From 86622f83d0b7002eab4c09741f210d621e8c96cf Mon Sep 17 00:00:00 2001
From: Dan Ditomaso <dan.ditomaso@gmail.com>
Date: Fri, 26 Sep 2025 18:34:20 -0400
Subject: [PATCH] Add minimumReleaseAge to pnpm-workspace.yaml (#865)

* Add minimumReleaseAge to pnpm-workspace.yaml

This is an important addition to protect our software from any sort of supply chain attack. This feature was recently released in pnpm 10.17.x

* Add minimumReleaseAgeExclude to pnpm-workspace.yaml

Allow our own packages to be installed without any freshness check.
---
 pnpm-workspace.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index ccdc80cd..db30b5e0 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,2 +1,5 @@
+minimumReleaseAge: 2880 # package dependency library must be at least 2 days old
+minimumReleaseAgeExclude:
+- '@meshtastic/*'
 packages:
-  - "packages/*"
\ No newline at end of file
+  - "packages/*"