ci: Modernise CI pipeline to latest best practices

.github/dependabot.yml

@@ -1,7 +1,7 @@
 ---
 version: 2
 updates:
-  - package-ecosystem: "pip"
+  - package-ecosystem: "uv"
     directory: "/"
     schedule:
       interval: "monthly"

.github/workflows/auto-merge-for-dependabot-prs.yaml

@@ -14,5 +14,5 @@ jobs:
       - name: Enable auto-merge for Dependabot PRs
         run: gh pr merge --auto --squash "$PR_URL"
         env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/python-ci.yml

@@ -5,7 +5,6 @@ on: [push]
 
 jobs:
   build:
-
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -15,29 +14,23 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Install uv
-        run: pipx install 'uv==0.10.12'
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: astral-sh/setup-uv@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies
         run: |
           uv sync ${{ matrix.dependency-extras }}
           sudo apt install e2fsprogs restic
-      - name: Check formatting with ruff format
-        run: |
-          uv run ruff format --check
+      - name: Check formatting with ruff
+        run: uv run ruff format --check .
       - name: Check import ordering with ruff
-        run: |
-          uv run ruff check --output-format=github --select I
+        run: uv run ruff check --output-format=github --select I .
       - name: Check static typing with mypy
         run: uv run mypy .
       - name: Lint with ruff
-        run: |
-          uv run ruff check --output-format=github
+        run: uv run ruff check --output-format=github .
       - name: Test with pytest
-        run: |
-          uv run pytest --junitxml=junit/test-results.xml --cov-report=xml --cov-report=html
+        run: uv run pytest --junitxml=junit/test-results.xml --cov-report=xml --cov-report=html
 
   check:
     if: always()

.github/workflows/python-publish.yml

@@ -12,28 +12,24 @@ jobs:
   build-dist:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - name: Install uv
-      run: pipx install 'uv==0.10.12'
-    - name: Publish package
-      run: |
-        uv build
-    - uses: actions/upload-artifact@v4
-      with:
-        name: dist
-        path: dist/
+      - uses: actions/checkout@v4
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
+      - name: Build package
+        run: uv build
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
 
   pypi-publish:
-    name: upload release to PyPI
+    name: Upload release to PyPI
     needs: [build-dist]
     runs-on: ubuntu-latest
-    # Specifying a GitHub environment is optional, but strongly encouraged
     environment: pypi
     permissions:
-      # IMPORTANT: this permission is mandatory for Trusted Publishing
       id-token: write
     steps:
-      - uses: actions/checkout@v4
       - uses: actions/download-artifact@v4
         with:
           name: dist

.github/workflows/release-please.yml

@@ -1,4 +1,6 @@
 ---
+name: Release Please
+
 on:
   push:
     branches:
@@ -8,13 +10,11 @@ permissions:
   contents: write
   pull-requests: write
 
-name: release-please
-
 jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
       - uses: googleapis/release-please-action@v4
         with:
-          token: ${{ secrets.ReleasePlease }}
+          token: ${{ secrets.RELEASE_PLEASE }}
           release-type: python