Update `kaleido` and migrate to `uv`

[j-adamczyk]

This issue suggested upgrading Kaleido to 1.x, which would fix a lot of dependencies. It was actually implemented in this PR moving NannyML to uv, but it was turned to stale and closed automatically. Why was that PR ignored? This now creates 2 issues + problems with dependencies, since Kaleido had problems with PyPI wheels pre-1.x (which now I run into).

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[j-adamczyk]

Still relevant I guess?

[humana]

uv add nannyml
Resolved 295 packages in 2.06s
error: Distribution kaleido==0.2.1.post1 @ registry+https://pypi.org/simple can't be installed because it doesn't have a source distribution or wheel for the current platform

hint: You're on macOS (macosx_15_0_arm64), but kaleido (v0.2.1.post1) only has wheels for the following platform: manylinux2014_armv7l; consider adding your platform to tool.uv.required-environments to ensure uv resolves to a version with compatible wheels

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[j-adamczyk]

Still relevant. @nnansters is NannyML maintained at this point, or should I move on? Stale bot closes all issues, I haven't seen any actual activity for a long time.

[christiansegercrantz]

Still relevant. @nnansters is NannyML maintained at this point, or should I move on? Stale bot closes all issues, I haven't seen any actual activity for a long time.

Seems it's abandoned after being acquired by SodaML. It has also had a lightGBM vulnerability for a very long time.

[nnansters]

Hey @j-adamczyk and @christiansegercrantz , sorry about my absence. We've been quite pre-occupied with other things, but it's not my intent to let the NannyML library die. Let me look into this one tomorrow.

I'll have another pass at the issues closed by the stalebot too. I'll likely need a big refresh of the dependencies as well.

[christiansegercrantz]

Thanks for the reply @nnansters! Could you have a look at the LightGBM vulnerability that has been around for a while?

[peacefulotter]

Hi @nnansters,

Any news regarding this?

It prevents me from installing the package..

Thanks !!