DX: define isolated poe environments and use dependabot

.cspell.json

@@ -24,6 +24,7 @@
     "*.ico",
     ".editorconfig",
     ".envrc",
+    ".github/dependabot.yml",
     ".gitignore",
     ".gitpod.*",
     ".pre-commit-config.yaml",
@@ -39,7 +40,6 @@
   ],
   "ignoreWords": [
     "FURB",
-    "MAINT",
     "PyPI",
     "addopts",
     "argparse",

.github/dependabot.yml

@@ -1,16 +1,14 @@
 version: 2
+
+multi-ecosystem-groups:
+  lock:
+    assignees: [redeboer]
+    commit-message: { prefix: MAINT }
+    schedule: { interval: quarterly }
+
 updates:
   - package-ecosystem: github-actions
     directory: "/"
-    assignees:
-      - redeboer
-    commit-message:
-      prefix: MAINT
-    groups:
-      actions:
-        patterns:
-          - "*"
-    labels:
-      - ⬆️ Lock
-    schedule:
-      interval: monthly
+    labels: [⬆️ Lock]
+    multi-ecosystem-group: lock
+    patterns: ["*"]

.github/workflows/cd.yml

@@ -9,8 +9,8 @@ on:
 jobs:
   milestone:
     if: startsWith(github.ref, 'refs/tags')
-    uses: ComPWA/actions/.github/workflows/close-milestone.yml@v3
+    uses: ComPWA/actions/.github/workflows/close-milestone.yml@v4
   push:
     if: startsWith(github.ref, 'refs/tags') && !github.event.release.prerelease
     secrets: inherit
-    uses: ComPWA/actions/.github/workflows/push-to-version-branches.yml@v3
+    uses: ComPWA/actions/.github/workflows/push-to-version-branches.yml@v4

.github/workflows/ci.yml

@@ -17,32 +17,24 @@ on:
       - epic/*
       - "[0-9]+.[0-9]+.x"
   workflow_dispatch:
-    inputs:
-      specific-pip-packages:
-        description: Run CI with specific pip packages
-        required: false
-        type: string
 
 jobs:
   doc:
-    uses: ComPWA/actions/.github/workflows/ci-docs.yml@v3.0
+    uses: ComPWA/actions/.github/workflows/ci-docs.yml@v4.0
     permissions:
       pages: write
       id-token: write
     with:
       gh-pages: true
-      specific-pip-packages: ${{ inputs.specific-pip-packages }}
-  pytest:
-    uses: ComPWA/actions/.github/workflows/pytest.yml@v3.0
-    with:
-      coverage-target: compwa_policy
-      macos-python-version: "3.10"
-      multithreaded: false
-      specific-pip-packages: ${{ inputs.specific-pip-packages }}
-    secrets:
-      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   style:
-    if: inputs.specific-pip-packages == ''
     secrets:
       token: ${{ secrets.PAT }}
-    uses: ComPWA/actions/.github/workflows/pre-commit.yml@v3.0
+    uses: ComPWA/actions/.github/workflows/pre-commit.yml@v4.0
+  test:
+    uses: ComPWA/actions/.github/workflows/test.yml@v4.0
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+    with:
+      coverage-python-version: "3.13"
+      macos-python-version: "3.10"
+      multithreaded: false

.github/workflows/clean-caches.yml

@@ -16,7 +16,7 @@ jobs:
     name: Remove caches
     runs-on: ubuntu-24.04
     steps:
-      - uses: ComPWA/actions/clean-caches@v3
+      - uses: ComPWA/actions/clean-caches@v4
         with:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           ref: ${{ inputs.ref }}

.github/workflows/lock.yml

@@ -16,6 +16,6 @@ on:
 
 jobs:
   lock:
-    uses: ComPWA/actions/.github/workflows/lock.yml@v3
+    uses: ComPWA/actions/.github/workflows/lock.yml@v4
     secrets:
       token: ${{ secrets.PAT }}

.github/workflows/pr-linting.yml

@@ -11,4 +11,4 @@ on:
 
 jobs:
   lint-pr:
-    uses: ComPWA/actions/.github/workflows/pr-linting.yml@v3
+    uses: ComPWA/actions/.github/workflows/pr-linting.yml@v4

.pre-commit-config.yaml

@@ -14,7 +14,7 @@ repos:
       - id: check-useless-excludes
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.11
+    rev: v0.14.13
     hooks:
       - id: ruff-check
         args: [--fix]
@@ -49,7 +49,6 @@ repos:
         pass_filenames: false
         args:
           - --allow-labels
-          - --dependabot=update
           - --keep-local-precommit
           - --no-pypi
           - --pytest-single-threaded
@@ -64,7 +63,7 @@ repos:
         files: ^\.pre\-commit\-(config|hooks)\.yaml$
 
