Skip to content

chore: restore minimumReleaseAge default, add dependabot cooldown#357

Closed
mormubis wants to merge 1 commit into
mainfrom
chore/supply-chain-cooldown
Closed

chore: restore minimumReleaseAge default, add dependabot cooldown#357
mormubis wants to merge 1 commit into
mainfrom
chore/supply-chain-cooldown

Conversation

@mormubis

Copy link
Copy Markdown
Collaborator

reverts minimumReleaseAge: 0 to restore pnpm 11's default 1-day supply chain protection. adds cooldown.default-days: 2 to dependabot so it waits 2 days before opening PRs for newly-published packages — ensuring they're always past pnpm's cutoff.

@mormubis mormubis closed this Jun 10, 2026
@mormubis mormubis deleted the chore/supply-chain-cooldown branch June 10, 2026 18:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant