Add uv support: requirements-to-uv, uv-to-requirements, auto-detection in existing commands by MrLYC · Pull Request #5 · MrLYC/versifier

MrLYC · 2026-02-07T16:42:28Z

Add uv support with auto-detection for package manager commands

Summary

Adds uv as a supported package manager alongside Poetry. New CLI commands (requirements-to-uv, uv-to-requirements) mirror the existing Poetry commands. Existing commands (extract-private-packages, obfuscate-private-packages) now auto-detect whether the project uses uv or Poetry by checking for uv.lock / poetry.lock.

New files:

versifier/uv.py — Uv class with same interface as Poetry (add_packages, export_requirements, install, run_command, init_if_needed)
tests/test_uv.py — unit tests for the Uv class

Modified files:

versifier/core.py — PackageManager = Union[Poetry, Uv] type alias; DependencyManager, DependencyExporter, PackageExtractor now accept either
versifier/__main__.py — Context gains uv_path, uv property, package_manager auto-detection property; new --uv-path CLI option; new requirements-to-uv and uv-to-requirements commands; extract-private-packages and obfuscate-private-packages switched from ctx.poetry → ctx.package_manager
tests/test_main.py — existing tests updated for new uv_path field; new tests for uv commands and auto-detection

Updates since last revision

Addressed review feedback:

Uv.install() now honors include_dev_requirements — passes --no-dev to uv sync when include_dev_requirements=False (the default)
Uv.export_requirements() warns on with_credentials=True — logs a warning that uv export does not support embedding credentials, instead of silently ignoring the parameter
Test specificity — test_context_package_manager_none now asserts click.UsageError with message match instead of broad Exception

Review & Testing Checklist for Human

Breaking change: auto-detection requires lock file — extract-private-packages and obfuscate-private-packages now raise UsageError if neither uv.lock nor poetry.lock exists. Previously they would always use Poetry (even without a lock file). Verify this is acceptable behavior.
Field named poetry accepts Uv instances — core.py dataclasses keep the field name poetry: PackageManager for backward compat, so callers write DependencyManager(poetry=uv_instance). Confirm this naming tradeoff is acceptable vs. a rename.
Auto-detection prefers uv when both lock files exist — verify this priority is desired.
No formal Protocol/ABC — Uv and Poetry share the same duck-typed interface but there is no shared base class or Protocol enforcing it. A future method addition to one could silently break the other.

Recommended test plan:

In a uv-managed project, run versifier uv-to-requirements -o /tmp/req.txt and verify output
In a Poetry-managed project, run versifier extract-private-packages -P <pkg> and verify it still works
In a directory with neither lock file, run versifier extract-private-packages -P foo and confirm the error message

Notes

All 144 tests pass locally (87 warnings are pre-existing deprecation warnings in stub.py)
Tests are mocked; no integration tests against real uv CLI

Link to Devin run: https://app.devin.ai/sessions/2b89e39464164fe085c3208ff2b164d7
Requested by: @MrLYC

…n in existing commands Co-Authored-By: 刘奕聪 <github@m.mrlyc.com>

devin-ai-integration · 2026-02-07T16:42:32Z

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

Disable automatic comment and CI monitoring

Copilot

Pull request overview

Adds first-class support for the uv package manager alongside Poetry, including new conversion commands and auto-detection of the active package manager based on lockfiles.

Changes:

Introduces Uv package-manager adapter with a Poetry-compatible interface.
Extends core dependency management/export/extraction to accept either Poetry or uv.
Updates CLI to add requirements-to-uv / uv-to-requirements and to auto-detect the package manager for existing private-package commands; updates and adds tests.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
`versifier/uv.py`	Adds `Uv` implementation for add/export/sync/run/lock behaviors.
`versifier/core.py`	Generalizes dependency operations to accept `Poetry` or `Uv` via a union type.
`versifier/__main__.py`	Adds `--uv-path`, uv commands, and lockfile-based package-manager auto-detection for relevant commands.
`tests/test_uv.py`	Adds unit tests for `Uv` behavior (mocking subprocess calls).
`tests/test_main.py`	Updates CLI/context tests for uv support and auto-detection scenarios; adds uv command tests.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-07T16:55:22Z

versifier/uv.py

+    def export_requirements(
+        self,
+        include_dev_requirements: bool = False,
+        extra_requirements: Optional[Iterable[str]] = None,
+        with_credentials: bool = False,
+    ) -> RequirementsFile:
+        with TemporaryDirectory() as td:
+            requirement_path = os.path.join(td, "requirements.txt")
+
+            commands = [
+                self.uv_path,
+                "export",
+                "--no-hashes",
+                f"--output-file={requirement_path}",
+            ]
+
+            if not include_dev_requirements:
+                commands.append("--no-dev")
+
+            if extra_requirements:
+                commands.extend(f"--extra={i}" for i in extra_requirements)
+
+            check_call(commands)
+            rf = RequirementsFile.from_file(requirement_path)
+
+        return rf


with_credentials parameter is accepted but never used. This matters because PackageExtractor calls export_requirements(..., with_credentials=True) for private package extraction; silently ignoring it can lead to exporting requirements without embedded auth data and break installs against private indices. Consider either implementing an equivalent behavior for uv, or explicitly warning/raising when with_credentials=True so callers don’t get a false sense of security.

@copilot open a new pull request to apply changes based on this feedback

Fixed: export_requirements() now logs a warning when with_credentials=True since uv export has no equivalent flag. Added a test to verify the warning is emitted.

