Mirrors_Framework/awesome-python
1
0
Fork 0
mirror of https://github.com/vinta/awesome-python.git synced 2026-05-23 02:31:14 +08:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

chore: add uv supply-chain hardening and enforce locked installs

Browse Source 
- Set exclude-newer to 3 days and only-binary/:all: in pyproject.toml to
  limit dependency freshness window and block source builds
- Switch uv sync to --locked in Makefile, ci.yml, and deploy-website.yml
  to enforce the lockfile rather than re-resolving on each install
- Regenerate uv.lock with exclude-newer snapshot recorded

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Vinta Chen
2026-04-22 02:21:48 +08:00
parent 99d883c00d
commit 0bf9522e5d
5 changed files with 14 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
uv.lock
Generated
+4
View File
@@ -2,6 +2,10 @@ version = 1
revision = 3
requires-python = ">=3.13"
[options]
exclude-newer = "2026-04-18T18:21:23.412234Z"
exclude-newer-span = "P3D"
[[package]]
name = "anyio"
version = "4.12.1"