ci: static-analysis - use uv run, official uv/action, freeze uv.lock

Signed-off-by: Teo <[email protected]>

.github/workflows/static-analysis.yaml

@@ -9,6 +9,7 @@ on:
     paths:
       - '**/*.py'
 
+  workflow_dispatch:
 permissions:
   contents: read
 
@@ -33,30 +34,18 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with:
-          persist-credentials: false
           fetch-depth: 0
 
-      - name: Set up Python
-        uses: actions/setup-python@v5
-        id: setup_python
+      - uses: astral-sh/setup-uv@v4
         with:
+          enable-cache: true
+          cache-dependency-glob: "**/pyproject.toml"
           python-version: "3.11.10"
 
-      - name: UV Cache
-        # Manually cache the uv cache directory
-        # until setup-python supports it:
-        # https://github.com/actions/setup-python/issues/822
-        uses: actions/cache@v4
-        id: cache-uv
-        with:
-          path: ~/.cache/uv
-          key: uvcache-${{ runner.os }}-${{ steps.setup_python.outputs.python-version }}-${{ hashFiles('pyproject.toml') }}
-
       - name: Install packages
         run: |
-          python -m pip install -U uv pre-commit
-          uv pip install --upgrade --system -e .[dev]
+          uv sync --group dev
 
       - name: Run pre-commit
         run: |
-          pre-commit run --show-diff-on-failure --color=always --all-files
+          uvx pre-commit run --show-diff-on-failure --color=always --all-files