fix: prevent dev dependency downloads at runtime (#704) #1304

	---
	# This workflow will install Python dependencies, run tests and lint with a variety of Python versions
	# For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions

	name: Python package

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	build:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: [3.11, 3.12, 3.13, 3.14]

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
	with:
	egress-policy: audit

	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false
	- name: Install uv
	uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
	with:
	version: "0.10.9"
	enable-cache: true
	- name: Set up Python ${{ matrix.python-version }}
	run: uv python install ${{ matrix.python-version }}
	- name: Install dependencies
	run: uv sync --frozen --python ${{ matrix.python-version }}
	- name: Lint with flake8 and pylint
	run: \|
	make lint
	- name: Test with pytest
	run: \|
	make test

Provide feedback