fix(uv): allow prereleases so OVOS alpha floor-pins resolve

.github/workflows/_selftest-uv.yml

@@ -0,0 +1,94 @@
+# TEMPORARY — validation harness for the pip->uv migration (PR #60).
+# Delete this file (plus the root pyproject.toml and selftest_pkg/) before
+# merging to dev. It is not a reusable workflow and has no downstream consumers.
+#
+# It drives the REAL reusable workflows via local `uses:` against the in-repo
+# dummy package (root pyproject.toml + selftest_pkg/), so the actual build /
+# install / coverage / audit / type-check plumbing runs under uv on real
+# runners — not just isolated uv commands.
+#
+# Why the fix under test matters: actions/setup-python gives a bare interpreter
+# with no active virtualenv, and `uv pip install` refuses a non-venv install
+# unless UV_SYSTEM_PYTHON=1 / --system is set. Every uv workflow now declares
+# that env at workflow level; these jobs prove it works end to end.
+#
+# Triggered on push to this branch only, with pr_comment:false everywhere, so
+# nothing is posted to PR #60.
+name: "[selftest] uv migration"
+
+on:
+  push:
+    branches: [migrate-to-uv]
+  workflow_dispatch:
+
+# Must cover the union of permissions the called reusable workflows declare,
+# or GitHub rejects the call at compile time (startup failure) — even though
+# the features needing them are disabled here (pr_comment/deploy_pages/sarif).
+permissions:
+  contents: write          # coverage.yml job declares contents: write (deploy_pages)
+  pull-requests: write     # PR-comment jobs
+  security-events: write   # pip-audit.yml SARIF upload
+
+jobs:
+  # Build sdist+wheel under `uv build`, install the wheel with extras under
+  # `uv pip install`, run pytest — across every supported Python.
+  build-tests:
+    uses: ./.github/workflows/build-tests.yml
+    with:
+      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
+      install_extras: test
+      test_path: selftest_pkg/tests
+      pr_comment: false
+
+  # Editable install with extras under `uv pip install -e .[dev]` + pytest-cov.
+  coverage:
+    uses: ./.github/workflows/coverage.yml
+    with:
+      test_extras: dev
+      test_path: selftest_pkg/tests
+      coverage_source: selftest_pkg
+      pr_comment: false
+
+  # Editable install under uv, then mypy against the dummy package.
+  type-check:
+    uses: ./.github/workflows/type-check.yml
+    with:
+      test_extras: dev
+      mypy_args: selftest_pkg
+      pr_comment: false
+
+  # `uv pip install ".[test]"` then `uv pip freeze` -> pip-licenses.
+  license-check:
+    uses: ./.github/workflows/license-check.yml
+    with:
+      install_extras: "[test]"
+      warn_only: true
+      pr_comment: false
+
+  # `uv pip install ".[test]"` then pip-audit over the resolved deps.
+  pip-audit:
+    uses: ./.github/workflows/pip-audit.yml
+    with:
+      install_extras: "[test]"
+      warn_only: true
+      pr_comment: false
+
+  # Static guard: every workflow that runs `uv pip` MUST also declare
+  # UV_SYSTEM_PYTHON, or it will fail at runtime on the setup-python interpreter.
+  env-coverage:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - name: Assert uv workflows declare UV_SYSTEM_PYTHON
+        run: |
+          set -euo pipefail
+          missing=0
+          for f in .github/workflows/*.yml; do
+            [ "$(basename "$f")" = "_selftest-uv.yml" ] && continue
+            if grep -qE 'uv pip (install|freeze)' "$f" && ! grep -q 'UV_SYSTEM_PYTHON' "$f"; then
+              echo "::error file=$f::uses 'uv pip' but does not declare UV_SYSTEM_PYTHON"
+              missing=1
+            fi
+          done
+          [ "$missing" -eq 0 ] && echo "All uv workflows declare UV_SYSTEM_PYTHON."
+          exit "$missing"

.github/workflows/build-tests.yml

@@ -47,6 +47,16 @@ on:
         description: >
           Post a '🔨 Build Tests' section in the OVOS PR Checks comment.
           Only runs on pull_request events.
+# uv installs into the setup-python interpreter (no venv on the runner)
+env:
+  UV_SYSTEM_PYTHON: "1"
+  # The OVOS ecosystem ships pre-1.0 alphas and relies on prerelease floor-pins
+  # (pkg>=X.Ya1). pip honoured those transitively; uv's default mode does not when
+  # a package also has stable releases (e.g. ovos-PHAL's ovos-phal-plugin-ipgeo
+  # >=0.1.9a1, which has a coexisting stable 0.1.7). Allow prereleases so the
+  # floor-pins resolve as they did under pip — version caps still bound them.
+  UV_PRERELEASE: "allow"
+
 jobs:
   build_tests:
     strategy:
@@ -63,6 +73,9 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
+      - name: Install uv
+        run: pip install uv
+
       - name: Checkout gh-automations scripts
         uses: actions/checkout@v6
         with:
@@ -76,20 +89,18 @@ jobs:
           sudo apt-get install -yq python3-dev libssl-dev ${{ inputs.system_deps }}
 
