Skip to content

Commit e755af1

Browse files
committed
minor #3083 Prevent pnpm to install new packages published the same day (Kocal)
This PR was merged into the 2.x branch. Discussion ---------- Prevent pnpm to install new packages published the same day | Q | A | ------------- | --- | Bug fix? | no | New feature? | no <!-- please update src/**/CHANGELOG.md files --> | Docs? | no <!-- required for new features --> | Issues | Fix #... <!-- prefix each issue number with "Fix #", no need to create an issue if none exist, explain below instead --> | License | MIT <!-- Replace this notice by a description of your feature/bugfix. This will help reviewers and should be a good start for the documentation. Additionally (see https://symfony.com/releases): - Always add tests and ensure they pass. - For new features, provide some code snippets to help understand usage. - Features and deprecations must be submitted against branch main. - Update/add documentation as required (we can help!) - Changelog entry should follow https://symfony.com/doc/current/contributing/code/conventions.html#writing-a-changelog-entry - Never break backward compatibility (see https://symfony.com/bc). --> It should not affect us since we are using a lockfile, but just in case of, we prevent the installation of new packages published in the last 1440 minutes (1 day), which could be malicious packages. See https://pnpm.io/fr/settings#minimumreleaseage Commits ------- 7264fe7 Prevent pnpm to install new packages published the same day
2 parents 35ae432 + 7264fe7 commit e755af1

File tree

2 files changed

+3
-1
lines changed

2 files changed

+3
-1
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"private": true,
3-
"packageManager": "pnpm@10.14.0+sha512.ad27a79641b49c3e481a16a805baa71817a04bbe06a38d17e60e2eaee83f6a146c6a688125f5792e48dd5ba30e7da52a5cda4c3992b9ccf333f9ce223af84748",
3+
"packageManager": "pnpm@10.16.1+sha512.0e155aa2629db8672b49e8475da6226aa4bdea85fdcdfdc15350874946d4f3c91faaf64cbdc4a5d1ab8002f473d5c3fcedcd197989cf0390f9badd3c04678706",
44
"type": "module",
55
"workspaces": [
66
"src/*/assets",

pnpm-workspace.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,3 +20,5 @@ packageExtensions:
2020
'@symfony/ux-leaflet-map':
2121
dependencies:
2222
'@symfony/ux-map': 'workspace:*'
23+
24+
minimumReleaseAge: 1440

0 commit comments

Comments
 (0)