Skip to content

Commit b40ad69

Browse files
authored
chore: Use only packages older than 24 hours (#849)
- Update Renovate and project settings to use only package versions older than 24 hours - Motivation is to add minimal defence to supply chain attacks. Similar to apify/apify-client-python#684
1 parent 7c105dc commit b40ad69

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

pyproject.toml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -221,6 +221,10 @@ exclude_lines = ["pragma: no cover", "if TYPE_CHECKING:", "assert_never()"]
221221
[tool.ipdb]
222222
context = 7
223223

224+
[tool.uv]
225+
# Minimal defense against supply-chain attacks.
226+
exclude-newer = "24 hours"
227+
224228
# Run tasks with: uv run poe <task>
225229
[tool.poe.tasks]
226230
clean = "rm -rf .coverage .pytest_cache .ruff_cache .ty_cache build dist htmlcov"

renovate.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@
2121
"automergeType": "branch"
2222
}
2323
],
24+
"minimumReleaseAge": "1 day",
2425
"schedule": ["before 7am every weekday"],
2526
"ignoreDeps": ["apify", "docusaurus-plugin-typedoc-api"]
2627
}

0 commit comments

Comments
 (0)