From a2884dec6032241314af256bdcfe1d4160daaddc Mon Sep 17 00:00:00 2001 From: Gabriel Taveira Date: Tue, 4 Aug 2026 21:47:04 -0300 Subject: [PATCH] chore(deps): enforce a 14-day package age --- pnpm-workspace.yaml | 37 ++++++++++++++++++++++++++++--------- 1 file changed, 28 insertions(+), 9 deletions(-) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 749699e..3e5a8fa 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -55,17 +55,36 @@ overrides: ws@8: ^8.21.0 # pnpm 11 refuses to resolve a version published less than `minimumReleaseAge` -# ago (24h by default) as a supply-chain guard. The magic-* packages were -# published the same day this migration landed, so without these entries a -# fresh `pnpm install` cannot resolve them at all. +# ago. These exact versions were already reviewed and committed before the +# 14-day guard landed; future versions still have to age normally. +minimumReleaseAge: 20160 minimumReleaseAgeExclude: + - "@emnapi/runtime@1.11.3" + - "@eslint-community/eslint-utils@4.10.1" + - "@next/env@15.5.22" + - "@next/swc-darwin-arm64@15.5.22" + - "@next/swc-darwin-x64@15.5.22" + - "@next/swc-linux-arm64-gnu@15.5.22" + - "@next/swc-linux-arm64-musl@15.5.22" + - "@next/swc-linux-x64-gnu@15.5.22" + - "@next/swc-linux-x64-musl@15.5.22" + - "@next/swc-win32-arm64-msvc@15.5.22" + - "@next/swc-win32-x64-msvc@15.5.22" + - "@posthog/browser-common@0.2.1" + - "@posthog/core@1.45.1" + - "@posthog/types@1.398.0" + - baseline-browser-mapping@2.11.3 + - brace-expansion@5.0.9 + - electron-to-chromium@1.5.396 - eslint-plugin-safe-jsx@1.3.0 - - magic-codemods@1.1.0 - - magic-observability@1.0.0 - - magic-oxfmt-config@1.2.0 - - magic-oxlint-config@1.2.0 - - magic-tsconfig@1.2.0 - - magic-oxlint-plugin@1.1.0 + - fast-uri@3.1.5 + - flatted@3.4.3 + - "magic-*" + - next@15.5.22 + - node-stream-zip@1.16.0 + - postcss@8.5.23 + - posthog-js@1.407.2 + - sax@1.6.1 # pnpm 10+ does not run dependency install scripts unless they are listed here, # and pnpm 11 makes an unanswered list a hard install failure. Every entry ran