Migrate from poetry to uv

[eneelo]

What's included in this PR

Migration from poetry to uv (https://docs.astral.sh/uv/).

• Replace poetry with uv as package and build manager.
• Ensure support for python versions 3.8-3.13. This PR fixes Broken dependency for python 3.12 #134.
• [HOLD] Implement pip-audit to scan dependencies for known vulnerabilities. See https://github.com/pypa/pip-audit.

Tasks

Tasks related to migration to uv:

• Run migration script (https://pypi.org/project/migrate-to-uv/).
• Clean up pyproject.toml and dependencies.
• Test and adjust build (uv build)
• Manually test installing the build into different python environments
  • Python 3.8
  • Python 3.11
  • Python 3.13
• Update github workflows to work with uv. See https://docs.astral.sh/uv/guides/integration/github/.
  • test.yml
  • publish.yml
• Update README.md to reflect the migration from poetry to uv.
• [hold] Update documentation, if needed.
• (todo: complete the list of tasks)

Other tasks:

• Consider updating/adding github workflow for error security scanning of code and dependencies.

  See this blog for a description of different types of linters, e.g. flake8 and bandit).

  • codeql. Currently set up in codeql.yml (may not need any update).
    • https://github.com/github/codeql-action

    Note: Code scanning by CodeQL (and SonarCloud) is also set up for pull requests, see the checks tab.

  • flake8 (error and style linter, complexity analysis). Currently included in test.yml, but may possibly be replaced with the github action.
    • https://github.com/PyCQA/flake8
    • https://github.com/py-actions/flake8
  • bandit (security linter). Scan for common security issues in python code.
    • https://github.com/PyCQA/bandit
    • https://github.com/PyCQA/bandit-action
  • pip-audit. Scans dependencies for known vulnerabilities.
    • https://github.com/pypa/pip-audit
    • https://github.com/pypa/gh-action-pip-audit

Note

This branch is established from the add-python313-support branch (see PR #133), and therefore includes multiple commits related to an attempt to add support for python versions 3.8 through 3.13 using poetry.
If this PR is merged to master branch, then PR #133 should be closed without merging.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud