From ffd60921ad5a595ccb75518820902605acd058a9 Mon Sep 17 00:00:00 2001 From: emmanuelm41 Date: Wed, 27 May 2026 13:47:04 -0300 Subject: [PATCH] ci: scope pnpm minimumReleaseAge waiver to @kunobi/* only MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Replaces the blanket `minimumReleaseAge: 0` from #7 with `minimumReleaseAgeExclude: ['@kunobi/*']` so the 24h supply-chain age gate from the CI image still applies to every third-party dependency (zod, @modelcontextprotocol/sdk, rollup, biome, vitest, …) and only in-house packages we publish ourselves bypass it. --- pnpm-workspace.yaml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 51ae6cd..fe3ee74 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,6 +1,8 @@ allowBuilds: esbuild: true -# Override the CI image's supply-chain age policy: we depend on @kunobi/* packages -# that we publish ourselves and may need to consume same-day. -minimumReleaseAge: 0 +# Keep the CI image's supply-chain age policy (24h cooling-off) for third-party +# dependencies, but waive it for @kunobi/* packages we publish ourselves and may +# need to consume same-day. +minimumReleaseAgeExclude: + - '@kunobi/*'