chore(server): Migrate from poetry to uv

- Replace `build-system` with `maturin`
- Update docker build for testbed & server
- Update `make.py` to rely on `uv`
- Delegate to `make.py` building of rust lib during ci install

Co-authored-by: Marcos Medrano <786907+mmmarcos@users.noreply.github.com>

Author: FirelightFlagboy

.github/CODEOWNERS

@@ -35,7 +35,7 @@ Cargo.lock              @Scille/rust-code-owners
 /server/parsec/         @Scille/python-code-owners
 /server/tests/          @Scille/python-code-owners
 pyproject.toml          @Scille/python-code-owners
-poetry.lock             @Scille/python-code-owners
+uv.lock                 @Scille/python-code-owners
 readthedocs.yml         @Scille/python-code-owners
 mypy.ini                @Scille/python-code-owners
 setup.cfg               @Scille/python-code-owners

.github/actions/setup-python-poetry/action.yml

@@ -9,7 +9,6 @@ updates:
   - package-ecosystem: github-actions
     directories:
       - /
-      - /.github/actions/setup-python-poetry
       - /.github/actions/use-pre-commit
     pull-request-branch-name:
       separator: "-"
@@ -150,7 +149,7 @@ updates:
     open-pull-requests-limit: 5
     rebase-strategy: disabled
 
-  - package-ecosystem: pip
+  - package-ecosystem: uv
     directory: /server
     versioning-strategy: increase-if-necessary
     ignore:

.github/dependabot.yml

@@ -88,11 +88,10 @@ python-server: &python-server
   - server/parsec/**
   - server/tests/**
   - make.py
-  - server/build.py
 
 python-dependencies-project: &python-dependencies-project
   - server/pyproject.toml
-  - server/poetry.lock
+  - server/uv.lock
   - server/setup.cfg
 
 python-changes: &python-changes
@@ -101,7 +100,6 @@ python-changes: &python-changes
 
 # The python jobs need to be run when:
 # - The ci workflow has changed
-# - The action `setup-python-poetry` has changed
 # - The rust has changed
 #   - The dependencies
 #   - The pure code has changed
@@ -169,6 +167,6 @@ docs-jobs:
   - docs/locale/**.po
   - docs/conf.py
   - docs/pyproject.toml
-  - docs/poetry.lock
+  - docs/uv.lock
   - docs/Makefile
   - docs/**.rst

.github/filters/ci.yml

@@ -1,15 +1,12 @@
 codeql-workflow: &codeql-workflow .github/workflows/codeql.yml
 
-setup-python-action: &setup-python-action .github/actions/setup-python-poetry/**
-
 python: &python
   - parsec/**
   - tests/**
-  - build.py
   - make.py
 
 python-dependencies-project: &python-dependencies-project
-  - poetry.lock
+  - uv.lock
   - pyproject.toml
 
 # The python analyze job need to be run when:
@@ -18,7 +15,6 @@ python-dependencies-project: &python-dependencies-project
 # - The codeql workflow is changed
 python-analyze:
   - *codeql-workflow
-  - *setup-python-action
   - *python
   - *python-dependencies-project
 

.github/filters/codeql.yml

@@ -43,6 +43,8 @@ jobs:
 
       - name: Install uv
         uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+        with:
+          version: 0.11.29 # marker:uv-version
         timeout-minutes: 5
 
       - name: Install gettext (required by powrap)

.github/workflows/ci-docs.yml

@@ -26,7 +26,6 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  poetry-version: 2.2.1
   pytest-base-args: >-
     --log-level=DEBUG
     --durations=10
@@ -35,6 +34,7 @@ env:
     -x
   postgresql-version: 16
   libparsec-cache-version: 1
+  UV_EXTRA_ARGS: --verbose
 
 permissions:
   contents: read
@@ -113,47 +113,32 @@ jobs:
             postgresql-${{ env.postgresql-version }}
         timeout-minutes: 5
 
-      - uses: ./.github/actions/setup-python-poetry
-        id: setup-python
+      - name: Install uv
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
-          poetry-version: ${{ env.poetry-version }}
-          project-path: ./server
-        timeout-minutes: 10
-
-      # libparsec is slow to compile, so we save it in cache and skip the
-      # compilation entirely if the Rust code hasn't changed !
+          working-directory: server
+          version: 0.11.29 # marker:uv-version
+        timeout-minutes: 5
 
