Skip to content

Commit f7dfb49

Browse files
authored
chore: Use only packages older than 24 hours (#684)
- Update Renovate and project settings to use only package versions older than 24 hours - Motivation is to add minimal defence to supply chain attacks.
1 parent 1e74f1f commit f7dfb49

File tree

3 files changed

+9
-0
lines changed

3 files changed

+9
-0
lines changed

pyproject.toml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -228,6 +228,10 @@ allow_population_by_field_name = true
228228
aliases = "datamodel_codegen_aliases.json"
229229
formatters = ["ruff-check", "ruff-format"]
230230

231+
[tool.uv]
232+
# Minimal defense against supply-chain atatcks.
233+
exclude-newer = "24 hours"
234+
231235
# Run tasks with: uv run poe <task>
232236
[tool.poe.tasks]
233237
clean = "rm -rf .coverage .pytest_cache .ruff_cache .ty_cache build dist htmlcov"

renovate.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@
2121
"automergeType": "branch"
2222
}
2323
],
24+
"minimumReleaseAge": "1 day",
2425
"schedule": ["before 7am every weekday"],
2526
"ignoreDeps": ["apify_client", "docusaurus-plugin-typedoc-api"]
2627
}

uv.lock

Lines changed: 4 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)