🔨 Re-organize dependencies for local dev and CI

[sergei-maertens]

The 'hard' dependencies are now specified as extra groups in the setup.py package information. tox.ini points to these extras to install the required dependencies, and their supported version ranges.

The dev requirements file is now documented in the contributing guidelines, and makes use of the extras to pull in the optional dependencies for a full-blown local installation. The remaining dependencies (such as sphinx) are not used in tox and are still in the requirements_dev.txt file.

The linting dependencies (with upper bound versions) are now also specified as an extra group to prevent mismatching versions in tox env and local development envs.

Motivation and Context

pip install -r requirements_dev.txt lead to different versions of isort/flak8 being installed in local env and CI pipeline. While it
didn't cause problems yet, these are annoying to track down.

Additionally, when touching minimum required versions, it's hard to keep track of where the version numbers are all specified
and can lead to false negatives in the tests if there are things broken because one specification overrides another.

How Has This Been Tested?

• Clean virtualenv
• pip install -r requirements_dev.txt
• make example-webauthn
• tox

Screenshots (if appropriate):

n/a

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Project maintenance

Checklist:

• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have added tests to cover my changes.
• All new and existing tests passed.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (6f3bbd8) 97.83% compared to head (fe9dab5) 97.83%.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #706   +/-   ##
=======================================
  Coverage   97.83%   97.83%           
=======================================
  Files          78       78           
  Lines        3378     3378           
  Branches      376      376           
=======================================
  Hits         3305     3305           
  Misses         42       42           
  Partials       31       31           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[claudep]

Great, thanks a lot! Sooner or later, we should also migrate to pyproject.toml instead of setup.py.

[sergei-maertens]

yeah, I wanted to mention that earlier but it involves some changes in build tooling too. we recently updated our own starter template to it, maybe @Viicos wants to do this one 😉

[Viicos]

Sure thing, always happy to migrate projects to the new PEP 517/8