   - repo: https://github.com/ComPWA/prettier-pre-commit
-    rev: v3.4.2
+    rev: v3.8.0
     hooks:
       - id: prettier
 

.vscode/settings.json

@@ -42,7 +42,6 @@
   },
   "notebook.formatOnSave.enabled": true,
   "python.defaultInterpreterPath": ".venv/bin/python",
-  "python.languageServer": "None",
   "python.terminal.activateEnvironment": false,
   "python.testing.pytestEnabled": true,
   "python.testing.unittestEnabled": false,

docs/conf.py

@@ -13,11 +13,8 @@
 api_target_substitutions: dict[str, str | tuple[str, str]] = {
     "Array": "tomlkit.items.Array",
     "ConfigParser": "configparser.ConfigParser",
-    "DependabotOption": (
-        "obj",
-        "compwa_policy.check_dev_files.dependabot.DependabotOption",
-    ),
     "Frequency": "typing.Literal",
+    "InlineTable": "tomlkit.items.InlineTable",
     "IO": "typing.IO",
     "Iterable": "typing.Iterable",
     "K": "typing.TypeVar",
@@ -39,8 +36,13 @@
     "T": "typing.TypeVar",
     "Table": "tomlkit.items.Table",
     "TOMLDocument": "tomlkit.TOMLDocument",
+    "ty.TypeChecker": ("obj", "compwa_policy.check_dev_files.ty.TypeChecker"),
     "TypeChecker": ("obj", "compwa_policy.check_dev_files.ty.TypeChecker"),
     "typing_extensions.NotRequired": ("obj", "typing.NotRequired"),
+    "upgrade_lock.Frequency": (
+        "obj",
+        "compwa_policy.check_dev_files.upgrade_lock.Frequency",
+    ),
     "V": "typing.TypeVar",
 }
 author = "Common Partial Wave Analysis"

pyproject.toml

@@ -26,6 +26,7 @@ dependencies = [
     "pip-tools",
     "rtoml", # fast, read-only parsing
     "ruamel.yaml", # better YAML dumping
+    "setuptools",
     "tomlkit", # preserve original TOML formatting
     'more-itertools; python_version <"3.10.0"', # pairwise
     'typing-extensions; python_version <"3.12.0"', # override
@@ -58,7 +59,6 @@ Tracker = "https://github.com/ComPWA/policy/issues"
 dev = [
     "labels",
     "ruff",
-    "sphinx-autobuild",
     {include-group = "doc"},
     {include-group = "style"},
     {include-group = "test"},
@@ -130,7 +130,8 @@ no-group = "dev"
 type = "uv"
 
 [tool.poe.tasks.all]
-help = "Run all continuous integration tasks locally"
+help = "Run all continuous integration (CI) tasks locally"
+ignore_fail = "return_non_zero"
 sequence = [
     "cov",
     "doc",
@@ -141,13 +142,13 @@ sequence = [
 
 [tool.poe.tasks.cov]
 cmd = """
-uv run --group test --isolated --no-dev \
-    pytest \
-        --cov-fail-under=32 \
-        --cov-report=html \
-        --cov-report=xml \
-        ${paths}
+pytest \
+    --cov-fail-under=32 \
+    --cov-report=html \
+    --cov-report=xml \
+    ${paths}
 """
+executor = {group = "test"}
 help = "Compute how much of the source code is covered by tests"
 
 [[tool.poe.tasks.cov.args]]
@@ -188,8 +189,8 @@ sphinx-autobuild \
     docs/ \
     docs/_build/html/
 """
-executor = {group = "doc"}
-help = "Run all unit tests"
+executor = {group = "doc", with = "sphinx-autobuild"}
+help = "Set up a server to directly preview changes to the HTML pages"
 
 [tool.poe.tasks.linkcheck]
 cmd = """
@@ -221,31 +222,40 @@ positional = true
 [tool.poe.tasks.test-all]
 help = "Run all tests on each supported Python version"
 sequence = [
-    {ref = "test-py 3.10"},
-    {ref = "test-py 3.11"},
-    {ref = "test-py 3.12"},
-    {ref = "test-py 3.13"},
-    {ref = "test-py 3.14"},
+    {ref = "test-py310 ${paths}"},
+    {ref = "test-py311 ${paths}"},
+    {ref = "test-py312 ${paths}"},
+    {ref = "test-py313 ${paths}"},
+    {ref = "test-py314 ${paths}"},
 ]
 
-[tool.poe.tasks.test-py]
-cmd = """
-uv run \
-    --group=test \
-    --isolated \
-    --no-dev \
-    --python=${python} \
-    pytest --no-summary
-"""
-help = "Run all tests on a specific Python version"
-
-[[tool.poe.tasks.test-py.args]]
-default = "3.13"
-help = "Selected Python version"
-name = "python"
+[[tool.poe.tasks.test-all.args]]
+default = ""
+multiple = true
+name = "paths"
 positional = true
 
