chore: merge origin/main

.github/workflows/validate.yml

@@ -19,6 +19,8 @@ on:
       - "install.ps1"
       # The handheld port bundles install.py and its tests read both.
       - "ports/**"
+      # The PyPI package is built from install.py and its tests build it.
+      - "packaging/**"
       # Every input of the site build, so a page that would fail the deploy
       # fails here first (tests/test_workflow_paths.py).
       - "wiki/**"
@@ -50,6 +52,7 @@ on:
       - "install.sh"
       - "install.ps1"
       - "ports/**"
+      - "packaging/**"
       - "wiki/**"
       - "docs_assets/**"
       - "provenance/**"
@@ -241,9 +244,10 @@ jobs:
       # heading guard's premise, and skipped on every run without it. pyte
       # reads the installer's full screen back in its end-to-end tests,
       # hypothesis fuzzes its key decoder, and vermin holds install.py to 3.8.
-      # setuptools reads pyproject.toml for the packaging guard.
+      # setuptools reads pyproject.toml for the packaging guard, and uv builds
+      # the PyPI package the way a release builds it.
       - name: Install dependencies
-        run: pip install pyyaml "jsonschema[format-nongpl]==4.26.0" "markdown==3.10.2" "pyte==0.8.2" "hypothesis==6.170.8" "vermin==1.9.2" "setuptools==80.9.0"
+        run: pip install pyyaml "jsonschema[format-nongpl]==4.26.0" "markdown==3.10.2" "pyte==0.8.2" "hypothesis==6.170.8" "vermin==1.9.2" "setuptools==80.9.0" "uv==0.12.9"
 
       # The full screen also runs under the 3.8 floor: the end-to-end tests
       # start install.py with the interpreter that runs them.