chore: add exclude-newer = 7 days to all pyproject.toml files

Prevents uv from resolving packages released less than 7 days ago,
mitigating supply chain attacks on transient dependencies.

lib/crewai-files/pyproject.toml

@@ -17,6 +17,9 @@ dependencies = [
     "av~=13.0.0",
 ]
 
+[tool.uv]
+exclude-newer = "7 days"
+
 [build-system]
 requires = ["hatchling"]
 build-backend = "hatchling.build"

lib/crewai-tools/pyproject.toml

@@ -142,6 +142,9 @@ contextual = [
 ]
 
 
+[tool.uv]
+exclude-newer = "7 days"
+
 [build-system]
 requires = ["hatchling"]
 build-backend = "hatchling.build"

lib/crewai/pyproject.toml

@@ -115,6 +115,9 @@ qdrant-edge = [
 crewai = "crewai.cli.cli:crewai"
 
 
+[tool.uv]
+exclude-newer = "7 days"
+
 # PyTorch index configuration, since torch 2.5.0 is not compatible with python 3.13
 [[tool.uv.index]]
 name = "pytorch-nightly"

lib/crewai/src/crewai/cli/templates/crew/pyproject.toml

@@ -20,5 +20,8 @@ run_with_trigger = "{{folder_name}}.main:run_with_trigger"
 requires = ["hatchling"]
 build-backend = "hatchling.build"
 
+[tool.uv]
+exclude-newer = "7 days"
+
 [tool.crewai]
 type = "crew"

lib/crewai/src/crewai/cli/templates/flow/pyproject.toml

@@ -18,5 +18,8 @@ run_with_trigger = "{{folder_name}}.main:run_with_trigger"
 requires = ["hatchling"]
 build-backend = "hatchling.build"
 
+[tool.uv]
+exclude-newer = "7 days"
+
 [tool.crewai]
 type = "flow"

lib/crewai/src/crewai/cli/templates/tool/pyproject.toml

@@ -8,5 +8,8 @@ dependencies = [
     "crewai[tools]==1.13.0"
 ]
 
+[tool.uv]
+exclude-newer = "7 days"
+
 [tool.crewai]
 type = "tool"

lib/devtools/pyproject.toml

@@ -25,6 +25,9 @@ release = "crewai_devtools.cli:release"
 docs-check = "crewai_devtools.docs_check:docs_check"
 devtools = "crewai_devtools.cli:main"
 
+[tool.uv]
+exclude-newer = "7 days"
+
 [build-system]
 requires = ["hatchling"]
 build-backend = "hatchling.build"

pyproject.toml

@@ -160,6 +160,7 @@ info = "Commits must follow Conventional Commits 1.0.0."
 
 
 [tool.uv]
+exclude-newer = "7 days"
 
 # composio-core pins rich<14 but textual requires rich>=14.
 # onnxruntime 1.24+ dropped Python 3.10 wheels; cap it so qdrant[fastembed] resolves on 3.10.