diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6778b0493a..0114152af6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,3 +4,13 @@ updates:
     directory: '/'
     schedule:
       interval: 'daily'
+    cooldown:
+      default-days: 1
+
+  - package-ecosystem: 'pip'
+    directories:
+      - 'integrations/*'
+    schedule:
+      interval: 'daily'
+    cooldown:
+      default-days: 1
diff --git a/.github/workflows/CI_check_api_ref.yml b/.github/workflows/CI_check_api_ref.yml
index cb776a3263..73597f661f 100644
--- a/.github/workflows/CI_check_api_ref.yml
+++ b/.github/workflows/CI_check_api_ref.yml
@@ -81,7 +81,9 @@ jobs:
 
       - name: Install Hatch
         if: steps.changed.outputs.integrations != '[]'
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Generate API references
         if: steps.changed.outputs.integrations != '[]'
diff --git a/.github/workflows/CI_coverage_comment.yml b/.github/workflows/CI_coverage_comment.yml
index 2e8410e7bf..c9c1a67a3c 100644
--- a/.github/workflows/CI_coverage_comment.yml
+++ b/.github/workflows/CI_coverage_comment.yml
@@ -15,6 +15,7 @@ on:
       - "Test / chroma"
       - "Test / cohere"
       - "Test / cometapi"
+      - "Test / db2"
       - "Test / deepeval"
       - "Test / dspy"
       - "Test / elasticsearch"
diff --git a/.github/workflows/CI_docusaurus_sync.yml b/.github/workflows/CI_docusaurus_sync.yml
index 45b5a68233..a04d956ee3 100644
--- a/.github/workflows/CI_docusaurus_sync.yml
+++ b/.github/workflows/CI_docusaurus_sync.yml
@@ -32,7 +32,9 @@ jobs:
           python-version: "3.10"
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Get project folder
         id: pathfinder
diff --git a/.github/workflows/CI_license_compliance.yml b/.github/workflows/CI_license_compliance.yml
index 6eaeca0db3..7f193b78ec 100644
--- a/.github/workflows/CI_license_compliance.yml
+++ b/.github/workflows/CI_license_compliance.yml
@@ -53,7 +53,8 @@ jobs:
 
       - name: Get direct dependencies from pyproject.toml files
         run: |
-          pip install toml
+          python -m pip install --upgrade pip
+          pip install toml --uploaded-prior-to=P1D
 
           # Determine the list of pyproject.toml files to process
           if [ "${{ github.event_name }}" = "schedule" ] || [ "${{ steps.changed-files.outputs.workflow_any_changed }}" = "true" ]; then
diff --git a/.github/workflows/CI_pypi_release.yml b/.github/workflows/CI_pypi_release.yml
index 7eef9732bd..7139c8b903 100644
--- a/.github/workflows/CI_pypi_release.yml
+++ b/.github/workflows/CI_pypi_release.yml
@@ -38,7 +38,9 @@ jobs:
           python-version: "3.12"
 
       - name: Install dependencies
-        run: pip install hatch requests
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch requests --uploaded-prior-to=P1D
 
       - name: Validate version number
         run: python .github/utils/validate_version.py --tag ${{ github.ref_name }}
diff --git a/.github/workflows/aimlapi.yml b/.github/workflows/aimlapi.yml
index b37a15a22e..85c3e7bba0 100644
--- a/.github/workflows/aimlapi.yml
+++ b/.github/workflows/aimlapi.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/amazon_bedrock.yml b/.github/workflows/amazon_bedrock.yml
index 12e817b121..8d83418079 100644
--- a/.github/workflows/amazon_bedrock.yml
+++ b/.github/workflows/amazon_bedrock.yml
@@ -85,7 +85,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/amazon_sagemaker.yml b/.github/workflows/amazon_sagemaker.yml
index 10521790f0..0f0dd273ce 100644
--- a/.github/workflows/amazon_sagemaker.yml
+++ b/.github/workflows/amazon_sagemaker.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/anthropic.yml b/.github/workflows/anthropic.yml
index ca94fba796..338b598ce3 100644
--- a/.github/workflows/anthropic.yml
+++ b/.github/workflows/anthropic.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/arcadedb.yml b/.github/workflows/arcadedb.yml
index e020bb9f14..d91c12c5d4 100644
--- a/.github/workflows/arcadedb.yml
+++ b/.github/workflows/arcadedb.yml
@@ -80,7 +80,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/astra.yml b/.github/workflows/astra.yml
index 5daecedc80..166ea2d2f2 100644
--- a/.github/workflows/astra.yml
+++ b/.github/workflows/astra.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/azure_ai_search.yml b/.github/workflows/azure_ai_search.yml
index 88e0644699..5bd03bac50 100644
--- a/.github/workflows/azure_ai_search.yml
+++ b/.github/workflows/azure_ai_search.yml
@@ -72,7 +72,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/azure_doc_intelligence.yml b/.github/workflows/azure_doc_intelligence.yml
index 600694ff51..cc7248ac3f 100644
--- a/.github/workflows/azure_doc_intelligence.yml
+++ b/.github/workflows/azure_doc_intelligence.yml
@@ -72,7 +72,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/chonkie.yml b/.github/workflows/chonkie.yml
index e2fa54dc5b..15e842585b 100644
--- a/.github/workflows/chonkie.yml
+++ b/.github/workflows/chonkie.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install --upgrade hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install --upgrade hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/chroma.yml b/.github/workflows/chroma.yml
index b2459e293d..15930f1c79 100644
--- a/.github/workflows/chroma.yml
+++ b/.github/workflows/chroma.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/cohere.yml b/.github/workflows/cohere.yml
index d1b4ce01bb..e7119ad03e 100644
--- a/.github/workflows/cohere.yml
+++ b/.github/workflows/cohere.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/cometapi.yml b/.github/workflows/cometapi.yml
index db6e3bb02a..b97ff5fd3c 100644
--- a/.github/workflows/cometapi.yml
+++ b/.github/workflows/cometapi.yml
@@ -76,7 +76,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/deepeval.yml b/.github/workflows/deepeval.yml
index d9807971a6..0d82826b84 100644
--- a/.github/workflows/deepeval.yml
+++ b/.github/workflows/deepeval.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/docling.yml b/.github/workflows/docling.yml
index dfd0c9754d..4ea423af6f 100644
--- a/.github/workflows/docling.yml
+++ b/.github/workflows/docling.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install --upgrade hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install --upgrade hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/dspy.yml b/.github/workflows/dspy.yml
index 816140ca7c..f5d5f2fda4 100644
--- a/.github/workflows/dspy.yml
+++ b/.github/workflows/dspy.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: github.event_name != 'push' && matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/elasticsearch.yml b/.github/workflows/elasticsearch.yml
index 6db08e4910..34f55dd1ed 100644
--- a/.github/workflows/elasticsearch.yml
+++ b/.github/workflows/elasticsearch.yml
@@ -69,7 +69,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/faiss.yml b/.github/workflows/faiss.yml
index 21455bd731..4af3702d25 100644
--- a/.github/workflows/faiss.yml
+++ b/.github/workflows/faiss.yml
@@ -70,7 +70,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/fastembed.yml b/.github/workflows/fastembed.yml
index 2e4b827d42..90225f8f5a 100644
--- a/.github/workflows/fastembed.yml
+++ b/.github/workflows/fastembed.yml
@@ -63,7 +63,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/firecrawl.yml b/.github/workflows/firecrawl.yml
index b62c456fc4..e98909c695 100644
--- a/.github/workflows/firecrawl.yml
+++ b/.github/workflows/firecrawl.yml
@@ -70,7 +70,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/github.yml b/.github/workflows/github.yml
index 6302aefcc3..7d5b906e61 100644
--- a/.github/workflows/github.yml
+++ b/.github/workflows/github.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/google_genai.yml b/.github/workflows/google_genai.yml
index 1ace892874..e5c4c263d4 100644
--- a/.github/workflows/google_genai.yml
+++ b/.github/workflows/google_genai.yml
@@ -76,7 +76,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/hanlp.yml b/.github/workflows/hanlp.yml
index 0f2c5f1ed5..6cd09dddb6 100644
--- a/.github/workflows/hanlp.yml
+++ b/.github/workflows/hanlp.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/jina.yml b/.github/workflows/jina.yml
index 260f850bd2..0f94acf2a3 100644
--- a/.github/workflows/jina.yml
+++ b/.github/workflows/jina.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/kreuzberg.yml b/.github/workflows/kreuzberg.yml
index 0755cfae41..f2a1a6ab4c 100644
--- a/.github/workflows/kreuzberg.yml
+++ b/.github/workflows/kreuzberg.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: github.event_name != 'push' && matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/langfuse.yml b/.github/workflows/langfuse.yml
index 86bf32c3b4..1f62d84a4d 100644
--- a/.github/workflows/langfuse.yml
+++ b/.github/workflows/langfuse.yml
@@ -79,7 +79,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/lara.yml b/.github/workflows/lara.yml
index 58ac54ead6..34ddee7f41 100644
--- a/.github/workflows/lara.yml
+++ b/.github/workflows/lara.yml
@@ -72,7 +72,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/libreoffice.yml b/.github/workflows/libreoffice.yml
index c9bb441daa..a55daddea3 100644
--- a/.github/workflows/libreoffice.yml
+++ b/.github/workflows/libreoffice.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install --upgrade hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install --upgrade hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/llama_cpp.yml b/.github/workflows/llama_cpp.yml
index 62c7330b77..f803870f6b 100644
--- a/.github/workflows/llama_cpp.yml
+++ b/.github/workflows/llama_cpp.yml
@@ -73,7 +73,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/llama_stack.yml b/.github/workflows/llama_stack.yml
index 716d989b50..1060b6c9c1 100644
--- a/.github/workflows/llama_stack.yml
+++ b/.github/workflows/llama_stack.yml
@@ -112,7 +112,8 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          pip install -q uv
+          python -m pip install --upgrade pip
+          pip install -q uv --uploaded-prior-to=P1D
 
           # Install the starter distro's deps into the uv environment
           uv run --with llama-stack bash -lc 'llama stack list-deps starter | xargs -L1 uv pip install'
@@ -137,7 +138,9 @@ jobs:
           curl -fsS http://localhost:8321/v1/models || { echo "Health check failed. Logs:"; cat server.log; exit 1; }
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.12' && runner.os == 'Linux'
diff --git a/.github/workflows/markitdown.yml b/.github/workflows/markitdown.yml
index 0c479f6a65..69d5349af1 100644
--- a/.github/workflows/markitdown.yml
+++ b/.github/workflows/markitdown.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install --upgrade hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install --upgrade hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/mcp.yml b/.github/workflows/mcp.yml
index db936b4f1e..b8bcf66e84 100644
--- a/.github/workflows/mcp.yml
+++ b/.github/workflows/mcp.yml
@@ -76,7 +76,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Set up Docker
         if: runner.os == 'Linux'
diff --git a/.github/workflows/meta_llama.yml b/.github/workflows/meta_llama.yml
index 31e6e7c872..8ea31c636f 100644
--- a/.github/workflows/meta_llama.yml
+++ b/.github/workflows/meta_llama.yml
@@ -76,7 +76,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/mistral.yml b/.github/workflows/mistral.yml
index 4f355ac592..8a5bb71619 100644
--- a/.github/workflows/mistral.yml
+++ b/.github/workflows/mistral.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/mongodb_atlas.yml b/.github/workflows/mongodb_atlas.yml
index f2cd6a3323..672d7edb84 100644
--- a/.github/workflows/mongodb_atlas.yml
+++ b/.github/workflows/mongodb_atlas.yml
@@ -71,7 +71,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/nvidia.yml b/.github/workflows/nvidia.yml
index 63284cccc7..94d11333a2 100644
--- a/.github/workflows/nvidia.yml
+++ b/.github/workflows/nvidia.yml
@@ -76,7 +76,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/ollama.yml b/.github/workflows/ollama.yml
index 040eaebf44..78587ee52f 100644
--- a/.github/workflows/ollama.yml
+++ b/.github/workflows/ollama.yml
@@ -113,7 +113,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/openrouter.yml b/.github/workflows/openrouter.yml
index 53576f74d1..0f512a7412 100644
--- a/.github/workflows/openrouter.yml
+++ b/.github/workflows/openrouter.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/opensearch.yml b/.github/workflows/opensearch.yml
index 01fc1fe584..7eefc04dee 100644
--- a/.github/workflows/opensearch.yml
+++ b/.github/workflows/opensearch.yml
@@ -69,7 +69,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/optimum.yml b/.github/workflows/optimum.yml
index 8bf1f82a23..f3f622f4ad 100644
--- a/.github/workflows/optimum.yml
+++ b/.github/workflows/optimum.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/oracle.yml b/.github/workflows/oracle.yml
index d417c6064d..a6f8c953cf 100644
--- a/.github/workflows/oracle.yml
+++ b/.github/workflows/oracle.yml
@@ -69,7 +69,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/paddleocr.yml b/.github/workflows/paddleocr.yml
index 6f950fac69..53ac45bc33 100644
--- a/.github/workflows/paddleocr.yml
+++ b/.github/workflows/paddleocr.yml
@@ -76,7 +76,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/pgvector.yml b/.github/workflows/pgvector.yml
index 1915ddb859..7d4eea2807 100644
--- a/.github/workflows/pgvector.yml
+++ b/.github/workflows/pgvector.yml
@@ -78,7 +78,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/pinecone.yml b/.github/workflows/pinecone.yml
index dd506b683e..dcd161edaf 100644
--- a/.github/workflows/pinecone.yml
+++ b/.github/workflows/pinecone.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/presidio.yml b/.github/workflows/presidio.yml
index 9c6e581365..ecf6c41023 100644
--- a/.github/workflows/presidio.yml
+++ b/.github/workflows/presidio.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/pyversity.yml b/.github/workflows/pyversity.yml
index 14a5e6dd45..b552b0f874 100644
--- a/.github/workflows/pyversity.yml
+++ b/.github/workflows/pyversity.yml
@@ -63,7 +63,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/qdrant.yml b/.github/workflows/qdrant.yml
index 0d54768161..0285911612 100644
--- a/.github/workflows/qdrant.yml
+++ b/.github/workflows/qdrant.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/ragas.yml b/.github/workflows/ragas.yml
index f7cd8da01f..140fced7c0 100644
--- a/.github/workflows/ragas.yml
+++ b/.github/workflows/ragas.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/snowflake.yml b/.github/workflows/snowflake.yml
index 862e3d3f45..2c03cfe115 100644
--- a/.github/workflows/snowflake.yml
+++ b/.github/workflows/snowflake.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/sqlalchemy.yml b/.github/workflows/sqlalchemy.yml
index 6cebdb9595..fb435f7661 100644
--- a/.github/workflows/sqlalchemy.yml
+++ b/.github/workflows/sqlalchemy.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/stackit.yml b/.github/workflows/stackit.yml
index 8b7cc4ebad..06f7b5f465 100644
--- a/.github/workflows/stackit.yml
+++ b/.github/workflows/stackit.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/supabase.yml b/.github/workflows/supabase.yml
index 53a8c0a94d..350a570fc7 100644
--- a/.github/workflows/supabase.yml
+++ b/.github/workflows/supabase.yml
@@ -91,7 +91,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/tavily.yml b/.github/workflows/tavily.yml
index fcead8bca6..731f4017ea 100644
--- a/.github/workflows/tavily.yml
+++ b/.github/workflows/tavily.yml
@@ -74,7 +74,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install --upgrade hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install --upgrade hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/togetherai.yml b/.github/workflows/togetherai.yml
index 95afbc7dca..624dff1c18 100644
--- a/.github/workflows/togetherai.yml
+++ b/.github/workflows/togetherai.yml
@@ -75,7 +75,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
         run: hatch run fmt-check && hatch run test:types
diff --git a/.github/workflows/unstructured.yml b/.github/workflows/unstructured.yml
index 3455d547cb..534ffe9059 100644
--- a/.github/workflows/unstructured.yml
+++ b/.github/workflows/unstructured.yml
@@ -86,7 +86,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/valkey.yml b/.github/workflows/valkey.yml
index 321b400985..db2d3f3068 100644
--- a/.github/workflows/valkey.yml
+++ b/.github/workflows/valkey.yml
@@ -80,7 +80,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/vllm.yml b/.github/workflows/vllm.yml
index c962afa256..5b395ea3db 100644
--- a/.github/workflows/vllm.yml
+++ b/.github/workflows/vllm.yml
@@ -76,7 +76,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Install vLLM (CPU)
         run: |
diff --git a/.github/workflows/watsonx.yml b/.github/workflows/watsonx.yml
index a1b90b2916..09a62aa63e 100644
--- a/.github/workflows/watsonx.yml
+++ b/.github/workflows/watsonx.yml
@@ -76,7 +76,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/weave.yml b/.github/workflows/weave.yml
index 7e8448588b..d64583a53a 100644
--- a/.github/workflows/weave.yml
+++ b/.github/workflows/weave.yml
@@ -71,7 +71,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/.github/workflows/weaviate.yml b/.github/workflows/weaviate.yml
index e591c06042..7440f22e3a 100644
--- a/.github/workflows/weaviate.yml
+++ b/.github/workflows/weaviate.yml
@@ -69,7 +69,9 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - name: Install Hatch
-        run: pip install hatch
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Lint
         if: matrix.python-version == '3.10' && runner.os == 'Linux'
diff --git a/uv.toml b/uv.toml
new file mode 100644
index 0000000000..294d69c30d
--- /dev/null
+++ b/uv.toml
@@ -0,0 +1,4 @@
+# Exclude package versions published within the last 24 hours to protect against supply chain
+# attacks via compromised dependencies. uv resolves this relative to the current clock at
+# install/lock time, so no manual date updates are needed.
+exclude-newer = "24 hours"