ci: authenticate installer requests and select available uv builds

Author: aooohan

.github/select-uv-version.py

@@ -0,0 +1,29 @@
+"""Choose a current security-only Python 3.10 build for the installation smoke test."""
+import json
+import os
+import platform
+import urllib.request
+
+os_name = "windows" if platform.system() == "Windows" else "linux"
+request = urllib.request.Request(
+    "https://vault.vfox.dev/python/uv-build?os=" + os_name + "&arch=x86_64",
+    headers={"User-Agent": "vfox"},
+)
+with urllib.request.urlopen(request, timeout=30) as response:
+    items = json.load(response)["items"]
+versions = set()
+for item in items:
+    version = item.get("version", "")
+    parts = version.split(".")
+    if (item.get("implementation") == "cpython"
+            and item.get("variant", "default") == "default"
+            and len(parts) == 3 and parts[:2] == ["3", "10"]
+            and all(part.isdigit() for part in parts)
+            and item.get("filename", "").endswith((".tar.gz", ".zip"))):
+        versions.add(version)
+if not versions:
+    raise RuntimeError("No Python 3.10 uv-build installer is available for " + os_name)
+version = max(versions, key=lambda value: tuple(map(int, value.split("."))))
+with open(os.environ["GITHUB_ENV"], "a", encoding="utf-8") as output:
+    output.write("VFOX_TEST_UV_VERSION=" + version + "\n")
+print("Testing uv-build Python " + version + " on " + os_name)

.github/workflows/vfox-test.yaml

@@ -9,12 +9,13 @@ on:
     tags: ["v*"]
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   test-on-linux:
     runs-on: ${{ matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
         os: [ubuntu-latest]
         python-version: [3.12.2]
@@ -33,6 +34,8 @@ jobs:
           exclusions: "*.git* manifest.json"
 
       - name: Install vfox
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
         shell: bash
         run: |
           for _ in {1..10}; do
@@ -64,24 +67,28 @@ jobs:
               exit 1
           fi
 
-      - name: Install Python 3.10.20 with uv-build
+      - name: Select an available uv-build Python 3.10 version
+        if: matrix.mirror == ''
+        run: python .github/select-uv-version.py
+
+      - name: Install Python 3.10 with uv-build
         if: matrix.mirror == ''
         env:
           VFOX_PYTHON_USE_UV_BUILD: "1"
         run: |
           eval "$(vfox activate bash)"
-          vfox install python@3.10.20
-          vfox use -g python@3.10.20
+          vfox install python@"$VFOX_TEST_UV_VERSION"
+          vfox use -g python@"$VFOX_TEST_UV_VERSION"
           vfox current
 
-      - name: Check uv-build python 3.10.20
+      - name: Check uv-build python 3.10
         if: matrix.mirror == ''
         run: |
           eval "$(vfox activate bash)"
           python_version=$(python -c 'import sys;print(sys.version)')
           echo "$python_version"
 
-          if [[ ! $python_version == 3.10.20* ]]; then
+          if [[ ! $python_version == "$VFOX_TEST_UV_VERSION"* ]]; then
               exit 1
           fi
 
@@ -94,6 +101,7 @@ jobs:
         shell: pwsh
     runs-on: ${{ matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
         os: [windows-latest]
         python-version: [3.12.2]
@@ -147,17 +155,21 @@ jobs:
               exit 1
           }
 
-      - name: Install Python 3.10.20 with uv-build
+      - name: Select an available uv-build Python 3.10 version
+        if: matrix.mirror == ''
+        run: python .github/select-uv-version.py
+
+      - name: Install Python 3.10 with uv-build
         if: runner.os == 'Windows' && matrix.mirror == ''
         env:
           VFOX_PYTHON_USE_UV_BUILD: "1"
         run: |
           Invoke-Expression "$(vfox activate pwsh)"
-          vfox install python@3.10.20
+          vfox install "python@$env:VFOX_TEST_UV_VERSION"
           if ($LASTEXITCODE -ne 0) {
             exit $LASTEXITCODE
           }
-          vfox use -g python@3.10.20
+          vfox use -g "python@$env:VFOX_TEST_UV_VERSION"
           if ($LASTEXITCODE -ne 0) {
             exit $LASTEXITCODE
           }
@@ -169,19 +181,19 @@ jobs:
           }
           Write-Output $python_version
 
-          if ($python_version -notlike "3.10.20*") {
-              Write-Error "expected uv-build python 3.10.20, got $python_version"
+          if ($python_version -notlike "$env:VFOX_TEST_UV_VERSION*") {
+              Write-Error "expected uv-build python $env:VFOX_TEST_UV_VERSION, got $python_version"
               exit 1
           }
 
-      - name: Check uv-build python 3.10.20
+      - name: Check uv-build python 3.10
         if: runner.os == 'Windows' && matrix.mirror == ''
         run: |
           Invoke-Expression "$(vfox activate pwsh)"
           $python_version = $(python -c 'import sys;print(sys.version)')
           Write-Output $python_version
 
-          if ($python_version -notlike "3.10.20*") {
+          if ($python_version -notlike "$env:VFOX_TEST_UV_VERSION*") {
               exit 1
           }