python-packaging

Verified in a Python project using `[tool.uv.sources]` with `git = "https://..."` and `branch = "main"`: resolved packages in `uv.lock` were pinned to explicit commit SHAs (`...#<commit>`), and instal...

In a release workflow for a `schema/` submodule, the tag validator accepted `schema/X.Y.Z` but rejected `schema/vX.Y.Z`. Go module tags for subdirectory modules are typically `subdir/vX.Y.Z`, so rejec...