Skip to content

chore: add uv exclude-newer policy #3903

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
brian-hussey merged 7 commits into from
Mar 31, 2026
Merged

chore: add uv exclude-newer policy #3903

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
08ea0dd
chore: add uv exclude-newer policy
lucarlig Mar 28, 2026
2788aa1
chore: override uv cooldown for langchain fixes
lucarlig Mar 28, 2026
2e85981
chore: use absolute uv cutoff timestamp
lucarlig Mar 28, 2026
8101fa7
chore: document uv cutoff follow-up
lucarlig Mar 28, 2026
e5d01d6
chore: keep 10 day uv cooldown with safe package cutoffs
lucarlig Mar 28, 2026
dcc8c7d
fix: avoid detect-secrets churn for pyproject marker
lucarlig Mar 30, 2026
d6b16fe
fix: avoid detect-secrets churn for pyproject marker
lucarlig Mar 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/pytest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,9 +77,9 @@ jobs:
# 2 Install uv
# -----------------------------------------------------------
- name: ⚡ Install uv
uses: astral-sh/setup-uv@e58605a9b6da7c637471fab8847a5e5a6b8df081 # v5
uses: astral-sh/setup-uv@d0d8abe699bfb85fec6de9f7adb5ae17292296ff # v6
with:
version: "0.9.2"
version: "0.10.11"
python-version: ${{ matrix.python }}

# -----------------------------------------------------------
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/rust-plugins.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -96,9 +96,9 @@ jobs:
run: rustup default stable

- name: Install uv
uses: astral-sh/setup-uv@e58605a9b6da7c637471fab8847a5e5a6b8df081 # v5
uses: astral-sh/setup-uv@d0d8abe699bfb85fec6de9f7adb5ae17292296ff # v6
with:
version: "0.9.2"
version: "0.10.11"

- name: Install maturin as CLI tool
run: uv tool install maturin
Expand Down Expand Up @@ -199,9 +199,9 @@ jobs:
rustup component add llvm-tools-preview

- name: Install uv
uses: astral-sh/setup-uv@e58605a9b6da7c637471fab8847a5e5a6b8df081 # v5
uses: astral-sh/setup-uv@d0d8abe699bfb85fec6de9f7adb5ae17292296ff # v6
with:
version: "0.9.2"
version: "0.10.11"

- name: Install maturin as CLI tool
run: uv tool install maturin
Expand Down Expand Up @@ -274,9 +274,9 @@ jobs:
run: rustup default stable

- name: Install uv
uses: astral-sh/setup-uv@e58605a9b6da7c637471fab8847a5e5a6b8df081 # v5
uses: astral-sh/setup-uv@d0d8abe699bfb85fec6de9f7adb5ae17292296ff # v6
with:
version: "0.9.2"
version: "0.10.11"

- name: Install maturin as CLI tool
run: uv tool install maturin
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wrapper.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ jobs:
python-version: "3.12"

- name: Install uv
uses: astral-sh/setup-uv@e58605a9b6da7c637471fab8847a5e5a6b8df081 # v5
uses: astral-sh/setup-uv@d0d8abe699bfb85fec6de9f7adb5ae17292296ff # v6
with:
enable-cache: true

Expand Down
12 changes: 1 addition & 11 deletions .secrets.baseline
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"exclude": {
"files": "package-lock.json|Cargo.lock|^.secrets.baseline$|scripts/sign_image.sh|scripts/zap|sonar-project.properties|^/Users/brian/dev/github.ibm.com/contextforge-org/sps-pipeline-config/.secrets.baseline$|^./.secrets.baseline$",
"files": "package-lock.json|Cargo.lock|^.secrets.baseline$|scripts/sign_image.sh|scripts/zap|sonar-project.properties",
"lines": null
},
"generated_at": "2026-03-31T10:20:49Z",
Expand Down Expand Up @@ -7151,16 +7151,6 @@
"verified_result": null
}
],
"pyproject.toml": [
{
"hashed_secret": "965242380eeefd51c596c8c7b6f9f6ebd77faa86",
"is_secret": false,
"is_verified": false,
"line_number": 652,
"type": "Secret Keyword",
"verified_result": null
}
],
"run-granian.sh": [
{
"hashed_secret": "64f5490a2808803712ef99d9dfb8bc3ea5a15077",
Expand Down
6 changes: 5 additions & 1 deletion pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,10 @@
requires = ["setuptools>=78.1.1", "wheel>=0.46.2"]
build-backend = "setuptools.build_meta"

[tool.uv]
exclude-newer = "10 days"
exclude-newer-package = { requests = "2026-03-25T15:10:42Z", langchain-openai = "2026-03-23T18:59:20Z", langchain-core = "2026-03-24T18:48:45Z" }

# ----------------------------------------------------------------
# 📦 Core project metadata (PEP 621)
# ----------------------------------------------------------------
Expand Down Expand Up @@ -649,7 +653,7 @@ markers = [
"mcp_client_features: marks roots/sampling/elicitation checks",
"mcp_utilities: marks ping/cancel/progress/pagination checks",
"mcp_tasks: marks tasks capability checks",
"mcp_auth: marks authorization discovery checks",
"mcp_auth: marks authorization discovery checks", # pragma: allowlist secret
"mcp_security: marks security compliance checks",
"regression: marks regression tests for previously-fixed bugs",
"proxy: marks tests that run through a simulated proxy prefix",
Expand Down
Loading
Loading