvx /usr/local/bin/
+# https://docs.astral.sh/uv/guides/integration/docker/#installing-uv
+COPY --from=ghcr.io/astral-sh/uv:0.11 /uv /uvx /usr/local/bin/
 
 # Install required packages including python, pip, and libraries/compilers
 # needed to build the python wheels we need.
@@ -66,7 +69,6 @@ COPY --chown=palace:palace uv.lock pyproject.toml /var/www/circulation/
 RUN python3 -m venv env && \
     SIMPLIFIED_ENVIRONMENT=/var/www/circulation/environment.sh && \
     echo "if [ -f $SIMPLIFIED_ENVIRONMENT ]; then source $SIMPLIFIED_ENVIRONMENT; fi" >> env/bin/activate && \
-    UV_PROJECT_ENVIRONMENT=/var/www/circulation/env \
       uv sync --frozen --no-dev --no-install-project && \
     . env/bin/activate && \
     # TODO: This can be removed once NLTK merges https://github.com/sloria/TextBlob/pull/469