-[tool.pytest.ini_options]
+[tool.poe.tasks.test-py310]
+env = {UV_PYTHON = "3.10"}
+ref = "test"
+
+[tool.poe.tasks.test-py311]
+env = {UV_PYTHON = "3.11"}
+ref = "test"
+
+[tool.poe.tasks.test-py312]
+env = {UV_PYTHON = "3.12"}
+ref = "test"
+
+[tool.poe.tasks.test-py313]
+env = {UV_PYTHON = "3.13"}
+ref = "test"
+
+[tool.poe.tasks.test-py314]
+env = {UV_PYTHON = "3.14"}
+ref = "test"
+
+[tool.pytest]
 addopts = [
     "--color=yes",
     "--doctest-continue-on-failure",
@@ -259,6 +269,7 @@ filterwarnings = [
     "ignore: Importing ErrorTree directly from the jsonschema package is deprecated.*",
     "ignore: The `hash` argument is deprecated in favor of `unsafe_hash` and will be removed in or after August 2025.:DeprecationWarning",
 ]
+minversion = "9.0"
 testpaths = [
     "src",
     "tests",
@@ -316,7 +327,6 @@ task-tags = ["cspell"]
 ban-relative-imports = "all"
 
 [tool.ruff.lint.isort]
-known-first-party = ["compwa_policy"]
 split-on-trailing-comma = false
 
 [tool.ruff.lint.per-file-ignores]

src/compwa_policy/.github/workflows/cd.yml

@@ -9,9 +9,9 @@ on:
 jobs:
   milestone:
     if: startsWith(github.ref, 'refs/tags')
-    uses: ComPWA/actions/.github/workflows/close-milestone.yml@v3
+    uses: ComPWA/actions/.github/workflows/close-milestone.yml@v4
   package-name:
-    uses: ComPWA/actions/.github/workflows/get-pypi-name.yml@v3
+    uses: ComPWA/actions/.github/workflows/get-pypi-name.yml@v4
   pypi:
     environment:
       name: PyPI
@@ -24,9 +24,9 @@ jobs:
       id-token: write
     runs-on: ubuntu-24.04
     steps:
-      - uses: ComPWA/actions/build-pypi-distribution@v3
+      - uses: ComPWA/actions/build-pypi-distribution@v4
       - uses: pypa/gh-action-pypi-publish@release/v1
   push:
     if: startsWith(github.ref, 'refs/tags') && !github.event.release.prerelease
     secrets: inherit
-    uses: ComPWA/actions/.github/workflows/push-to-version-branches.yml@v3
+    uses: ComPWA/actions/.github/workflows/push-to-version-branches.yml@v4

src/compwa_policy/.github/workflows/ci.yml

@@ -20,26 +20,16 @@ on:
       - epic/*
       - "[0-9]+.[0-9]+.x"
   workflow_dispatch:
-    inputs:
-      specific-pip-packages:
-        description: Run CI with specific pip packages
-        required: false
-        type: string
 
 jobs:
   doc:
-    uses: ComPWA/actions/.github/workflows/ci-docs.yml@v3.0
+    uses: ComPWA/actions/.github/workflows/ci-docs.yml@v4.0
     permissions:
       pages: write
       id-token: write
-    with:
-      specific-pip-packages: ${{ inputs.specific-pip-packages }}
-  pytest:
-    uses: ComPWA/actions/.github/workflows/pytest.yml@v3.0
-    with:
-      specific-pip-packages: ${{ inputs.specific-pip-packages }}
   style:
-    if: inputs.specific-pip-packages == ''
     secrets:
       token: ${{ secrets.PAT }}
-    uses: ComPWA/actions/.github/workflows/pre-commit.yml@v3.0
+    uses: ComPWA/actions/.github/workflows/pre-commit.yml@v4.0
+  test:
+    uses: ComPWA/actions/.github/workflows/test.yml@v4.0

src/compwa_policy/.github/workflows/lock.yml

@@ -22,6 +22,6 @@ on:
 
 jobs:
   lock:
-    uses: ComPWA/actions/.github/workflows/lock.yml@v3
+    uses: ComPWA/actions/.github/workflows/lock.yml@v4
     secrets:
       token: ${{ secrets.PAT }}

src/compwa_policy/.template/.cspell.json

@@ -35,6 +35,7 @@
     ".editorconfig",
     ".envrc",
     ".gitattributes",
+    ".github/dependabot.yml",
     ".gitignore",
     ".gitpod.*",
     ".htaccess",
@@ -63,7 +64,6 @@
     "update-www"
   ],
   "ignoreWords": [
-    "MAINT",
     "PyPI",
     "argparse",
     "autonumbering",