Copilot · 2026-02-07T16:55:22Z

versifier/uv.py

+    def install(
+        self, include_dev_requirements: bool = False, extra_requirements: Optional[Iterable[str]] = None
+    ) -> None:
+        commands = [self.uv_path, "sync"]
+
+        if extra_requirements:
+            commands.extend(f"--extra={i}" for i in extra_requirements)
+
+        check_call(commands)


include_dev_requirements is currently unused in install(), so callers can’t control whether dev dependencies are installed (and the parameter is misleading). Either honor the flag (e.g., pass the appropriate uv sync option) or remove/rename the parameter and adjust the shared interface accordingly.

@copilot open a new pull request to apply changes based on this feedback

Fixed: install() now passes --no-dev when include_dev_requirements=False (the default). Added test_install_with_dev to verify both paths.

Copilot · 2026-02-07T16:55:22Z

tests/test_main.py

+                with pytest.raises(Exception):
+                    ctx.package_manager


This test asserts a very broad exception type. Since Context.package_manager raises a specific click.UsageError, the test should assert that exact exception (and ideally the message) to avoid masking unrelated failures.

@copilot open a new pull request to apply changes based on this feedback

Fixed: Now asserts click.UsageError with message match "No uv.lock or poetry.lock found" instead of broad Exception.

tests/test_uv.py

Copilot · 2026-02-07T18:06:38Z

@MrLYC I've opened a new pull request, #8, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot · 2026-02-07T18:07:01Z

@MrLYC I've opened a new pull request, #9, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot · 2026-02-07T18:07:15Z

@MrLYC I've opened a new pull request, #10, to work on those changes. Once the pull request is ready, I'll request review from you.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

…ements in install(), use specific click.UsageError in test Co-Authored-By: 刘奕聪 <github@m.mrlyc.com>

….devin.ai/proxy/github.com/MrLYC/versifier into devin/1770481980-add-uv-support

Co-authored-by: MrLYC <6391488+MrLYC@users.noreply.github.com>

…tion Co-authored-by: MrLYC <6391488+MrLYC@users.noreply.github.com>

Co-authored-by: MrLYC <6391488+MrLYC@users.noreply.github.com>

Honor include_dev_requirements flag in Uv.install()

Assert specific click.UsageError in package manager auto-detection test

…0481980-add-uv-support

Add uv support: requirements-to-uv, uv-to-requirements, auto-detectio…

1628ff7

…n in existing commands Co-Authored-By: 刘奕聪 <github@m.mrlyc.com>

MrLYC requested a review from Copilot February 7, 2026 16:52

Copilot started reviewing on behalf of MrLYC February 7, 2026 16:52 View session

Copilot AI reviewed Feb 7, 2026

View reviewed changes

Initial plan

d5a5d9a

Copilot AI mentioned this pull request Feb 7, 2026

Implement --with-credentials flag in UV export_requirements #8

Merged

Initial plan

32f803d

Copilot AI mentioned this pull request Feb 7, 2026

Honor include_dev_requirements flag in Uv.install() #9

Merged

Initial plan

3107ad6

Copilot AI mentioned this pull request Feb 7, 2026

Assert specific click.UsageError in package manager auto-detection test #10

Merged

MrLYC and others added 10 commits February 8, 2026 02:07

Update tests/test_uv.py

f4c6edd

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Address PR review: warn on with_credentials, honor include_dev_requir…

17adced

…ements in install(), use specific click.UsageError in test Co-Authored-By: 刘奕聪 <github@m.mrlyc.com>

Merge branch 'devin/1770481980-add-uv-support' of https://git-manager…

a9d5aab

….devin.ai/proxy/github.com/MrLYC/versifier into devin/1770481980-add-uv-support

Implement --with-credentials flag support in UV export_requirements

2b7b082

Co-authored-by: MrLYC <6391488+MrLYC@users.noreply.github.com>

Update test to assert specific click.UsageError with message verifica…

c1f888c

…tion Co-authored-by: MrLYC <6391488+MrLYC@users.noreply.github.com>

Honor include_dev_requirements flag in Uv.install()

f058d72

Co-authored-by: MrLYC <6391488+MrLYC@users.noreply.github.com>

Add test for with_credentials=False case

ce80563

Co-authored-by: MrLYC <6391488+MrLYC@users.noreply.github.com>

Merge pull request #9 from MrLYC/copilot/sub-pr-5-again

4192ebd

Honor include_dev_requirements flag in Uv.install()

Merge pull request #10 from MrLYC/copilot/sub-pr-5-another-one

697f6e2

Assert specific click.UsageError in package manager auto-detection test

Merge remote-tracking branch 'origin/copilot/sub-pr-5' into devin/177…

ef86fd4

…0481980-add-uv-support

devin-ai-integration bot merged commit 7f69464 into main Feb 7, 2026
3 checks passed

MrLYC mentioned this pull request Feb 8, 2026

Update README with new uv commands and auto-detection documentation #11

Open

2 tasks

Conversation

MrLYC commented Feb 7, 2026 • edited by devin-ai-integration bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Add uv support with auto-detection for package manager commands

Summary

Updates since last revision

Review & Testing Checklist for Human

Notes

Uh oh!

devin-ai-integration bot commented Feb 7, 2026

🤖 Devin AI Engineer

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

MrLYC Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

devin-ai-integration bot Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

MrLYC Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

devin-ai-integration bot Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

MrLYC Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

devin-ai-integration bot Feb 7, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI commented Feb 7, 2026

Uh oh!

Copilot AI commented Feb 7, 2026

Uh oh!

Copilot AI commented Feb 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

MrLYC commented Feb 7, 2026 •

edited by devin-ai-integration bot

Loading