Modernise our lint tooling by:
- Replacing pyenv + pip with uv for better Python environment and dependency management - Replacing mypy with https://github.com/astral-sh/ty - Replacing the 01_install.sh runtime install script with COPY –from multi-stage Docker image imports for uv, ruff, shellcheck, mlc, and ty - Moving ruff lint rules from hardcoded Rust array (in lint_py.rs) into a top-level ruff.toml, and add ty.toml for the type checker - Extracting all remaining pip dependencies into dedicated ci/lint/requirements.txt - Add a ruff format lint which, if the original file is formatted, will fail if a change un-formats it
Extra rationale:
COPY --from pulls pre-built binaries from upstream images instead of compiling/downloading at runtime. Containerfile layer optimisations reduce rebuild frequency further.
ty is significantly faster/more modern/maintained than mypy, and configured declaratively.
Adding root-level [ty|ruff].toml config files means contributors can easily run ty check or ruff check locally without running the full linter, along with being accessible to other tooling (similarly for requriements.txt).
Pinning tool versions in the dockerfile makes it more excplicit and easier to find.
The tradeoff we make here is that there is no longer a bare install script to install tooling on a local machine. However I think this is OK, as it currently only works for apt-based OSes anyway, and I don’t think running the linter outside of the container is such a valuable use-case as it is with some of the other CI jobs.
Further work can drop individual rules from ty.toml fixing up the infringing code as necessary.
I can split this up if wanted, but IMO it makes sense to do it altogether.
