[DNR] [deps] Use uv for requirements compiled

[elliot-barn]

using uv for requirements compiled
using uv binary defined in bazel workspace to compile deps

[gemini-code-assist]

Code Review

This pull request migrates the Python dependency compilation process from pip-tools to uv, which should provide a significant performance improvement. The changes in ci/ci.sh correctly fetch the uv binary from the Bazel workspace and use it to compile the requirements. The pyproject.toml and the generated requirements_compiled.txt are updated accordingly, with the latter now having more specific and reproducible dependency markers. I've added a couple of suggestions to clean up the CI script by removing redundant code and installations.

[gemini-code-assist]

Since pip-compile (from pip-tools) is being replaced by uv pip compile, the installation of pip-tools is no longer necessary. You can remove it to simplify the script.

Suggested change

	"$UV_BIN" pip install "pip-tools==7.4.1" "wheel==0.45.1"
	"$UV_BIN" pip install "wheel==0.45.1"

[gemini-code-assist]

This large block of commented-out code appears to be the old pip-compile command. Since the script now uses uv pip compile, this block is dead code and can be removed to improve readability.

[cursor]

Cursor Bugbot has reviewed your changes and found 4 potential issues.

[cursor]

Missing index URL emission in uv compile output

High Severity

The uv pip compile command specifies --index and --find-links for resolution, but unlike pip-compile, uv does not emit these to the output file by default. The --emit-index-url flag is required but missing. As a result, requirements_compiled.txt no longer contains the --extra-index-url https://download.pytorch.org/whl/cpu and --find-links lines that were previously present. This could cause downstream pip installations to fail when packages are only available from the PyTorch CPU index.

Additional Locations (1)

• python/requirements_compiled.txt#L1

 

[cursor]

Wrong uv binary selected for Intel Mac architecture

Medium Severity

The darwin case selects uv_aarch64-darwin for all macOS systems. However, the earlier arm64/aarch64 check (lines 20-26) returns early before this code is reached on Apple Silicon Macs. This means only Intel Macs (x86_64-darwin) would execute this branch, but they would receive the ARM binary which cannot run on Intel architecture.

 

[cursor]

Unused pip-tools package installed but never called

Low Severity

The code installs pip-tools==7.4.1 via uv pip install, but then uses uv pip compile (uv's built-in compile command) instead of the pip-compile command from pip-tools. The pip-tools package is installed but never used since the old pip-compile invocation is now commented out. This wastes CI time installing an unnecessary dependency.

 

[cursor]

Commented-out dead code should be removed

Medium Severity

The old pip-compile command has been left as a 22-line commented-out block after being replaced by the new uv pip compile command. This dead code should be removed rather than kept as comments.