diff --git a/pyproject.toml b/pyproject.toml
index c1c30017..319c96ae 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -221,6 +221,10 @@ exclude_lines = ["pragma: no cover", "if TYPE_CHECKING:", "assert_never()"]
 [tool.ipdb]
 context = 7
 
+[tool.uv]
+# Minimal defense against supply-chain attacks.
+exclude-newer = "24 hours"
+
 # Run tasks with: uv run poe <task>
 [tool.poe.tasks]
 clean = "rm -rf .coverage .pytest_cache .ruff_cache .ty_cache build dist htmlcov"
diff --git a/renovate.json b/renovate.json
index 90167e92..4082a9ff 100644
--- a/renovate.json
+++ b/renovate.json
@@ -21,6 +21,7 @@
             "automergeType": "branch"
         }
     ],
+    "minimumReleaseAge": "1 day",
     "schedule": ["before 7am every weekday"],
     "ignoreDeps": ["apify", "docusaurus-plugin-typedoc-api"]
 }