Add new option to toml file to exclude package is old enough - #1244
Conversation
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Add min-release-age setting for supply-chain hardening Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Updated GitHub Actions workflow to use 'uv' for installation and execution. Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
|
Can you add the stuff from the poetry.toml to the pyproject.toml as well? Would be nice to have everything in there instead of heaving tons of additional files |
Nop, Poetry intentionally keeps local environment-specific configs out of pyproject.toml, this is why i initiate the switch to uv |
oof okay, i guess then yet another file |
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
|
should be good to review @NeffIsBack :) |
Removed specific dependencies from the dev group in pyproject.toml and added a comment about the uv and poetry native dev group. Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
Signed-off-by: mpgn <5891788+mpgn@users.noreply.github.com>
|
For the future we have to keep in mind to update both the poetry as well as the uv lock file. Maybe we should even remove both to be on consistent with both tools and additionally always have the latest packages. Then we are also on the same packages as people with pipx are. |


Description
uv will only consider package artifacts whose upload timestamp is older than the configured cutoff. This helps avoid installing newly published package releases until they have aged for at least one day.
I also started the switch to UV without breaking any logic with poetry, both works fine but uv is just better and faster and fully compatible with pyproject.toml
Type of change
Insert an "x" inside the brackets for relevant items (do not delete options)
Setup guide for the review
Please provide guidance on what setup is needed to test the introduced changes, such as your locally running machine Python version & OS, as well as the target(s) you tested against, including software versions.
In particular:
Screenshots (if appropriate):
Screenshots are always nice to have and can give a visual representation of the change.
If appropriate, include before and after screenshot(s) to show which results are to be expected.
Checklist:
Insert an "x" inside the brackets for completed and relevant items (do not delete options)
poetry run ruff check ., use--fixto automatically fix what it can)tests/e2e_commands.txtfile if necessary (new modules or features are required to be added to the e2e tests)