Skip to content

Commit 7c0026a

Browse files
authored
chore: upgrade to pnpm v11 and enhance security settings (#361)
* chore: upgrade to pnpm v11 * security: add security settings to pnpm workspace configuration * chore: rebuild lock-file
1 parent 30709b8 commit 7c0026a

3 files changed

Lines changed: 28 additions & 1 deletion

File tree

‎package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@
4040
"bin": {
4141
"rn-toolbox": "bin/run.js"
4242
},
43-
"packageManager": "pnpm@10.27.0+sha512.72d699da16b1179c14ba9e64dc71c9a40988cbdc65c264cb0e489db7de917f20dcf4d64d8723625f2969ba52d4b7e2a1170682d9ac2a5dcaeaab732b7e16f04a",
43+
"packageManager": "pnpm@11.7.0+sha512.19cc852c120c7125760f2443ee6be0ca5b40f9f50598de1a09a1f177503e010e57c23c77646e01e761de59bf874fb22a3398c33ab9691fc13eb946b6f0f4d620",
4444
"dependencies": {
4545
"sharp": "^0.35.1"
4646
},

‎pnpm-lock.yaml‎

Lines changed: 16 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-workspace.yaml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
allowBuilds:
2+
esbuild: false
3+
4+
# Security Settings
5+
# Increase security by only allowing updates that are at least 24 hours old
6+
minimumReleaseAge: 1440
7+
minimumReleaseAgeStrict: true
8+
# Prevent updates to packages that have exotic dependencies (e.g. git dependencies, file dependencies, etc.)
9+
blockExoticSubdeps: true
10+
# Prevent updates to packages if its trust level has decreased compared to previous releases
11+
trustPolicy: "no-downgrade"

0 commit comments

Comments
 (0)