Merge branch 'issue-200-uv' into 'main'

Migrate from poetry to uv

Closes #200

See merge request yaal/canaille!187

.github/workflows/tests.yaml

@@ -11,7 +11,7 @@ on:
       - '*.*.*'
 jobs:
   tests:
-    name: ${{ matrix.python }}
+    name: py${{ matrix.python }} unit tests
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -23,12 +23,12 @@ jobs:
           - '3.10'
     steps:
       - uses: actions/checkout@v4
-      - name: Install Poetry
+      - name: Install uv
-        uses: snok/install-poetry@v1
+        uses: astral-sh/setup-uv@v3
-      - uses: actions/setup-python@v5
         with:
-          python-version: ${{ matrix.python }}
+          enable-cache: true
-          cache: 'poetry'
+      - name: Install Python ${{ matrix.python }}
+        run: uv python install ${{ matrix.python }}
       - name: Install apt dependencies
         run: |
           sudo apt update
@@ -36,25 +36,25 @@ jobs:
       - name: App armor configuration for slapd
         if: ${{ !env.ACT }}
         run: sudo aa-complain /usr/sbin/slapd
-      - name: Install dependencies and run tests
+      - name: Run tests
         run: |
           # python tzinfo fails on 'act' without this
           ulimit -n 1024
           export TZ=UTC
-          poetry --version
+          uv sync --extras-all
-          poetry install --extras all
+          uv run pytest --showlocals
-          poetry run pytest --showlocals
+
   minversions:
     name: minimum dependency versions
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: Install Poetry
+      - name: Install uv
-        uses: snok/install-poetry@v1
+        uses: astral-sh/setup-uv@v3
-      - uses: actions/setup-python@v5
         with:
-          python-version: '3.10'
+          enable-cache: true
-          cache: 'poetry'
+      - name: Install Python 3.10
+        run: uv python install 3.10
       - name: Install apt dependencies
         run: |
           sudo apt update
@@ -62,37 +62,33 @@ jobs:
       - name: App armor configuration for slapd
         if: ${{ !env.ACT }}
         run: sudo aa-complain /usr/sbin/slapd
-      - run: sed -i -E 's/"(\^|>=)([0-9\.]+)([^,]*)"/"==\2"/' pyproject.toml
+      - name: Run tests
-      - run: sed -i -E 's/python = "==/python = "^/' pyproject.toml
-      - name: Install dependencies and run tests
         run: |
           # python tzinfo fails on 'act' without this
           ulimit -n 1024
           export TZ=UTC
-          poetry --version
+          uv sync --extras-all --resolution=lowest-direct
-          poetry lock
+          uv run pytest --showlocals
-          poetry install --extras all
+
-          poetry run pytest --showlocals
   style:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
     - uses: pre-commit/action@v3.0.1
+
   doc:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: Install Poetry
+      - name: Install uv
-        uses: snok/install-poetry@v1
+        uses: astral-sh/setup-uv@v3
-      - uses: actions/setup-python@v5
         with:
-          python-version: '3.13'
+          enable-cache: true
-          cache: 'poetry'
       - name: Install apt dependencies
         run: |
           sudo apt update
           sudo DEBIAN_FRONTEND=noninteractive apt --yes --quiet install libsasl2-dev python3-dev libldap2-dev libssl-dev slapd ldap-utils
       - run: |
           export TZ=UTC
-          poetry install --with doc
+          uv sync --group doc
-          poetry run sphinx-build doc build/sphinx/html
+          uv run sphinx-build doc build/sphinx/html

.gitlab-ci.yml

@@ -1,80 +1,82 @@
 ---
-image: python
-
 stages:
   - test
   - build
   - release
 
