feat: convert most low importance nox sessions to use uvx in place of a nox venv

Author: 56kyle

{{cookiecutter.project_name}}/noxfile.py

@@ -71,14 +71,11 @@ def precommit(session: Session) -> None:
         activate_virtualenv_in_precommit_hooks(session)
 
 
-@nox.session(python=DEFAULT_PYTHON_VERSION, name="format-python", tags=[FORMAT, PYTHON])
+@nox.session(python=None, name="format-python", tags=[FORMAT, PYTHON])
 def format_python(session: Session) -> None:
     """Run Python code formatter (Ruff format)."""
-    session.log("Installing formatting dependencies...")
-    session.install("ruff")
-
     session.log(f"Running Ruff formatter check with py{session.python}.")
-    session.run("ruff", "format", *session.posargs)
+    session.run("uvx", "ruff", "format", *session.posargs)
 
 
 {% if cookiecutter.add_rust_extension == "y" -%}
@@ -92,14 +89,11 @@ def format_rust(session: Session) -> None:
 
 
 {% endif -%}
-@nox.session(python=DEFAULT_PYTHON_VERSION, name="lint-python", tags=[LINT, PYTHON])
+@nox.session(python=None, name="lint-python", tags=[LINT, PYTHON])
 def lint_python(session: Session) -> None:
     """Run Python code linters (Ruff check, Pydocstyle rules)."""
-    session.log("Installing linting dependencies...")
-    session.install("ruff")
-
     session.log(f"Running Ruff check with py{session.python}.")
-    session.run("ruff", "check", "--fix", "--verbose")
+    session.run("uvx", "ruff", "check", "--fix", "--verbose")
 
 
 {% if cookiecutter.add_rust_extension == "y" -%}
@@ -123,17 +117,14 @@ def typecheck(session: Session) -> None:
     session.run("pyright")
 
 
-@nox.session(python=DEFAULT_PYTHON_VERSION, name="security-python", tags=[SECURITY, PYTHON, CI])
+@nox.session(python=None, name="security-python", tags=[SECURITY, PYTHON, CI])
 def security_python(session: Session) -> None:
     """Run code security checks (Bandit) on Python code."""
-    session.log("Installing security dependencies...")
-    session.install("bandit", "pip-audit")
-
     session.log(f"Running Bandit static security analysis with py{session.python}.")
-    session.run("bandit", "-r", PACKAGE_NAME, "-c", "bandit.yml", "-ll")
+    session.run("uvx", "bandit", "-r", PACKAGE_NAME, "-c", "bandit.yml", "-ll")
 
     session.log(f"Running pip-audit dependency security check with py{session.python}.")
-    session.run("pip-audit")
+    session.run("uvx", "pip-audit")
 
 
 {% if cookiecutter.add_rust_extension == 'y' -%}
@@ -249,17 +240,15 @@ def build_container(session: Session) -> None:
     session.log(f"Container image {project_image_name}:latest built locally.")
 
 
-@nox.session(python=DEFAULT_PYTHON_VERSION, name="publish-python", tags=[RELEASE])
+@nox.session(python=None, name="publish-python", tags=[RELEASE])
 def publish_python(session: Session) -> None:
     """Publish sdist and wheel packages to PyPI via uv publish.
 
     Requires packages to be built first (`nox -s build-python` or `nox -s build`).
     Requires TWINE_USERNAME/TWINE_PASSWORD or TWINE_API_KEY environment variables set (usually in CI).
     """
-    session.install("twine")
-
     session.log("Checking built packages with Twine.")
-    session.run("twine", "check", "dist/*")
+    session.run("uvx", "twine", "check", "dist/*")
 
     session.log("Publishing packages to PyPI.")
     session.run("uv", "publish", "dist/*", external=True)
@@ -276,7 +265,7 @@ def publish_rust(session: Session) -> None:
 
 
 {% endif -%}
-@nox.session(venv_backend="none", tags=[RELEASE])
+@nox.session(python=None, tags=[RELEASE])
 def release(session: Session) -> None:
     """Run the release process using Commitizen.
 
@@ -291,15 +280,15 @@ def release(session: Session) -> None:
         session.skip("Git not available.")
 
     session.log("Checking Commitizen availability via uvx.")
-    session.run("cz", "--version", success_codes=[0])
+    session.run("uvx", "--from=commitizen", "cz", "version", success_codes=[0])
 
     increment = session.posargs[0] if session.posargs else None
     session.log(
         "Bumping version and tagging release (increment: %s).",
         increment if increment else "default",
     )
 
-    cz_bump_args = ["uvx", "cz", "bump", "--changelog"]
+    cz_bump_args = ["uvx", "--from=commitizen", "cz", "bump", "--changelog"]
 
     if increment:
         cz_bump_args.append(f"--increment={increment}")
@@ -311,7 +300,7 @@ def release(session: Session) -> None:
     session.log("IMPORTANT: Push commits and tags to remote (`git push --follow-tags`) to trigger CD pipeline.")
 
 
-@nox.session(venv_backend="none")
+@nox.session(python=None)
 def tox(session: Session) -> None:
     """Run the 'tox' test matrix.