       # Key cache contains a hash of all the files that are used to produce _parsec.so
       # Hence if we have a cache hit we know that there is no need for a rebuild !
-      - name: Setup cache-key
+      - name: Setup rust cache-key
         id: cache-key
-        run: echo "key=libparsec-v${{ env.libparsec-cache-version }}-${{ steps.runner-specs.outputs.os }}-${{ steps.runner-specs.outputs.release }}-${{ hashFiles('make.py', 'server/build.py', 'server/src/**', 'server/Cargo.toml', 'libparsec/**', 'rust-toolchain.toml', 'Cargo.toml', 'Cargo.lock') }}-no-bundle-extra-shared-libraries" >> $GITHUB_OUTPUT
+        run: echo "key=libparsec-v${{ env.libparsec-cache-version }}-${{ steps.runner-specs.outputs.os }}-${{ steps.runner-specs.outputs.release }}-${{ hashFiles('make.py', 'server/src/**', 'server/Cargo.toml', 'libparsec/**', 'rust-toolchain.toml', 'Cargo.toml', 'Cargo.lock') }}-no-bundle-extra-shared-libraries" >> $GITHUB_OUTPUT
         shell: bash
 
-      - name: Restore libparsec if Rust hasn't been modified
-        id: cache-libparsec
-        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # pin v6.1.0
-        with:
-          key: ${{ steps.cache-key.outputs.key }}
-          path: |
-            server/parsec/_parsec.*.pyd
-            server/parsec/_parsec.*.so
-            # Note `server/parsec.libs/` is not included since we are going to build
-            # with POETRY_LIBPARSEC_BUNDLE_EXTRA_SHARED_LIBRARIES=false (see below)
-        timeout-minutes: 2
-
       - name: Setup Rust toolchain
+        if: (!inputs.style-only)
         uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # pin v1.17.0
-        if: steps.cache-libparsec.outputs.cache-hit != 'true'
         with:
           # We setup the cache by hand, see below
           cache: false
           rustflags: "" # Set value to prevent default which deny cargo check warnings.
         timeout-minutes: 5
 
       - name: Retrieve Rust cache
+        if: (!inputs.style-only)
         uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # pin v2.9.1
-        if: steps.cache-libparsec.outputs.cache-hit != 'true'
         with:
           # Cache is limited to 10Go (and cache is ~700mo per platform !). On top of that.
           # cache is only shared between master and the PRs (and not across PRs).
@@ -166,20 +151,17 @@ jobs:
       - name: Install python deps
         shell: bash -ex {0}
         run: |
-          poetry --directory ./server env info
-          if ${{ env.SKIP_EXT_BUILD }}; then export POETRY_LIBPARSEC_BUILD_STRATEGY=no_build; fi
+          if ${{ env.SKIP_EXT_BUILD }}; then export PYTHON_LIBPARSEC_BUILD_STRATEGY=no_build; fi
           python make.py python-ci-install
 
-          # Make sure POETRY_LIBPARSEC_BUNDLE_EXTRA_SHARED_LIBRARIES=false worked
+          # Make sure install does not tries to bundle shared libs by default
           if [ -d "./server/parsec.libs" ] && [ -n "$(ls -A ./server/parsec.libs)" ];
           then
             echo "::error title=Directory './server/parsec.libs' is not empty::Extra libs disabled but './server/parsec.libs/' is not empty: " ./server/parsec.libs/*
             exit 1
           fi
         env:
-          SKIP_EXT_BUILD: ${{ steps.cache-libparsec.outputs.cache-hit == 'true' || inputs.style-only }}
-          # No need to bundle given we compile and run on the same machine
-          POETRY_LIBPARSEC_BUNDLE_EXTRA_SHARED_LIBRARIES: false
+          SKIP_EXT_BUILD: ${{ inputs.style-only }}
         timeout-minutes: 20
 
       - name: Install pre-commit
@@ -191,7 +173,7 @@ jobs:
       - name: Check python code style
         shell: bash -eux {0}
         run: |
-          poetry -P server run ruff version
+          uv --project server run --locked ruff version
           for step in ruff-format ruff-check pyright ${{ !inputs.style-only && 'sqlfluff sqlfluff-in-python' || '' }}; do
             python \
               ${{ steps.pre-commit.outputs.install-path }} \
@@ -204,31 +186,15 @@ jobs:
           done
         timeout-minutes: 10
 
