👷⬆️ update reusable workflows (#371)

## Description

This PR updates the reusable MQT workflows to their latest version. It
also makes use of explicit versioning in order to avoid surprises caused
by updates in the future and to allow getting updates from dependabot.

## Checklist:

<!---
This checklist serves as a reminder of a couple of things that ensure
your pull request will be merged swiftly.
-->

- [x] The pull request only contains commits that are related to it.
- [x] I have added appropriate tests and documentation.
- [x] I have made sure that all CI jobs on GitHub pass.
- [x] The pull request introduces no new warnings and follows the
project's style guidelines.

---------

Signed-off-by: burgholzer <burgholzer@me.com>

.github/codecov.yml

@@ -33,7 +33,7 @@ flag_management:
     - name: python
       paths:
         - "src/mqt/**/*.py"
-      after_n_builds: 12
+      after_n_builds: 10
       statuses:
         - type: project
           threshold: 0.5%

.github/workflows/cd.yml

@@ -7,7 +7,7 @@ on:
 jobs:
   python-packaging:
     name: 🐍 Packaging
-    uses: cda-tum/mqt-core/.github/workflows/reusable-python-packaging.yml@main
+    uses: cda-tum/mqt-core/.github/workflows/reusable-python-packaging.yml@v2.4.1
 
   deploy:
     if: github.event_name == 'release' && github.event.action == 'published'

.github/workflows/ci.yml

@@ -14,13 +14,13 @@ concurrency:
 jobs:
   change-detection:
     name: 🔍 Change
-    uses: cda-tum/mqt-core/.github/workflows/reusable-change-detection.yml@main
+    uses: cda-tum/mqt-core/.github/workflows/reusable-change-detection.yml@v2.4.1
 
   cpp-tests:
     name: 🇨‌ Test
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-cpp-tests)
-    uses: cda-tum/mqt-core/.github/workflows/reusable-cpp-ci.yml@main
+    uses: cda-tum/mqt-core/.github/workflows/reusable-cpp-ci.yml@v2.4.1
     secrets:
       token: ${{ secrets.CODECOV_TOKEN }}
     with:
@@ -33,21 +33,21 @@ jobs:
     name: 🇨‌ Lint
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-cpp-linter)
-    uses: cda-tum/mqt-core/.github/workflows/reusable-cpp-linter.yml@main
+    uses: cda-tum/mqt-core/.github/workflows/reusable-cpp-linter.yml@v2.4.1
 
   python-tests:
     name: 🐍 Test
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-python-tests)
-    uses: cda-tum/mqt-core/.github/workflows/reusable-python-ci.yml@main
+    uses: cda-tum/mqt-core/.github/workflows/reusable-python-ci.yml@v2.4.1
     secrets:
       token: ${{ secrets.CODECOV_TOKEN }}
 
   code-ql:
     name: 📝 CodeQL
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-code-ql)
-    uses: cda-tum/mqt-core/.github/workflows/reusable-code-ql.yml@main
+    uses: cda-tum/mqt-core/.github/workflows/reusable-code-ql.yml@v2.4.1
 
   required-checks-pass: # This job does nothing and is only used for branch protection
     name: 🚦 Check

noxfile.py

@@ -20,10 +20,16 @@
 
 PYTHON_ALL_VERSIONS = ["3.8", "3.9", "3.10", "3.11", "3.12"]
 
+# The following lists all the build requirements for building the package.
+# Note that this includes transitive build dependencies of package dependencies,
+# since we use `--no-build-isolation` to install the package in editable mode
+# and get better caching performance. This only concerns dependencies that are
+# not available via wheels on PyPI (i.e., only as source distributions).
 BUILD_REQUIREMENTS = [
     "scikit-build-core[pyproject]>=0.8.1",
     "setuptools_scm>=7",
     "pybind11>=2.12",
+    "wheel>=0.40",  # transitive dependency of pytest on Windows
 ]
 
 if os.environ.get("CI", None):
@@ -75,7 +81,7 @@ def tests(session: nox.Session) -> None:
     _run_tests(session)
 
 
-@nox.session(reuse_venv=True, venv_backend="uv")
+@nox.session(reuse_venv=True, venv_backend="uv", python=PYTHON_ALL_VERSIONS)
 def minimums(session: nox.Session) -> None:
     """Test the minimum versions of dependencies."""
     _run_tests(