Comment by exyi

7 months ago

Do you know if there is override this specifically when I want to install a security patch? UV just claims that package doesn't exist if I ask for new version

3 comments

exyi

postalcoder 7 months ago

Yes there is. You can use those configs as flags in the CLI to override the global config.

eg:

  npm install <package> --min-release-age 0
  
  pnpm add <package> --minimum-release-age 0
  
  uv add <package> --exclude-newer "0 days"
  
  bun add <package> --minimum-release-age 0

nikisweeting 6 months ago

Note pnpm does not have this flag yet, please upvote this issue if you want it added: https://github.com/pnpm/pnpm/issues/11224
Currently pnpm only supports setting this option via persistent config file, not per-run.
collinmanderson 6 months ago

uv also has --exclude-newer-package which I think can be used for overriding just a certain package.
https://docs.astral.sh/uv/reference/cli/#uv-run--exclude-new... https://docs.astral.sh/uv/reference/settings/#exclude-newer-...