build: add dependencies cooldown (#660)

* build: add dependencies cooldown

* fix: exclude gptqmodel and stable-fast because pinned dev wheel missing release time

Author: gsprochette

pyproject.toml

@@ -73,6 +73,9 @@ explicit = true
 
 [tool.uv]
 index-strategy = "first-index"
+exclude-newer = "1 week"  # protection against compromised dependencies
+# trusted dev wheels that are missing an upload date
+exclude-newer-package = { gptqmodel = false, "stable-fast-pruna" = false }
 
 conflicts = [
     [{ extra = "awq" }, { extra = "vbench" }],