       - name: Install Build Tools
-        run: |
-          python -m pip install --upgrade pip
-          python -m pip install build wheel
+        run: uv pip install build wheel
 
       - name: Pre-install pip requirements
         if: ${{ inputs.pre_install_pip != '' }}
         run: |
           # shellcheck disable=SC2086
-          python -m pip install ${{ inputs.pre_install_pip }}
+          uv pip install ${{ inputs.pre_install_pip }}
 
       - name: Build Distribution Packages
         id: build
         run: |
-          python -m build
+          uv build
 
       - name: Install Built Package
         id: install
@@ -98,19 +109,19 @@ jobs:
           EXTRAS="${{ inputs.install_extras }}"
           if [ -n "$WHEEL" ]; then
             if [ -n "$EXTRAS" ]; then
-              pip install "${WHEEL}[${EXTRAS}]"
+              uv pip install "${WHEEL}[${EXTRAS}]"
             else
-              pip install "$WHEEL"
+              uv pip install "$WHEEL"
             fi
           else
-            pip install dist/*.tar.gz 2>/dev/null || { echo "No dist files found"; exit 1; }
+            uv pip install dist/*.tar.gz 2>/dev/null || { echo "No dist files found"; exit 1; }
           fi
 
       - name: Run Tests
         id: tests
         if: ${{ inputs.test_path != '' }}
         run: |
-          python -m pip install pytest
+          uv pip install pytest
           python -m pytest ${{ inputs.test_path }} -v
 
       - name: Save result

.github/workflows/coverage-pages.yml

@@ -40,6 +40,11 @@ on:
         default: "gh-pages"
         description: "Branch to push the HTML coverage report to."
 
+# uv installs into the setup-python interpreter (no venv on the runner)
+env:
+  UV_SYSTEM_PYTHON: "1"
+  UV_PRERELEASE: "allow"  # OVOS ships pre-1.0 alphas; resolve prerelease floor-pins like pip did
+
 jobs:
   coverage_pages:
     runs-on: ${{ inputs.runner }}
@@ -55,6 +60,9 @@ jobs:
         with:
           python-version: ${{ inputs.python_version }}
 
+      - name: Install uv
+        run: pip install uv
+
       - name: Install System Dependencies
         if: ${{ inputs.system_deps != '' }}
         run: |
@@ -63,17 +71,16 @@ jobs:
 
       - name: Install Dependencies
         run: |
-          python -m pip install --upgrade pip
-          python -m pip install pytest pytest-cov coverage[toml] ovoscope
-          if python -m pip install -e ".[dev]" 2>/dev/null; then
+          uv pip install pytest pytest-cov coverage[toml] ovoscope
+          if uv pip install -e ".[dev]" 2>/dev/null; then
             echo "Installed package with [dev] extras"
-          elif python -m pip install -e . 2>/dev/null; then
+          elif uv pip install -e . 2>/dev/null; then
             echo "Installed package (no [dev] extras)"
           else
             echo "No installable package found at repo root — continuing without install"
           fi
           if [ -n "${{ inputs.install_extras }}" ]; then
-            python -m pip install ${{ inputs.install_extras }}
+            uv pip install ${{ inputs.install_extras }}
           fi
 
       - name: Run Tests with Coverage

.github/workflows/coverage.yml

@@ -83,6 +83,11 @@ on:
         default: 14
         description: "Days to retain the coverage XML artifact"
 
+# uv installs into the setup-python interpreter (no venv on the runner)
+env:
+  UV_SYSTEM_PYTHON: "1"
+  UV_PRERELEASE: "allow"  # OVOS ships pre-1.0 alphas; resolve prerelease floor-pins like pip did
+
 jobs:
   coverage:
     runs-on: ${{ inputs.runner }}
@@ -107,38 +112,39 @@ jobs:
         with:
           python-version: ${{ inputs.python_version }}
 
+      - name: Install uv
+        run: pip install uv
+
       - name: Install System Dependencies
         if: ${{ inputs.system_deps != '' }}
         run: |
           sudo apt-get update -q
           sudo apt-get install -yq ${{ inputs.system_deps }}
 
       - name: Install Dependencies
-        run: |
-          python -m pip install --upgrade pip
-          python -m pip install pytest pytest-cov coverage[toml]
+        run: uv pip install pytest pytest-cov coverage[toml]
 
       - name: Pre-install pip requirements
         if: ${{ inputs.pre_install_pip != '' }}
         run: |
           # shellcheck disable=SC2086
-          python -m pip install ${{ inputs.pre_install_pip }}
+          uv pip install ${{ inputs.pre_install_pip }}
 
       - name: Install Package
         run: |
           PRIMARY="${{ inputs.test_extras }}"
           FALLBACK="${{ inputs.test_extras_fallback }}"
-          if [ -n "$PRIMARY" ] && python -m pip install -e ".[$PRIMARY]" 2>/dev/null; then
+          if [ -n "$PRIMARY" ] && uv pip install -e ".[$PRIMARY]" 2>/dev/null; then
             echo "Installed package with [$PRIMARY] extras"
-          elif [ -n "$FALLBACK" ] && python -m pip install -e ".[$FALLBACK]" 2>/dev/null; then
+          elif [ -n "$FALLBACK" ] && uv pip install -e ".[$FALLBACK]" 2>/dev/null; then
             echo "Installed package with [$FALLBACK] extras"
-          elif python -m pip install -e . 2>/dev/null; then
+          elif uv pip install -e . 2>/dev/null; then
             echo "Installed package (no test extras found)"
           else
             echo "No installable package found at repo root — continuing without install"
           fi
           if [ -n "${{ inputs.install_extras }}" ]; then
-            python -m pip install ${{ inputs.install_extras }}
+            uv pip install ${{ inputs.install_extras }}
           fi
 
       - name: Run Tests with Coverage

.github/workflows/docs-check.yml

@@ -114,7 +114,6 @@ jobs:
               2>&1 | tee /tmp/markdownlint-output.txt || true
           fi
           markdownlint-cli2 "**/*.md" 2>&1
-        continue-on-error: true
 
       - name: Format docs check section for PR comment
         if: ${{ inputs.pr_comment && github.event_name == 'pull_request' }}

.github/workflows/downstream-check.yml

@@ -35,6 +35,11 @@ on:
         default: "dev"
         description: "Deprecated — ignored. Report is now uploaded as an artifact instead of committed."
 
+# uv installs into the setup-python interpreter (no venv on the runner)
+env:
+  UV_SYSTEM_PYTHON: "1"
+  UV_PRERELEASE: "allow"  # OVOS ships pre-1.0 alphas; resolve prerelease floor-pins like pip did
+
 jobs:
   check_downstream:
     runs-on: ${{ inputs.runner }}
@@ -55,6 +60,8 @@ jobs:
         uses: actions/setup-python@v6
         with:
           python-version: ${{ inputs.python_version }}
+      - name: Install uv
+        run: pip install uv
       - name: Install System Dependencies
         run: |
           sudo apt-get update -q
@@ -71,12 +78,11 @@ jobs:
             ${{ inputs.system_deps }}
       - name: Install OVOS ecosystem and pipdeptree
         run: |
-          python -m pip install build wheel pipdeptree
           curl -fsSL -o constraints.txt "${{ inputs.constraints_url }}"
           # Install the full OVOS ecosystem so pipdeptree can find all reverse deps
-          pip install -r constraints.txt || true
+          uv pip install -r constraints.txt || true
           # Re-install the target package pinned to the constraints version
-          pip install -c constraints.txt "${{ inputs.package_name }}" || true
+          uv pip install -c constraints.txt "${{ inputs.package_name }}" || true
       - name: Generate downstream report
         run: |
           python action/github/scripts/check_downstream.py \

.github/workflows/intent-case-tests.yml

@@ -107,6 +107,11 @@ on:
           Minimum overall pass rate (0.0-1.0). Fails the shard when the
           observed rate is below this value.
 
+# uv installs into the setup-python interpreter (no venv on the runner)
+env:
+  UV_SYSTEM_PYTHON: "1"
+  UV_PRERELEASE: "allow"  # OVOS ships pre-1.0 alphas; resolve prerelease floor-pins like pip did
+
 jobs:
   intent_case_tests:
     runs-on: ${{ inputs.runner }}
@@ -134,6 +139,9 @@ jobs:
         with:
           python-version: ${{ inputs.python_version }}
 
+      - name: Install uv
+        run: pip install uv
+
       - name: Install System Dependencies
         if: ${{ inputs.system_deps != '' || inputs.require_padatious }}
         run: |
@@ -152,10 +160,10 @@ jobs:
           install_plugin() {
             local name="$1" pypi="$2" gh="$3"
             if [ "$PRE_RELEASE" == "true" ]; then
-              pip install --force-reinstall "git+https://github.com/${gh}@dev" || {
+              uv pip install --force-reinstall "git+https://github.com/${gh}@dev" || {
                 echo "::error::Failed to install $name from GitHub dev"; exit 1; }
             else
-              pip install "$pypi" || {
+              uv pip install "$pypi" || {
                 echo "::error::Failed to install $name from PyPI"; exit 1; }
             fi
           }
@@ -178,18 +186,17 @@ jobs:
 
       - name: Install Package with Test Extras
         run: |
-          python -m pip install --upgrade pip
-          python -m pip install pytest pytest-json-report
+          uv pip install pytest pytest-json-report
           if [ "${{ inputs.pre_release }}" == "true" ]; then
-            pip install --force-reinstall "git+https://github.com/TigreGotico/ovoscope@dev"
+            uv pip install --force-reinstall "git+https://github.com/TigreGotico/ovoscope@dev"
           else
-            pip install ovoscope
+            uv pip install ovoscope
           fi
           EXTRAS="${{ inputs.install_extras }}"
           if [ -n "$EXTRAS" ]; then
-            pip install ".[$EXTRAS]"
+            uv pip install ".[$EXTRAS]"
           else
-            pip install .
+            uv pip install .
           fi
           python -c "import ovoscope; print('ovoscope path:', ovoscope.__file__)"