Skip to content

Commit 31509e0

Browse files
authored
chore: Use only packages older than 24 hours (#1822)
- Update Renovate and project settings to use only package versions older than 24 hours - Motivation is to add minimal defence to supply chain attacks. Similar to apify/apify-client-python#684
1 parent 2c691d0 commit 31509e0

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

pyproject.toml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -272,6 +272,10 @@ exclude_lines = ["pragma: no cover", "if TYPE_CHECKING:", "assert_never()"]
272272
[tool.ipdb]
273273
context = 7
274274

275+
[tool.uv]
276+
# Minimal defense against supply-chain attacks.
277+
exclude-newer = "24 hours"
278+
275279
# Run tasks with: uv run poe <task>
276280
[tool.poe.tasks]
277281
clean = "rm -rf .coverage .pytest_cache .ruff_cache .ty_cache .uv-cache build coverage-unit.xml dist htmlcov website/.docusaurus website/.yarn website/module_shortcuts.json website/node_modules "

renovate.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@
2121
"automergeType": "branch"
2222
}
2323
],
24+
"minimumReleaseAge": "1 day",
2425
"schedule": ["before 7am every weekday"],
2526
"ignoreDeps": ["crawlee", "docusaurus-plugin-typedoc-api"]
2627
}

0 commit comments

Comments
 (0)