fix(ci): finish the 3.10 compat leg — test-side pydantic helpers, SYSTEM_PYTHON

The new tag-gated compat job (first exercise of the Python 3.10 /
pydantic v1 half of the matrix) surfaced the remaining first-contact
debt:

- Tests called model_dump()/model_validate_json() on models directly;
  routed through the schema compat helpers like the analyzer code.
- The venv-building CLI tests need a base interpreter that can create
  virtual environments; inside uv's venv on the runner the discovery
  walk has no anchor, so the compat job now sets SYSTEM_PYTHON — the
  escape hatch that error message documents.

Verified locally on 3.10 + pydantic 1.10.26: every test that does not
spawn a CLI subprocess passes; the subprocess ones fail locally only
because ray 2.0.0 ships an x86_64 grpc wheel that Apple Silicon cannot
load in child processes — the ubuntu runner imports it fine. 3.12:
patched files 21/21 green.

Author: rahlk

.github/workflows/release.yml

@@ -39,6 +39,11 @@ jobs:
 
       - name: Run tests
         run: uv run pytest
+        env:
+          # The venv-building CLI tests must find a base interpreter that can
+          # create virtual environments; inside uv's own venv the discovery
+          # walk has no anchor on the runner, so hand it the setup-python one.
+          SYSTEM_PYTHON: python3.10
 
   release:
     needs: compat

test/test_call_site_body_convergence.py

@@ -7,7 +7,7 @@
 """
 import json
 
-from codeanalyzer.schema import strip_internal_only
+from codeanalyzer.schema import strip_internal_only, model_dump
 from codeanalyzer.schema.l1_body import populate_l1_body
 from codeanalyzer.schema.py_schema import (
     PyApplication, PyCallable, PyCallArgument, PyCallsite, PyModule,
@@ -64,7 +64,7 @@ def test_call_sites_is_stripped_at_emit_but_kept_when_serialized():
     """
     app, fn = _app()
     populate_l1_body(app)
-    dumped = app.model_dump(mode="json")
+    dumped = model_dump(app, mode="json")
 
     # Serialized form keeps it — this is what the cache persists.
     assert "call_sites" in dumped["symbol_table"]["a.py"]["functions"]["f"]
@@ -81,6 +81,6 @@ def test_accessed_symbols_and_local_variables_are_untouched():
     """Only call_sites is redundant; these have no body{} representation to converge into."""
     app, fn = _app()
     populate_l1_body(app)
-    callable_json = strip_internal_only(app.model_dump(mode="json"))["symbol_table"]["a.py"]["functions"]["f"]
+    callable_json = strip_internal_only(model_dump(app, mode="json"))["symbol_table"]["a.py"]["functions"]["f"]
     assert "accessed_symbols" in callable_json
     assert "local_variables" in callable_json

test/test_entrypoint_pipeline.py

@@ -1,3 +1,4 @@
+from codeanalyzer.schema import model_dump
 from pathlib import Path
 
 import pytest
@@ -186,9 +187,9 @@ def test_running_the_pass_twice_does_not_duplicate_entrypoints(tmp_path: Path):
     )
 
     detect_entrypoints(app, tmp_path)
-    first = [e.model_dump() for e in fn.entrypoints]
+    first = [model_dump(e) for e in fn.entrypoints]
     assert len(first) == 1
 
     detect_entrypoints(app, tmp_path)
-    second = [e.model_dump() for e in fn.entrypoints]
+    second = [model_dump(e) for e in fn.entrypoints]
     assert second == first

test/test_v2_keystone.py

@@ -1,3 +1,4 @@
+from codeanalyzer.schema import model_validate_json
 """Stage-5 keystone conformance gates (issue #98).
 
 Asserts key-for-key parity with the canonical schema-v2 keystone
@@ -184,5 +185,5 @@ def test_emitted_json_round_trips_through_the_analysis_model(tmp_path: Path):
         [sys.executable, "-m", "codeanalyzer", "-i", str(proj), "-a", "1", "--no-venv"],
         capture_output=True, text=True, check=True,
     ).stdout
-    a = Analysis.model_validate_json(out)
+    a = model_validate_json(Analysis, out)
     assert a.schema_version == "2.0.0"