From 9229fa550e28f6c5c8cd29f285b42d32b741f313 Mon Sep 17 00:00:00 2001
From: Josh Wren <josh.wren@youversion.com>
Date: Sat, 8 Aug 2026 12:23:18 -0500
Subject: [PATCH 1/2] Bump version to 0.1.2

The release workflow asserts the tag matches pyproject.toml, so v0.1.2
failed its version check six seconds in, before any build step ran.

uv.lock carries the project's own version, so it is bumped in step or
'uv sync --locked' fails on the runners. Edited in place rather than
regenerated, to avoid rewriting every registry entry.
---
 pyproject.toml | 2 +-
 uv.lock        | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 6e56147..27001ac 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "cdisplayagain"
-version = "0.1.1"
+version = "0.1.2"
 description = "Minimalist, cross-platform remake of the classic CDisplay sequential image viewer"
 readme = "README.md"
 requires-python = ">=3.13"
diff --git a/uv.lock b/uv.lock
index 178d71a..d812bcc 100644
--- a/uv.lock
+++ b/uv.lock
@@ -13,7 +13,7 @@ wheels = [
 
 [[package]]
 name = "cdisplayagain"
-version = "0.1.1"
+version = "0.1.2"
 source = { virtual = "." }
 dependencies = [
     { name = "pillow" },

From ee69779016113f8f08964a744878aed2c800d85a Mon Sep 17 00:00:00 2001
From: Josh Wren <josh.wren@youversion.com>
Date: Sat, 8 Aug 2026 12:26:01 -0500
Subject: [PATCH 2/2] Pin the project to PyPI regardless of local index
 configuration

A developer with UV_INDEX_URL or a pip.conf mirror set had every uv
command rewrite all 25 registry entries in uv.lock to that private index.
Committing one breaks CI and any clone that cannot reach the mirror, and
it was silent enough to need reverting before every commit.

A default [[tool.uv.index]] in pyproject.toml takes precedence over the
environment variable, so the lock stays reproducible for everyone without
per-machine setup. Verified by running a full 'uv lock' with a mirror
exported: the result is byte-identical to the committed lock, and every
registry entry is pypi.org.

The pre-commit guard stays as a backstop for anyone on an older uv.
---
 pyproject.toml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pyproject.toml b/pyproject.toml
index 27001ac..4ec5032 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -17,6 +17,11 @@ pythonpath = ["."]
 [tool.uv]
 python-preference = "managed"
 
+[[tool.uv.index]]
+name = "pypi"
+url = "https://pypi.org/simple"
+default = true
+
 [tool.pyright]
 include = ["."]
 stubPath = "stubs"