SDK-87: Migrate to `uv` for development environments & fix vulnerabilities#208

Merged

benglewis merged 31 commits into

mainfrom

sdk-87-allow-codex-to-run-pip-audit-and-fix-vulnerabilities

Feb 11, 2026

Commits on Feb 4, 2026

Commits on Feb 8, 2026

Drop irrelevant `matrix` from `vulnerability-scan.yml`
benglewis
committed
Ensure that `uv`'s `venv` is activated before scanning for vulnerabilities
benglewis
committed
Align `uv venv` and activation order in `vulnerability-scan.yml`
benglewis
committed
Change `vulnerability-scan.yml` to install all `groups` and all `extras` to ensure that they are tested for vulnerabilities
benglewis
committed
Fix `deploy-docker-image.yaml` disk space issues by changing GitHub Actions runner
benglewis
committed
Fix Cursor's bugbot's comment about `vulnerability-scan.yml` specifically scanning `.venv`
benglewis
committed
Update workflows to use setup-uv
benglewis
committed
Add deploy-only dependency group
benglewis
committed

Commits on Feb 10, 2026