Skip to content

build: use dependency cooldown logic#330

Merged
Andris28 merged 5 commits into
mainfrom
fa/add-dependency-cooldown
Jun 26, 2026
Merged

build: use dependency cooldown logic#330
Andris28 merged 5 commits into
mainfrom
fa/add-dependency-cooldown

Conversation

@Andris28

Copy link
Copy Markdown
Contributor

In this commit we add dependency cooldown logic
that enables us to update more frequently and worry
less about compromised packages.

Signed-off-by: András Felleg <afelleg@gmail.com>
@CLAassistant

CLAassistant commented Jun 18, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@Andris28 Andris28 requested review from diatrcz and pyrooka June 18, 2026 13:18
Signed-off-by: András Felleg <afelleg@gmail.com>

@diatrcz diatrcz left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving this, but please refer to my change request in the Python SDK Core repo.

Signed-off-by: András Felleg <afelleg@gmail.com>

@pyrooka pyrooka left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One minor comment, otherwise it looks good!

Comment thread pyproject.toml

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I know we don't yet support or use uv but would you mind adding a config for that too? Just to think ahead.

[tool.uv]
exclude-newer = "3 days"

Andris28 and others added 2 commits June 26, 2026 10:05
@Andris28 Andris28 merged commit 26da700 into main Jun 26, 2026
18 checks passed
@Andris28 Andris28 deleted the fa/add-dependency-cooldown branch June 26, 2026 08:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants