Add minimumReleaseAge to pnpm-workspace.yaml (#865)

* Add minimumReleaseAge to pnpm-workspace.yaml

This is an important addition to protect our software from any sort of supply chain attack. This feature was recently released in pnpm 10.17.x

* Add minimumReleaseAgeExclude to pnpm-workspace.yaml

Allow our own packages to be installed without any freshness check.
This commit is contained in:
Dan Ditomaso
2025-09-26 18:34:20 -04:00
committed by GitHub
parent 66c3945bc4
commit 86622f83d0

View File

@@ -1,2 +1,5 @@
minimumReleaseAge: 2880 # package dependency library must be at least 2 days old
minimumReleaseAgeExclude:
- '@meshtastic/*'
packages:
- "packages/*"
- "packages/*"