From 7edfa753156e52993e46307e62b717940cbc9af2 Mon Sep 17 00:00:00 2001
From: Josef Prochazka <josef.prochazka@apify.com>
Date: Thu, 9 Jul 2026 11:18:39 +0200
Subject: [PATCH 1/2] Add minimal package age and rennovate update

---
 pyproject.toml |  4 ++++
 renovate.json  | 11 +++++++++--
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 93c307a..6285acd 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -116,6 +116,10 @@ python-version = "3.10"
 [tool.ty.src]
 include = ["src", "tests", "scripts", "docs", "website"]
 
+[tool.uv]
+# Minimal defense against supply-chain atatcks.
+exclude-newer = "24 hours"
+
 # Run tasks with: uv run poe <task>
 [tool.poe.tasks]
 clean = "rm -rf .coverage .pytest_cache .ruff_cache .ty_cache build dist htmlcov"
diff --git a/renovate.json b/renovate.json
index 4673049..e0e38b1 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,7 +8,8 @@
     "lockFileMaintenance": {
         "enabled": true,
         "automerge": true,
-        "automergeType": "branch"
+        "automergeType": "pr",
+        "schedule": ["* 0-5 * * 1"]
     },
     "packageRules": [
         {
@@ -19,7 +20,13 @@
             "groupSlug": "dev-dependencies",
             "automerge": true,
             "automergeType": "branch"
+        },
+        {
+            "matchUpdateTypes": ["lockFileMaintenance"],
+            "minimumReleaseAgeBehaviour": "timestamp-optional"
         }
     ],
-    "schedule": ["before 7am every weekday"]
+    "minimumReleaseAge": "1 day",
+    "internalChecksFilter": "strict",
+    "schedule": ["* 0-5 * * 2-5"]
 }

From 26d2f3302c7bc93b6be54c3fae963ce3e4931882 Mon Sep 17 00:00:00 2001
From: Vlada Dusek <v.dusek96@gmail.com>
Date: Thu, 9 Jul 2026 11:34:23 +0200
Subject: [PATCH 2/2] ci: Exempt internal Apify packages from install cooldown

---
 pyproject.toml | 8 +++++++-
 renovate.json  | 4 ++++
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index 6285acd..5c8310f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -117,9 +117,15 @@ python-version = "3.10"
 include = ["src", "tests", "scripts", "docs", "website"]
 
 [tool.uv]
-# Minimal defense against supply-chain atatcks.
+# Minimal defense against supply-chain attacks.
 exclude-newer = "24 hours"
 
+[tool.uv.exclude-newer-package]
+# Allow internal Apify packages to install immediately.
+apify-client = false
+apify_fingerprint_datapoints = false
+crawlee = false
+
 # Run tasks with: uv run poe <task>
 [tool.poe.tasks]
 clean = "rm -rf .coverage .pytest_cache .ruff_cache .ty_cache build dist htmlcov"
diff --git a/renovate.json b/renovate.json
index e0e38b1..ace49fb 100644
--- a/renovate.json
+++ b/renovate.json
@@ -21,6 +21,10 @@
             "automerge": true,
             "automergeType": "branch"
         },
+        {
+            "matchPackageNames": ["@apify/*", "@crawlee/*", "apify", "apify-client", "apify-shared", "apify-fingerprint-datapoints", "crawlee", "got-scraping"],
+            "minimumReleaseAge": "0 days"
+        },
         {
             "matchUpdateTypes": ["lockFileMaintenance"],
             "minimumReleaseAgeBehaviour": "timestamp-optional"