-before_script:
+variables:
-  - apt update
+  UV_VERSION: 0.4
-  - env DEBIAN_FRONTEND=noninteractive apt install --yes --quiet python3-dev libldap2-dev libsasl2-dev libssl-dev slapd ldap-utils python3-poetry
+  UV_CACHE_DIR: .uv-cache
-  - poetry config virtualenvs.in-project true
+  BASE_LAYER: bookworm-slim
 
 cache:
+  - key:
+      files:
+        - uv.lock
     paths:
-    - .venv
+      - $UV_CACHE_DIR
+
+before_script:
+  - apt update
+  - env DEBIAN_FRONTEND=noninteractive apt install --yes --quiet gcc python3-dev libldap2-dev libsasl2-dev libssl-dev slapd ldap-utils git curl
+  # Rust is needed to install the zxcvbn dependency
+  - curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
+  - export PATH="$HOME/.cargo/bin:$PATH"
+  # Needed until zxcvbn supports Python 3.13
+  # https://github.com/fief-dev/zxcvbn-rs-py/issues/2
+  - export PYO3_USE_ABI3_FORWARD_COMPATIBILITY=1
 
 style:
-  image: python:3.13
+  variables:
+    PYTHON_VERSION: "3.13"
+  image: ghcr.io/astral-sh/uv:$UV_VERSION-python$PYTHON_VERSION-$BASE_LAYER
   stage: test
   script:
-    # pre-commit version is fixed until docformatted hook is compatible
+    - uv sync --all-extras
-    # https://github.com/PyCQA/docformatter/issues/293
+    - uv run pre-commit run --all-files --show-diff-on-failure
-    - pip install "pre-commit<4.0.0"
+    - uv cache prune --ci
-    - pre-commit run --all-files --show-diff-on-failure
-
-python310:
-  image: python:3.10
-  stage: test
-  script:
-    - poetry install --extras all
-    - poetry run pytest
-
-python311:
-  image: python:3.11
-  stage: test
-  script:
-    - poetry install --extras all
-    - poetry run pytest
-
-python312:
-  image: python:3.12
-  stage: test
-  script:
-    - poetry install --extras all
-    - poetry run pytest
-
-python313:
-  image: python:3.13
-  stage: test
-  script:
-    - poetry install --extras all
-    - poetry run pytest
-
-minversions:
-  image: python:3.13
-  stage: test
-  script:
-    - sed -i -E 's/"(\^|>=)([0-9\.]+)([^,]*)"/"==\2"/' pyproject.toml
-    - sed -i -E 's/python = "==/python = "^/' pyproject.toml
-    - poetry lock
-    - poetry install --extras all
-    - poetry run pytest
-
-doc:
-  image: python:3.13
-  stage: test
-  script:
-    - poetry install --only doc
-    - poetry run sphinx-build doc build/sphinx/html
 
 coverage:
-  image: python:3.13
+  variables:
+    PYTHON_VERSION: "3.13"
+  image: ghcr.io/astral-sh/uv:$UV_VERSION-python$PYTHON_VERSION-$BASE_LAYER
   stage: test
-  allow_failure: true
   script:
-    - pip install coveralls pyyaml tomli
+    - uv sync --all-extras
-    - poetry install --extras all
+    - uv pip install coveralls pyyaml tomli
-    - poetry run pytest --cov --cov-fail-under=100 --cov-report term:skip-covered -n auto
+    - uv run pytest --cov --cov-fail-under=100 --cov-report term:skip-covered -n auto
-    - coveralls
+    - uv run coveralls
+    - uv cache prune --ci
+
+tests:
+  needs: ["coverage", "style"]
+  parallel:
+    matrix:
+      - PYTHON_VERSION: ['3.10', '3.11', '3.12']
+  image: ghcr.io/astral-sh/uv:$UV_VERSION-python$PYTHON_VERSION-$BASE_LAYER
+  stage: test
+  script:
+    - uv sync --all-extras
+    - uv run pytest
+    - uv cache prune --ci
+
+minversions:
+  needs: ["tests"]
+  variables:
+    PYTHON_VERSION: "3.10"
+  image: ghcr.io/astral-sh/uv:$UV_VERSION-python$PYTHON_VERSION-$BASE_LAYER
+  stage: test
+  script:
+    - uv sync --all-extras --resolution=lowest-direct
+    - uv run pytest
+    - uv cache prune --ci
+
+doc:
+  variables:
+    PYTHON_VERSION: "3.13"
+  image: ghcr.io/astral-sh/uv:$UV_VERSION-python$PYTHON_VERSION-$BASE_LAYER
+  stage: test
+  script:
+    - uv sync --group doc
+    - uv run sphinx-build doc build/sphinx/html
+    - uv cache prune --ci

.readthedocs.yml

@@ -9,11 +9,11 @@ build:
     - libldap2-dev
     - libssl-dev
   tools:
-    python: "3.11"
+    python: "3.12"
   jobs:
     post_create_environment:
-      - pip install poetry
+      - pip install uv
-      - poetry export --with doc --output requirements.txt
+      - uv export --group doc --no-hashes --output-file requirements.txt
     post_install:
       - pip install .
       - pip install --requirement requirements.txt

CHANGES.rst

@@ -17,6 +17,7 @@ Changed
 - all password tests and validator are supported by password1 field :issue:`174`
 - password2 (or Password confirmation) field only support "EQUAL TO PASSWORD" test :issue:`174`
 - Update to HTMX 2.0.3 :pr:`184`
+- Migrate from poetry to uv :pr:`187`
 
 Removed
 ^^^^^^^

CONTRIBUTING.rst

@@ -106,23 +106,23 @@ users and groups with the ``populate`` command:
 .. code-block:: console
 
     # If using docker:
-    docker compose exec canaille env CONFIG=conf-docker/canaille-ldap.toml poetry run canaille populate --nb 100 users  # or docker-compose
+    docker compose exec canaille env CONFIG=conf-docker/canaille-ldap.toml uv run canaille populate --nb 100 users  # or docker-compose
 
     # If running in local environment
-    env CONFIG=conf/canaille-ldap.toml poetry run canaille populate  --nb 100 users
+    env CONFIG=conf/canaille-ldap.toml uv run canaille populate  --nb 100 users
 
 Adapt to use either the `ldap` or the `sql` configuration file. Note that this will not work with the memory backend.
 
 Unit tests
 ----------
 
-To run the tests, you just can run `poetry run pytest` and/or `tox` to test all the supported python environments.
+To run the tests, you just can run `uv run pytest` and/or `uv run tox` to test all the supported python environments.
 Everything must be green before patches get merged.
 
 To test a specific backend you can pass ``--backend memory``, ``--backend sql`` or ``--backend ldap`` to pytest and tox.
 
 The test coverage is 100%, patches won't be accepted if not entirely covered. You can check the
-test coverage with ``poetry run pytest --cov --cov-report=html`` or ``tox -e coverage -- --cov-report=html``.
+test coverage with ``uv run pytest --cov --cov-report=html`` or ``tox -e coverage -- --cov-report=html``.
 You can check the HTML coverage report in the newly created `htmlcov` directory.
 
 Code style
@@ -170,12 +170,13 @@ The generated documentation is located at ``build/sphinx/html``.
 Publish a new release
 ---------------------
 
-1. Check that dependencies are up to date with ``poetry show --outdated --with dev,doc,demo`` and update dependencies accordingly in separated commits.
+1. Check that dependencies are up to date with ``uv sync --upgrade`` and update dependencies accordingly in separated commits.
-2. Check that tests are still green for every supported python version, and that coverage is still at 100%, by running ``tox``
+2. Check that tests are still green for every supported python version, and that coverage is still at 100%, by running ``uv run tox``
 3. Check that the demo environments are still working
 4. Check that the :ref:`development/changelog:Release notes` section is correctly filled up
 5. Increase the version number in ``pyproject.toml``
 6. Commit with ``git commit``
-7. Publish with ``poetry publish --build``
+7. Build with ``uv build``
+7. Publish with ``uv publish``
 8. Tag you commit with ``git tag XX.YY.ZZ``
 9. Push the release commit and the new tag on the repository with ``git push --tags``

MANIFEST.in

@@ -1,6 +0,0 @@
-include canaille/*.sample.*
-graft canaille/backends/ldap/schemas
-graft canaille/templates
-graft canaille/themes
-graft canaille/translations
-graft canaille/static

demo/Dockerfile-canaille

@@ -7,11 +7,21 @@ RUN \
     gcc \
     libsasl2-dev \
     libldap2-dev \
-    libssl-dev
+    libssl-dev \
+    curl
 
-COPY poetry.lock pyproject.toml demo/demoapp.py /opt/canaille/
+RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
-RUN pip install poetry
+
+ENV PATH="/root/.cargo/bin:${PATH}"
+
+# Needed until zxcvbn supports Python 3.13
+# https://github.com/fief-dev/zxcvbn-rs-py/issues/2
+ENV PYO3_USE_ABI3_FORWARD_COMPATIBILITY="1"
+
+COPY uv.lock pyproject.toml hatch_build.py LICENSE.rst README.md demo/demoapp.py /opt/canaille/
+COPY canaille /opt/canaille/canaille
+RUN pip install uv
 WORKDIR /opt/canaille
-RUN poetry install --with demo --without dev --extras all
+RUN uv sync --group demo --all-extras
 
-ENTRYPOINT ["poetry", "run", "flask", "run", "--host=0.0.0.0", "--extra-files", "/opt/canaille/conf/canaille-memory.toml", "--extra-files", "/opt/canaille/conf/canaille-ldap.toml", "--extra-files", "/opt/canaille/conf/canaille-sql.toml"]
+ENTRYPOINT ["uv", "run", "flask", "run", "--host=0.0.0.0", "--extra-files", "/opt/canaille/conf/canaille-memory.toml", "--extra-files", "/opt/canaille/conf/canaille-ldap.toml", "--extra-files", "/opt/canaille/conf/canaille-sql.toml"]

demo/run.sh

@@ -13,24 +13,28 @@ if ! type python > /dev/null 2>&1 && ! type python3 > /dev/null 2>&1; then
     exit 1
 fi
 
-if ! type poetry > /dev/null 2>&1; then
+if ! type uv > /dev/null 2>&1; then
-    echo "Cannot start the canaille demo server. Please install poetry on your system"
+    echo "Cannot start the canaille demo server. Please install uv on your system"
     echo "or run the demo with docker-compose."
-    echo "https://python-poetry.org/docs/#installation"
+    echo "https://docs.astral.sh/uv/getting-started/installation/"
     exit 1
 fi
 
 pushd "$DIR" > /dev/null 2>&1 || exit
 
-poetry install --with demo --all-extras
+# Needed until zxcvbn supports Python 3.13
+# https://github.com/fief-dev/zxcvbn-rs-py/issues/2
+export PYO3_USE_ABI3_FORWARD_COMPATIBILITY=1
+
+uv sync --group demo --all-extras
 
 if [ "$BACKEND" = "memory" ]; then
 
-    poetry run honcho --env ../.env --procfile Procfile-memory start
+    uv run honcho --env ../.env --procfile Procfile-memory start
 
 elif [ "$BACKEND" = "sql" ]; then
 
-    poetry run honcho --env ../.env --procfile Procfile-sql start
+    uv run honcho --env ../.env --procfile Procfile-sql start
 
 elif [ "$BACKEND" = "ldap" ]; then
 
@@ -40,7 +44,7 @@ elif [ "$BACKEND" = "ldap" ]; then
         exit 1
     fi
 
-    poetry run honcho --env ../.env --procfile Procfile-ldap start
+    uv run honcho --env ../.env --procfile Procfile-ldap start
 
 else
 

hatch_build.py

@@ -1,7 +1,9 @@
 import os
 
+from hatchling.builders.hooks.plugin.interface import BuildHookInterface
 
-def create_mo_files(setup_kwargs):
+
+def create_mo_files():
     from babel.messages.frontend import compile_catalog
 
