Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move to UV #1180

Open
wants to merge 7 commits into
base: main
Choose a base branch
from
Open

Move to UV #1180

wants to merge 7 commits into from

Conversation

karanataryn
Copy link
Contributor

@karanataryn karanataryn commented Feb 13, 2025

Move poetry to uv, which has much faster locking and install times. Makes necessary fixes in workflows and other code. TODO: Add support for uv caching in workflows, this shouldn't be an immediate issue.

Also bumps Ray due to a critical security vulnerability: https://github.com/aryn-ai/sycamore/security/dependabot/337

Copy link

Dependency Review

The following issues were found:

  • ❌ 1 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 13 package(s) with unknown licenses.

View full job summary

@karanataryn karanataryn marked this pull request as ready for review February 13, 2025 07:50
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I had kinda hoped that the root could be turned into a uv workspace - https://docs.astral.sh/uv/concepts/projects/workspaces/

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think I do that, look at the [tool.uv.workspace] below. Let me know if you imagined something else.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oh look at that I'm blind! I wonder how much of the [dependency-groups] section that lets you delete?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants