chore: disable running postinstall & enable minimalAgeGate (Sofie-Automation#1563)

* chore: disable running postinstall

* chore: add yarn minimal age gate

* chore: run dependabot for meteor and packages dirs

Author: Julusian

.github/dependabot.yml

@@ -2,14 +2,27 @@ version: 2
 updates:
   # Enable version updates for npm
   - package-ecosystem: "npm"
-    # Look for `package.json` and `lock` files in the `root` directory
     directory: "/"
-    # Check the npm registry for updates every day (weekdays)
     schedule:
       interval: "daily"
     # Only create security updates
     open-pull-requests-limit: 0
-    # Default reviewers
+    reviewers:
+      - "@Sofie-Automation/maintainers"
+  - package-ecosystem: "npm"
+    directory: "/meteor"
+    schedule:
+      interval: "daily"
+    # Only create security updates
+    open-pull-requests-limit: 0
+    reviewers:
+      - "@Sofie-Automation/maintainers"
+  - package-ecosystem: "npm"
+    directory: "/packages"
+    schedule:
+      interval: "daily"
+    # Only create security updates
+    open-pull-requests-limit: 0
     reviewers:
       - "@Sofie-Automation/maintainers"
 

.yarnrc.yml

@@ -3,3 +3,17 @@ compressionLevel: mixed
 enableGlobalCache: false
 
 nodeLinker: node-modules
+
+# Disable postinstall scripts. Any packages which need it can be enabled individually with dependenciesMeta in package.json
+enableScripts: false
+
+# Enforce a minimal age for npm packages before they can be added/updated
+npmMinimalAgeGate: 7
+
+# Packages to ignore the minimal age gate. These are packages we vet ourselves.
+npmPreapprovedPackages:
+  - "@sofie-automation/*"
+  - "@mos-connection/*"
+  - "timeline-state-resolver"
+  - "timeline-state-resolver-types"
+  - "timeline-state-resolver-api"

packages/package.json

@@ -71,5 +71,13 @@
 	"packageManager": "[email protected]",
 	"resolutions": {
 		"[email protected]": "patch:timecode@npm%3A0.0.4#./.yarn/patches/timecode-npm-0.0.4-82bde9e6fe.patch"
+	},
+	"dependenciesMeta": {
+		"esbuild": {
+			"built": true
+		},
+		"nx": {
+			"built": true
+		}
 	}
 }

packages/yarn.lock

@@ -23077,6 +23077,11 @@ asn1@evs-broadcast/node-asn1:
     ts-node: "npm:^10.9.2"
     typedoc: "npm:^0.27.6"
     typescript: "npm:~5.1.6"
+  dependenciesMeta:
+    esbuild:
+      built: true
+    nx:
+      built: true
   languageName: unknown
   linkType: soft