-      # We only save the libparsec lib when:
-      # - We are not in a github queue branch (they're a one time use so caching won't help)
-      # - We haven't already cached it.
-      - name: Save cached libparsec to be reused on later call
-        if: >-
-          (!inputs.style-only)
-          && steps.cache-libparsec.outputs.cache-hit != 'true'
-          && !contains(github.ref, 'gh-readonly-queue')
-        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # pin v6.1.0
-        with:
-          key: ${{ steps.cache-key.outputs.key }}
-          path: |
-            server/parsec/_parsec.*.pyd
-            server/parsec/_parsec.*.so
-        timeout-minutes: 2
-
       - name: Basic tests
         if: (!inputs.style-only)
-        run: poetry run pytest ${{ env.pytest-base-args }} tests -n auto
+        run: uv run --locked pytest ${{ env.pytest-base-args }} tests -n auto
         timeout-minutes: 10
         working-directory: server
 
       - name: PostgreSQL tests
         if: (!inputs.style-only)
-        run: poetry run pytest ${{ env.pytest-base-args }} tests -n auto --postgresql
+        run: uv run --locked pytest ${{ env.pytest-base-args }} tests -n auto --postgresql
         env:
           PGINSTALLATION: /usr/lib/postgresql/${{ env.postgresql-version }}/bin
         working-directory: server

.github/workflows/ci-python.yml

@@ -36,7 +36,6 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  poetry-version: 2.1.1
   CARGO_CI_FLAGS: --locked --profile=ci-rust
   CARGO_NEXTEST_CI_FLAGS: --profile=ci --locked --cargo-profile=ci-rust
   WINFSP_VERSION: 2.1.25156

.github/workflows/ci-rust.yml

@@ -28,6 +28,7 @@ env:
   node-version: 24.18.0
   wasm-pack-version: 0.12.1
   libparsec-cache-version: 1
+  UV_EXTRA_ARGS: --verbose
 
 permissions:
   contents: read
@@ -61,7 +62,7 @@ jobs:
         uses: ./.github/actions/system-info
         timeout-minutes: 1
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # pin v7.0.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # pin v7.0.0
         with:
           node-version: ${{ env.node-version }}
           cache: npm
@@ -311,7 +312,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # pin v7.0.1
         timeout-minutes: 2
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # pin v7.0.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # pin v7.0.0
         with:
           node-version: ${{ env.node-version }}
           cache: npm

.github/workflows/ci-web.yml

@@ -31,14 +31,12 @@ jobs:
   python-analyze:
     name: 🐍 Python static code Analysis
     runs-on: ubuntu-24.04
-    env:
-      poetry-version: 2.2.1
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # pin v7.0.1
         timeout-minutes: 5
 
-      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706  # pin v4.0.2
+      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # pin v4.0.2
         id: changes
         with:
           filters: .github/filters/codeql.yml
@@ -70,21 +68,17 @@ jobs:
           # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
           # queries: security-extended,security-and-quality
 
-      - uses: ./.github/actions/setup-python-poetry
-        if: steps.should-run-python-analysis.outputs.run == 'true'
-        id: setup-python
+      - name: Install uv
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
-          poetry-version: ${{ env.poetry-version }}
-          project-path: ./server
+          working-directory: server
+          version: 0.11.29 # marker:uv-version
+        timeout-minutes: 5
 
       - name: Install python deps
         if: steps.should-run-python-analysis.outputs.run == 'true'
-        run: |
-          poetry install
-          poetry run sh -c 'echo "CODEQL_PYTHON=$(which python)"' >> $GITHUB_ENV
+        run: uv run --locked sh -c 'echo "CODEQL_PYTHON=$(which python)"' | tee -a $GITHUB_ENV
         working-directory: server
-        env:
-          POETRY_LIBPARSEC_BUILD_STRATEGY: no_build
 
       - name: Perform CodeQL Analysis
         if: steps.should-run-python-analysis.outputs.run == 'true'
@@ -100,7 +94,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # pin v7.0.1
         timeout-minutes: 5
 
-      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706  # pin v4.0.2
+      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # pin v4.0.2
         id: changes
         with:
           filters: .github/filters/codeql.yml