Browse Source

Add minimumReleaseAge to pnpm-workspace.yaml (#865)

* Add minimumReleaseAge to pnpm-workspace.yaml

This is an important addition to protect our software from any sort of supply chain attack. This feature was recently released in pnpm 10.17.x

* Add minimumReleaseAgeExclude to pnpm-workspace.yaml

Allow our own packages to be installed without any freshness check.
pull/868/head
Dan Ditomaso 8 months ago
committed by GitHub
parent
commit
86622f83d0
No known key found for this signature in database GPG Key ID: B5690EEEBB952194
  1. 5
      pnpm-workspace.yaml

5
pnpm-workspace.yaml

@ -1,2 +1,5 @@
minimumReleaseAge: 2880 # package dependency library must be at least 2 days old
minimumReleaseAgeExclude:
- '@meshtastic/*'
packages:
- "packages/*"
- "packages/*"

Loading…
Cancel
Save