[chazlarson]

Summary

The scripts and the Plex Image Picker now install from uv lockfiles instead of requirements.txt.

• Root pyproject.toml / uv.lock covers the orchestrator and the Plex, Kometa, and TMDB scripts. Python is pinned to 3.12. ruff and pre-commit are in the dev group, so production installs skip them.
• plex-image-picker/ is its own uv project, with pylint in its dev group. Its image moved from Python 3.9 to 3.12.
• Both Dockerfiles copy uv 0.13.4 and run uv sync --frozen --no-dev --no-install-project.
• direnv runs uv sync and activates .venv. Without direnv: uv sync, then uv run.
• The unused TMDB/requirements.txt (it still listed python-dotenv) is gone, along with the pre-commit requirements-txt-fixer hook.

.github/workflows/CI.yml is unchanged. It only runs on master, still installs requirements.txt, and is the copied LizardByte plugin workflow (Python 2.7 tests, bundle packaging). It does not run on main.

Verification

• uv lock and uv sync for both projects on CPython 3.12.3.
• Root: import yaml, plexapi, requests, flask and compileall of orchestrator.py and menu.py.
• Picker: import flask, plexapi, requests.
• Docker image builds were not run here; this agent VM has no Docker daemon.

  

[augmentcode]

^{Deep Code Review Agent🐛}

Review completed with 1 suggestion.

_{Reviewed commit: e109802}

[augmentcode]

^{Deep Code Review Agent🐛}

Removing requirements.txt leaves .github/workflows/CI.yml pointing at a file that no longer exists; a manual workflow_dispatch run, or any future master-targeted run, will fail in the dependency-install steps before tests or packaging can start.

Severity: medium

---

_{🤖 Was this useful? React with 👍 or 👎}

[augmentcode]

^{PR Risk Analyzer Agent 🛡️}

👀 Human review needed

Justification

This PR migrates dependency installation from requirements.txt to uv lockfiles for both the root project and plex-image-picker/.

• Dependency parity is preserved in pyproject.toml: every production dependency and version constraint from the old requirements.txt is carried over (including sqlalchemy<2.0, plexapi>=4.16.1, alive-progress==2.4.1, and the TMDB/TVDB packages). pre-commit, ruff, and pylint[spelling] are correctly moved to dev groups so production installs skip them.
• No application/source logic changes; the bulk of the diff (~1,800 lines) is generated uv.lock files.

However, this change rewrites production deployment artifacts and lacks automated verification:

• Both Dockerfiles are rewritten to copy uv 0.13.4 and run uv sync --frozen --no-dev --no-install-project. plex-image-picker bumps its runtime from Python 3.9 to 3.12.
• The PR description states the Docker image builds were not run, and .github/workflows/CI.yml does not run on main, so no CI gate verifies the new images build or start.

Recommend a human confirm both Docker images build and the orchestrator and picker services start under the uv-based install before merging.

_{Reviewed commit e109802}