Upgrade minimum uv version to 0.9.17 and add supply-chain defense

.github/workflows/uv-tests.yml

@@ -35,17 +35,14 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        uv-version: ["0.7.3", "latest"]
+        uv-version: ["0.9.17", "latest"]
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
       - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           version: ${{ matrix.uv-version }}
-      - name: Use correct Python version in older uv version
-        if: ${{ matrix.uv-version == '0.7.3' }}
-        run: sed -i 's/14/13/g' ctt.toml copier.yml .python-version
       - name: Configure Git
         run: |
           git config --global user.email "template-tester@example.com"

README.md

@@ -10,7 +10,7 @@ A modern Python project template using recommended development tools and best pr
 
 ## TL;DR
 
-Assuming that you have `uv` installed (version `>=0.7.3`)
+Assuming that you have `uv` installed (version `>=0.9.17`)
 
 1. `uvx copier copy gh:tsvikas/python-template path/to/project/directory/`
 

project_name/pyproject.toml.jinja

@@ -114,8 +114,11 @@ typing = [
 
 
 [tool.uv]
-required-version = ">=0.7.3"
+required-version = ">=0.9.17"
 default-groups = ["dev", "test", "typing"]
+# Minimum age guard: only consider package versions released at least 24h ago,
+# as a lightweight supply-chain defense against just-published malicious releases.
+exclude-newer = "24 hours"
 
 
 [tool.hatch]

pyproject.toml

@@ -8,3 +8,9 @@ dev = [
   "copier-template-tester>=2.3.0",
   "pre-commit>=4.4.0",
 ]
+
+[tool.uv]
+required-version = ">=0.9.17"
+# Minimum age guard: only consider package versions released at least 24h ago,
+# as a lightweight supply-chain defense against just-published malicious releases.
+exclude-newer = "24 hours"