From 78537a2b4343672e02e1623cbdf7ae8fe9ee590c Mon Sep 17 00:00:00 2001
From: Jey Burrows <175012+jeyrb@users.noreply.github.com>
Date: Sun, 8 Nov 2026 12:18:43 +0000
Subject: [PATCH] Cooldowns: 2 days for trusted packages, mise cooldown, drop
 pre-commit.ci

Per hq-private#83.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .pre-commit-config.yaml | 16 ----------------
 mise.toml               |  8 ++++----
 pyproject.toml          |  2 +-
 uv.lock                 | 10 ++++------
 4 files changed, 9 insertions(+), 27 deletions(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index fae5f7431..1bf78c87a 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -72,19 +72,3 @@ repos:
     hooks:
       - id: ty
         args: [--isolated, --no-python-downloads]
-
-ci:
-    autofix_commit_msg: |
-        [pre-commit.ci] auto fixes from pre-commit.com hooks
-
-        for more information, see https://pre-commit.ci
-    autofix_prs: true
-    autoupdate_branch: ''
-    autoupdate_commit_msg: '[pre-commit.ci] pre-commit autoupdate'
-    autoupdate_schedule: weekly
-    skip:
-      - diagram-thumbnails
-      - bandit
-      - mypy
-      - ty
-    submodules: false
diff --git a/mise.toml b/mise.toml
index a385bbea5..69ce16b52 100644
--- a/mise.toml
+++ b/mise.toml
@@ -2,15 +2,15 @@
 # tools are locked in mise.lock, as Python dependencies are in uv.lock, so CI runs the versions
 # used here, and only those released at least as long ago as uv's exclude-newer in pyproject.toml
 lockfile = true
-minimum_release_age = "5d"
+minimum_release_age = "7d"
 
 [tools]
 "pipx:codespell" = "latest"
 prek = "latest"
 python = "3.14"
-ruff = "latest"
-ty = "latest"
-uv = "latest"
+ruff = { version = "latest", minimum_release_age = "2d" }
+ty = { version = "latest", minimum_release_age = "2d" }
+uv = { version = "latest", minimum_release_age = "2d" }
 
 [tasks.preview-start]
 description = "Start the Docker preview, seeding it as the preview house the first time"
diff --git a/pyproject.toml b/pyproject.toml
index 152f6d41c..1f1583c4a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -103,7 +103,7 @@ environments = [
 ]
 
 exclude-newer = "7 days"
-exclude-newer-package = { certifi=false, homeassistant_repl=false,homeassistant=false,homeassistant-stubs=false,pytest-homeassistant=false,pytest-homeassistant-custom-component="2 days",aiohttp=false,uv=false }
+exclude-newer-package = { homeassistant_repl = false, homeassistant = "2 days", homeassistant-stubs = "2 days", pytest-homeassistant = "2 days", pytest-homeassistant-custom-component = "2 days", uv = "2 days" }
 add-bounds = "major"
 # Home Assistant pins uv exactly, and under `uv run` the venv's uv comes first on PATH,
 # shadowing the mise-managed one. Floor at the latest uv security fix (GHSA-hq85-5cpj-mr62).
diff --git a/uv.lock b/uv.lock
index e0142f1d2..fe05d825a 100644
--- a/uv.lock
+++ b/uv.lock
@@ -13,14 +13,12 @@ exclude-newer = "0001-01-01T00:00:00Z" # This has no effect and is included for
 exclude-newer-span = "P7D"
 
 [options.exclude-newer-package]
-aiohttp = false
-certifi = false
-homeassistant = false
+homeassistant = { timestamp = "0001-01-01T00:00:00Z", span = "P2D" }
 homeassistant-repl = false
-homeassistant-stubs = false
-pytest-homeassistant = false
+homeassistant-stubs = { timestamp = "0001-01-01T00:00:00Z", span = "P2D" }
+pytest-homeassistant = { timestamp = "0001-01-01T00:00:00Z", span = "P2D" }
 pytest-homeassistant-custom-component = { timestamp = "0001-01-01T00:00:00Z", span = "P2D" }
-uv = false
+uv = { timestamp = "0001-01-01T00:00:00Z", span = "P2D" }
 
 [manifest]
 overrides = [{ name = "uv", specifier = ">=0.13.4" }]