Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions docs/proposals/release-cooldown.md
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ References:
Whether `==` pins in top-level requirements or constraints files
should automatically bypass cooldown is deferred. The per-package
`resolver_dist.min_release_age: 0` override already provides an
explicit, reviewable escape hatch for packages that need to use
explicit, auditable escape hatch for packages that need to use
recently-published versions. Adding automatic `==` exemptions
would introduce a special case that weakens the security model
and requires users to understand the distinction. This can be
Expand Down Expand Up @@ -108,7 +108,7 @@ per-package override first, falling back to the global default.
### Enforcement

During candidate validation, `BaseProvider` rejects candidates
whose age is less than the effective cooldown. The behaviour
whose age is less than the effective cooldown. The behavior
depends on whether the provider can supply timestamps:

- **Supports timestamps** (e.g. PyPI with PEP 691, GitLab):
Expand Down Expand Up @@ -203,7 +203,7 @@ cooldown check.

These are also exempt by design:

- Only allowed for top-level requirements, not transitive deps
- Only allowed for top-level requirements, not transitive dependencies
- The user explicitly specifies the URL and ref -- this is a
deliberate pin, not automatic version selection
- Git timestamps (author date, committer date) are set by the
Expand Down
14 changes: 14 additions & 0 deletions docs/spelling_wordlist.txt
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@ codebase
config
containerfile
cpu
cooldown
csv
customizations
cython
Expand All @@ -21,20 +22,26 @@ downloader
env
environ
filesystem
formatters
fromager
frontend
frontends
graphviz
gz
hostname
installability
iterable
iteratively
json
keyring
lexicographically
libcurl
linter
linters
localhost
matcher
mdformat
mergify
mypy
namespace
numpy
Expand All @@ -46,10 +53,13 @@ prebuilt
purelib
py
pydantic
PyPI
pypi
pyproject
recurses
reproducibility
repo
rollout
scm
sdist
sdists
Expand All @@ -58,11 +68,15 @@ statelessly
stderr
stdin
stdout
subcommand
subcommands
subgraph
subgraphs
subdirectory
submodule
submodules
subprocesses
tagname
templating
toml
toplevel
Expand Down
Loading