     cmd = compile_catalog()
@@ -10,7 +12,11 @@ def create_mo_files(setup_kwargs):
     cmd.statistics = True
     cmd.finalize_options()
     cmd.run()
-    return setup_kwargs
+
+
+class CustomBuildHook(BuildHookInterface):
+    def initialize(self, version, build_data):
+        create_mo_files()
 
 
 if __name__ == "__main__":

pyproject.toml

@@ -1,13 +1,13 @@
 [build-system]
-requires = ["poetry-core>=1.0.0", "babel", "setuptools; python_version>='3.12'"]
+requires = ["hatchling", "babel", "setuptools >= 50.0.0; python_version>='3.12'"]
-build-backend = "poetry.core.masonry.api"
+build-backend = "hatchling.build"
 
-[tool]
+[project]
-[tool.poetry]
 name = "Canaille"
 version = "0.0.55"
 description = "Lightweight identity and authorization management software"
-license = "MIT"
+license = {file = "LICENSE.rst"}
+readme = "README.md"
 keywords = ["oidc", "oauth", "oauth2", "openid", "identity"]
 classifiers = [
     "Intended Audience :: Developers",
@@ -25,137 +25,99 @@ classifiers = [
     "Topic :: System :: Systems Administration :: Authentication/Directory :: LDAP",
 
 ]
-authors = ["Yaal Coop <contact@yaal.coop>"]
+authors = [{name="Yaal Coop", email="contact@yaal.coop"}]
-maintainers = [
+maintainers = [{name="Éloi Rivard", email="eloi@yaal.coop"}]
-    "Éloi Rivard <eloi@yaal.coop>",
+
+requires-python = ">=3.10"
+dependencies = [
+    "flask >= 3.0.0",
+    "flask-wtf >= 1.2.1",
+    "pydantic-settings >= 2.0.3",
+    "wtforms >= 3.1.1",
 ]
+
+[project.optional-dependencies]
+front = [
+    "email_validator >= 2.0.0",
+    "flask-babel >= 4.0.0",
+    "flask-themer >= 2.0.0",
+    "pycountry >= 23.12.7",
+    "pytz >= 2022.7",
+    "toml >= 0.10.0",
+    "zxcvbn-rs-py >= 0.1.1",
+]
+
+oidc = [
+    "authlib >= 1.3.0",
+]
+
+ldap = [
+    "python-ldap >= 3.4.0",
+]
+
+sentry = [
+    "sentry-sdk >= 2.0.0",
+]
+
+sql = [
+    "passlib >= 1.7.4",
+    "sqlalchemy >= 2.0.23",
+    "sqlalchemy-json >= 0.7.0",
+    "sqlalchemy-utils >= 0.41.1",
+]
+
+[project.urls]
 homepage = "https://canaille.yaal.coop"
 documentation = "https://canaille.readthedocs.io/en/latest/"
 repository = "https://gitlab.com/yaal/canaille"
-readme = "README.md"
-include = ["canaille/translations/*/LC_MESSAGES/*.mo"]
 
