feat: rewrite GitHub Actions CI/CD to be uv-native

CI:
- Split into parallel lint, typecheck, and test jobs
- Use astral-sh/setup-uv with caching
- Derive Python version matrix from min_python_version
- Use uv sync --locked to verify lockfile
- Add concurrency group to cancel stale runs

CD:
- Replace pipx run build with uv build
- Update to actions/upload-artifact@v4 and download-artifact@v4
- Simplify to only trigger on release published

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Nathan Simpson

project_template/.github/workflows/cd.yml

@@ -1,53 +1,41 @@
 name: CD
 
 on:
-  workflow_dispatch:
-  pull_request:
-  push:
-    branches:
-      - main
   release:
     types:
       - published
 
 jobs:
   dist:
-    needs: [pre-commit]
-    name: Distribution build
+    name: Build distribution
     runs-on: ubuntu-latest
-
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-
-      - name: Build sdist and wheel
-        run: pipx run build
-
-      - uses: actions/upload-artifact@v3
+      - uses: astral-sh/setup-uv@v5
         with:
+          enable-cache: true
+      - run: uv build
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
           path: dist
 
-      - name: Check products
-        run: pipx run twine check dist/*
-
   publish:
     needs: [dist]
     name: Publish to PyPI
     environment: pypi
     permissions:
       id-token: write
     runs-on: ubuntu-latest
-    if: github.event_name == 'release' && github.event.action == 'published'
 
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
-          name: artifact
+          name: dist
           path: dist
-
       - uses: pypa/gh-action-pypi-publish@release/v1
-        if: github.event_name == 'release' && github.event.action == 'published'
         with:
           # Remove this line to publish to PyPI
           repository-url: https://test.pypi.org/legacy/

project_template/.github/workflows/ci.yml

@@ -1,54 +1,49 @@
 name: CI
 
 on:
-  workflow_dispatch:
-  pull_request:
   push:
-    branches:
-      - main
+    branches: [main]
+  pull_request:
+
+concurrency:
+  group: {% raw %}${{ github.workflow }}-${{ github.ref }}{% endraw %}
+  cancel-in-progress: true
 
 jobs:
-  pre-commit:
-    name: Format + lint code
+  lint:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
         with:
-          fetch-depth: 0
-      - uses: actions/setup-python@v4
-        with:
-          python-version: "3.x"
-      - uses: pre-commit/action@v3.0.0
+          enable-cache: true
+      - run: uv run ruff check --output-format=github .
+      - run: uv run ruff format --check .
+
+  typecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
         with:
-          extra_args: --hook-stage manual --all-files
+          enable-cache: true
+      - run: uvx ty check
 
-  checks:
-    name: {% raw %}Run tests for Python ${{ matrix.python-version }} on ${{ matrix.runs-on }}{% endraw %}
-    runs-on: {% raw %}${{ matrix.runs-on }}{% endraw %}
-    needs: [pre-commit]
+  test:
+    runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["{{ min_python_version }}", "3.12"]  # test oldest and latest supported versions
-        runs-on: [ubuntu-latest, macos-latest]  # can be extended to other OSes, e.g. [ubuntu-latest, macos-latest, windows-latest]
-
+        python-version: [{% for v in range(min_python_version.split('.')[1]|int, 14) %}"3.{{ v }}"{% if not loop.last %}, {% endif %}{% endfor %}]
     steps:
       - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - uses: actions/setup-python@v4
+      - uses: astral-sh/setup-uv@v5
         with:
           python-version: {% raw %}${{ matrix.python-version }}{% endraw %}
-          allow-prereleases: true
-
-      - name: Install package
-        run: python -m pip install .[dev]
-
-      - name: Test package
-        run: >-
-          python -m pytest -ra --cov --cov-report=xml --cov-report=term
-          --durations=20
-
-      - name: Upload coverage report
-        uses: codecov/codecov-action@v3.1.4
+          enable-cache: true
+      - run: uv sync --locked --group test
+      - run: uv run pytest --cov --cov-report=xml
+      - uses: codecov/codecov-action@v5
+        if: {% raw %}matrix.python-version == '3.13'{% endraw %}
+        with:
+          files: coverage.xml