From 84af0c655249f7f7b50700c8ac465a69121abb2e Mon Sep 17 00:00:00 2001 From: Shaun Eccles Date: Sun, 27 Sep 2026 19:51:13 +1000 Subject: [PATCH 1/2] build(uv): hold back releases newer than 14 days in uv.lock Renovate's lock file maintenance runs uv lock --upgrade without the 14-day minimumReleaseAge. exclude-newer applies the same wait in uv. Require uv 0.12.12+, which Renovate and setup-uv both read. Co-Authored-By: Claude Opus 5.5 (1M context) --- pyproject.toml | 7 +++++++ uv.lock | 4 ++++ 2 files changed, 11 insertions(+) diff --git a/pyproject.toml b/pyproject.toml index 7c37eba..e13becc 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -64,6 +64,13 @@ build = ["cp311-*", "cp312-*", "cp313-*", "cp314-*"] skip = ["*-win32", "*-manylinux_i686", "*-musllinux*"] [tool.uv] +# 0.12.12 is the first release that also keeps files uploaded after the +# exclude-newer cutoff out of uv.lock. Renovate and setup-uv both read this. +required-version = ">=0.12.12" +# Match Renovate's 14-day minimumReleaseAge (LedFx/renovate-config), including +# for lock file maintenance, which Renovate does not delay. For an urgent +# security fix newer than this, add exclude-newer-package = { name = false }. +exclude-newer = "14 days" cache-keys = [ { file = "pyproject.toml" }, { file = "setup.py" }, diff --git a/uv.lock b/uv.lock index 0808049..f9e2d36 100644 --- a/uv.lock +++ b/uv.lock @@ -2,6 +2,10 @@ version = 1 revision = 3 requires-python = ">=3.11" +[options] +exclude-newer = "0001-01-01T00:00:00Z" # This has no effect and is included for backwards compatibility when using relative exclude-newer values. +exclude-newer-span = "P14D" + [[package]] name = "colorama" version = "0.4.6" From f30c6d0b9544fce9d3be12daae1e244e7933d552 Mon Sep 17 00:00:00 2001 From: Shaun Eccles Date: Sun, 27 Sep 2026 19:59:15 +1000 Subject: [PATCH 2/2] build(uv): drop required-version cibuildwheel's manylinux images ship their own uv (0.12.9 today) and required-version applies to its uv pip install too, so Linux wheel builds failed. Renovate and setup-uv already use the latest uv. Co-Authored-By: Claude Opus 5.5 (1M context) --- pyproject.toml | 3 --- 1 file changed, 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index e13becc..ca3dc70 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -64,9 +64,6 @@ build = ["cp311-*", "cp312-*", "cp313-*", "cp314-*"] skip = ["*-win32", "*-manylinux_i686", "*-musllinux*"] [tool.uv] -# 0.12.12 is the first release that also keeps files uploaded after the -# exclude-newer cutoff out of uv.lock. Renovate and setup-uv both read this. -required-version = ">=0.12.12" # Match Renovate's 14-day minimumReleaseAge (LedFx/renovate-config), including # for lock file maintenance, which Renovate does not delay. For an urgent # security fix newer than this, add exclude-newer-package = { name = false }.