Skip to content

build: pin uv resolver with exclude-newer #27

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
hasansezertasan wants to merge 5 commits into
base: main
Choose a base branch
from
Open

build: pin uv resolver with exclude-newer #27

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
fc670ae
build: pin uv resolver with exclude-newer
hasansezertasan Jul 22, 2026
28a9f2b
build: allow-list first-party packages from exclude-newer cooldown
hasansezertasan Jul 22, 2026
49acf7e
build: require uv >=0.9.25 for exclude-newer-package opt-out
hasansezertasan Jul 22, 2026
b1da410
docs: dedupe uv exclude-newer version-gate comments
hasansezertasan Jul 22, 2026
9798f71
Merge remote-tracking branch 'origin/main' into build/uv-exclude-newer
hasansezertasan Jul 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,6 +93,22 @@ test = [
"pytest-cov>=4.1.0",
]

[tool.uv]
# The `= false` exclude-newer-package opt-out below landed in uv 0.9.25;
# require it so older installs fail fast instead of silently ignoring it.
# https://docs.astral.sh/uv/reference/settings/#required-version
required-version = ">=0.9.25"
# Ignore distributions published within the last week during resolution for
# reproducibility and supply-chain safety. Accepts a friendly duration
# (resolved relative to the current time on each run), an RFC 3339 timestamp,
# or an ISO 8601 duration. See:
# https://docs.astral.sh/uv/reference/settings/#exclude-newer
exclude-newer = "1 week"
# Opt first-party (litestar-org) packages out of the cooldown so their newest
# releases are always resolvable (version gated by required-version above).
# https://docs.astral.sh/uv/reference/settings/#exclude-newer-package
exclude-newer-package = { litestar = false, advanced-alchemy = false, polyfactory = false }

@hasansezertasan hasansezertasan Jul 23, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this allow-list enough for now?


[tool.black]
line-length = 120
include = '\.pyi?$'
Expand Down
Loading
Loading