From d69ea067ceeecb640ac893149688cdcaa9f07eb5 Mon Sep 17 00:00:00 2001
From: Marc LeBlanc <7050295+marcleblanc2@users.noreply.github.com>
Date: Thu, 12 Nov 2026 16:53:55 -0600
Subject: [PATCH] Wait 3 days before taking new dependency releases

---
 .github/workflows/release.yml  | 2 +-
 .github/workflows/validate.yml | 4 ++--
 AGENTS.md                      | 3 +++
 renovate.json                  | 1 +
 4 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6e68a23..16814af 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -88,7 +88,7 @@ jobs:
             uv-${{ runner.os }}-py${{ env.PYTHON_VERSION }}-
 
       - name: Install build tools
-        run: python -m pip install "uv==${UV_VERSION}"
+        run: python -m pip install --uploaded-prior-to P3D "uv==${UV_VERSION}"
 
       - name: Validate release inputs
         id: release
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index b8339c8..63a5bfd 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -188,7 +188,7 @@ jobs:
             uv-${{ runner.os }}-py${{ env.PYTHON_VERSION }}-
 
       - name: Install uv
-        run: python -m pip install "uv==${UV_VERSION}"
+        run: python -m pip install --uploaded-prior-to P3D "uv==${UV_VERSION}"
 
       - name: Validate lockfile
         run: uv lock --check
@@ -252,7 +252,7 @@ jobs:
             uv-${{ runner.os }}-py${{ env.PYTHON_VERSION }}-
 
       - name: Install uv
-        run: python -m pip install "uv==${UV_VERSION}"
+        run: python -m pip install --uploaded-prior-to P3D "uv==${UV_VERSION}"
 
       - name: Build distributions
         run: |
diff --git a/AGENTS.md b/AGENTS.md
index 2db983b..e3c9ade 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -33,6 +33,9 @@ uv run python -m unittest discover -s tests
 - Use `uv` for dependency management, virtualenv creation, and command running
 - Use pyright in strict mode; fix linting / typing issues instead of suppressing them
 - Use ruff for formatting, import sorting, and linting
+- Dependencies wait 3 days after release: `minimumReleaseAge` in
+  `renovate.json`, and `--uploaded-prior-to P3D` where workflows `pip install`
+  uv. pip reports a younger pin as `No matching distribution found`.
 
 ## Runtime standards
 
diff --git a/renovate.json b/renovate.json
index 1dab464..24ffdcf 100644
--- a/renovate.json
+++ b/renovate.json
@@ -10,6 +10,7 @@
       "before 4am"
     ]
   },
+  "minimumReleaseAge": "3 days",
   "osvVulnerabilityAlerts": true,
   "packageRules": [
     {