Use dependency-groups instead of test-requirements.txt (#246)

* Try out using dependency-groups
* tox always uses isolated builds in v4+
* update tox config for dependency-groups

Author: LincolnPuzey

.github/workflows/linting.yml

@@ -25,9 +25,7 @@ jobs:
 
       - name: Install flake8
         run: |
-          python -m pip install --upgrade pip wheel
-          python -m pip install flake8
-          python --version
+          pip install --group lint
           pip list
 
       - name: Run flake8
@@ -48,8 +46,8 @@ jobs:
 
     - name: Install bandit
       run: |
-        python -m pip install --upgrade pip wheel
-        python -m pip install bandit
+        pip install --group security
+        pip list
 
     - name: Run bandit
       # "B101:assert_used" is allowed in tests.

.github/workflows/publish-to-pypi.yml

@@ -27,7 +27,7 @@ jobs:
 
       - name: Install pypa/build
         run: |
-          pip install build
+          pip install --group build
           python --version
           pip list
 

.github/workflows/tests.yml

@@ -96,8 +96,7 @@ jobs:
 
       - name: Install test requirements
         run: |
-          python -m pip install --upgrade pip wheel
-          pip install django~=${{ matrix.django }}.0 coverage[toml]~=7.0 -r tests-requirements.txt
+          pip install django~=${{ matrix.django }}.0 --group test
           python --version
           pip list
 

pyproject.toml

@@ -52,6 +52,31 @@ Documentation = "https://django-dirtyfields.readthedocs.io"
 [tool.setuptools.dynamic]
 version = {attr = "dirtyfields.__version__"}
 
+[dependency-groups]
+dev = [
+    {include-group = "test"},
+    {include-group = "lint"},
+    {include-group = "security"},
+    {include-group = "build"},
+]
+test = [
+    "pytest>=8.4.0,<9",
+    "coverage[toml]>=7.10.0,<8",
+    "psycopg2",
+    # let pip choose the latest version compatible with the python/django version being tested.
+    "pytest-django",
+    "jsonfield",
+]
+lint = [
+    "flake8",
+]
+security = [
+    "bandit",
+]
+build = [
+    "build",
+]
+
 [tool.pytest.ini_options]
 django_find_project = false
 DJANGO_SETTINGS_MODULE = 'tests.django_settings'

tests-requirements.txt

@@ -1,6 +1,5 @@
 ; tox is just used for testing the python/django matrix locally
 [tox]
-isolated_build = True
 envlist =
     py{39}-django{22,30,31}-{postgresql,sqlite}
     py{39,310}-django{32,40}-{postgresql,sqlite}
@@ -17,7 +16,6 @@ passenv =
 setenv =
     PYTHONPATH = {toxinidir}
 deps =
-    coverage[toml]~=7.0
     django22: Django>=2.2,<2.3
     django30: Django>=3.0,<3.1
     django31: Django>=3.1,<3.2
@@ -28,7 +26,8 @@ deps =
     django50: Django>=5.0,<5.1
     django51: Django>=5.1,<5.2
     django52: Django>=5.2,<5.3
-    -rtests-requirements.txt
+dependency_groups =
+    test
 commands =
     python --version
     pip list
@@ -37,7 +36,8 @@ commands =
 
 [testenv:py{39,310,311,312}-flake8]
 skip_install = True
-deps = flake8
+dependency_groups =
+    lint
 commands =
     python --version
     pip list