-[tool.poetry.dependencies]
+[dependency-groups]
-python = "<3.13,>=3.10"
+dev = [
-flask = "^3.0.0"
+    "babel >= 2.14.0",
-flask-wtf = "^1.2.1"
+    "coverage[toml] >= 6.0.0",
-pydantic-settings = "^2.0.3"
+    "faker >= 30.0.0",
-wtforms = "^3.1.1"
+    "flask-webtest >= 0.1.6",
-
-# extra : front
-email_validator = {version = "^2.0.0", optional=true}
-flask-babel = {version = "^4.0.0", optional=true}
-flask-themer = {version = "^2.0.0", optional=true}
-pycountry = {version = ">=22.1.10", optional=true}
-pytz = {version = ">=2022.7", optional=true}
-toml = {version = "^0.10.0", optional=true, python = "<3.11"}
-zxcvbn-rs-py = {version = "^0.1.1", optional=true}
-
-# extra : oidc
-authlib = {version = "^1.2.1", optional=true}
-
-# extra : ldap
-python-ldap = {version = "^3.4.0", optional=true}
-
-# extra : sentry
-sentry-sdk = {version = "^2.0.0", optional=true, extras=["flask"]}
-
-# extra : sql
-passlib = {version = "^1.7.4", optional=true}
-sqlalchemy = {version = "^2.0.23", optional=true}
-sqlalchemy-json = {version = "^0.7.0", optional=true}
-sqlalchemy-utils = {version = "^0.41.1", optional=true}
-
-[tool.poetry.group.doc]
-optional = true
-
-[tool.poetry.group.doc.dependencies]
-autodoc-pydantic = "^2.0.1"
-shibuya = "^2024.3.1"
-sphinx = ">=7.0.0"
-sphinx-design = "^0.6.0"
-sphinx-issues = "^5.0.0"
-sphinx-click = "^6.0.0"
-
-[tool.poetry.group.dev.dependencies]
-coverage = {version = "*", extras=["toml"]}
-faker = "*"
-flask-webtest = "*"
     # pre-commit version is fixed until docformatted hook is compatible
     # https://github.com/PyCQA/docformatter/issues/293
-pre-commit = "^3.0.0"
+    "pre-commit < 4.0.0",
-pyquery = "*"
+    "pre-commit-uv>=4.1.4",
-pytest = "^8.0.0"
+    "pyquery >= 2.0.0",
-pytest-coverage = "*"
+    "pytest >= 8.0.0",
-pytest-httpserver = "*"
+    "pytest-cov >= 6.0.0",
-pytest-lazy-fixtures = "^1.0.7"
+    "pytest-httpserver >= 1.1.0",
-pytest-smtpd = "^0.1.0"
+    "pytest-lazy-fixtures >= 1.0.7",
-pytest-xdist = "^3.3.1"
+    "pytest-smtpd >= 0.1.0",
-slapd = "*"
+    "pytest-xdist >= 3.3.1",
-time-machine = "^2.14.1"
+    "slapd >= 0.1.5",
-toml = "^0.10.0"
+    "time-machine >= 2.14.1",
+    "toml >= 0.10.0",
+    "tox-uv >= 1.16.0",
 
 # Babel 2.14 does not directly depend on setuptools
 # https://github.com/python-babel/babel/blob/40e60a1f6cf178d9f57fcc14f157ea1b2ab77361/CHANGES.rst?plain=1#L22-L24
 # and neither python 3.12 due to PEP 632
 # https://peps.python.org/pep-0632/
-setuptools = {version = "*", python = ">=3.12"}
+    "setuptools >= 50.0.0; python_version>='3.12'"
-
-[tool.poetry.group.demo]
-optional = true
-
-[tool.poetry.group.demo.dependencies]
-faker = "*"
-honcho = "*"
-slapd = "*"
-requests = "*"
-watchdog = "^4.0.0"
-
-[tool.poetry.extras]
-front = [
-    "click",
-    "email_validator",
-    "flask-babel",
-    "flask-themer",
-    "pycountry",
-    "pytz",
-    "toml",
-    "zxcvbn-rs-py",
-]
-ldap = [
-    "python-ldap",
-]
-oidc = [
-    "authlib",
-]
-sentry = [
-    "sentry-sdk",
-]
-sql = [
-    "passlib",
-    "sqlalchemy",
-    "sqlalchemy-json",
-    "sqlalchemy-utils",
-]
-all = [
-    "click",
-    "email_validator",
-    "flask-babel",
-    "flask-themer",
-    "passlib",
-    "pycountry",
-    "pytz",
-    "toml",
-    "python-ldap",
-    "authlib",
-    "sentry-sdk",
-    "sqlalchemy",
-    "sqlalchemy-json",
-    "sqlalchemy-utils",
-    "zxcvbn-rs-py",
 ]
 
-[tool.poetry.scripts]
+doc = [
+    "autodoc-pydantic >= 2.0.1",
+    "shibuya >= 2024.3.1",
+    "sphinx >= 7.0.0",
+    "sphinx-design >= 0.6.0",
+    "sphinx-issues >= 5.0.0",
+    "sphinx-click >= 6.0.0",
+]
+
+demo = [
+    "faker",
+    "honcho",
+    "slapd",
+    "requests",
+    "watchdog >= 4.0.0",
+]
+
+[project.scripts]
 canaille = "canaille.commands:cli"
 
 [options.packages.find]
@@ -166,9 +128,25 @@ exclude = [
     "doc.*",
 ]
 
-[tool.poetry.build]
+[tool.hatch.build]
-generate-setup-file = false
+include = [
-script = "build.py"
+    "canaille/",
+    "doc/",
+    "tests/",
+    "CHANGES.rst",
+    "CONTRIBUTING.rst",
+    "README.md",
+]
+exclude = [
+    "docs/_build/",
+]
+artifacts = ["canaille/translations/*/LC_MESSAGES/*.mo"]
+
+[tool.hatch.build.hooks.custom]
+dependencies = [
+    "Babel>=2.6.0",
+    "setuptools >= 50.0.0; python_version>='3.12'",
+]
 
 [tool.coverage.run]
 source = [
@@ -206,41 +184,52 @@ force-single-line = true
 docstring-code-format = true
 
 [tool.tox]
-legacy_tox_ini = """
+requires = ["tox>=4.19"]
-[tox]
+env_list = [
-isolated_build = true
+    "style",
-skipsdist = true
+    "py310",
-envlist =
+    "py311",
-    style
+    "py312",
-    py310
+    "py313",
-    py311
+    "minversions",
-    py312
+    "doc",
-    py313
+    "coverage",
-    doc
+]
-    coverage
 
-[testenv]
+[tool.tox.env_run_base]
-allowlist_externals = poetry
+# Needed until zxcvbn supports Python 3.13
-commands =
+# https://github.com/fief-dev/zxcvbn-rs-py/issues/2
-    poetry install --extras all
+set_env = {PYO3_USE_ABI3_FORWARD_COMPATIBILITY = "1"}
-    poetry run pytest --showlocals --full-trace {posargs}
+runner = "uv-venv-lock-runner"
+dependency_groups = ["dev"]
+uv_sync_flags = ["--all-extras"]
+commands = [
+    ["pytest", "--showlocals", "--full-trace", "{posargs}"],
+]
 
-[testenv:style]
+[tool.tox.env.style]
-commands =
+skip_install = true
-    pip install pre-commit<4
+runner = "uv-venv-runner"
-    pre-commit run --all-files
+commands = [
+    ["pre-commit", "run", "--all-files", "--show-diff-on-failure"],
+]
 
-[testenv:doc]
+[tool.tox.env.minversions]
-commands =
+uv_resolution = "lowest-direct"
-    poetry install --with doc --without dev --extras oidc
+basepython = ["python3.10"]
-    poetry run sphinx-build doc build/sphinx/html
 
-[testenv:coverage]
+[tool.tox.env.doc]
-commands =
+dependency_groups = ["doc"]
-    poetry install --extras all
+commands = [
-    poetry run pytest --cov --cov-fail-under=100 --cov-report term:skip-covered {posargs:-n auto}
+    ["sphinx-build", "--builder", "html", "doc", "build/sphinx/html"],
-    poetry run coverage html
+    ["sphinx-build", "--builder", "man", "doc", "build/sphinx/html"],
-"""
+]
+
+[tool.tox.env.coverage]
+commands = [
+    ["pytest", "--cov", "--cov-fail-under=100", "--cov-report", "term:skip-covered", "{posargs}"],
+    ["coverage", "html"],
+]
 
 [[tool.babel.mappings]]
 method = "python"