Add 4-day cooldown for uv dependency resolution (#64249)
Set `exclude-newer = "4 days"` in `[tool.uv]` to only consider package versions uploaded at least 4 days ago. This provides supply-chain security by giving the community time to identify and remediate compromised releases. Also downgrade pyodps requirement for Python >= 3.13 from >=0.12.6 to >=0.12.5.1 since 0.12.6 was published within the cooldown window.
J
Jarek Potiuk committed
abfda18a46177e66f92424df274c22d1cafd5b63
Parent: a5fc638
Committed by GitHub <noreply@github.com>
on 3/27/2026, 6:03:24 PM