millionco__react-doctor/pnpm-workspace.yaml at main - millionco__react-doctor - GetSkill.work

skills/millionco__react-doctor

mirror of https://github.com/millionco/react-doctor.git synced 2026-09-14 20:00:24 +08:00

Files

T

Skosh f720a50429 chore(deps): restore oxlint release-age quarantine (#1684 )

* fix(supply-chain): remove oxlint/oxc from minimumReleaseAge exemption

Remove oxlint/oxc packages from minimumReleaseAgeExclude to restore
the 2-hour release quarantine for these third-party dependencies.

Oxlint/oxc is the core analysis engine of react-doctor - the exact
dependency where a compromised or bad release has maximal impact.
The exclusion was removing the one guard that protects that path.

Keep only agent-install in the exclusion list, as it's documented
as a first-party package.

Closes #1680

Co-authored-by: Skosh <skoshx@users.noreply.github.com>

* chore: add changeset for oxlint release age fix

Co-authored-by: Skosh <skoshx@users.noreply.github.com>

* chore(deps): keep release-age policy internal

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Skosh <skoshx@users.noreply.github.com>
Co-authored-by: Aiden Bai <aiden@million.dev>

2026-08-29 22:36:38 -07:00

13 lines

259 B

YAML

Raw Permalink Blame History

 packages:
   - "packages/*"
 minimumReleaseAge: 7200
 minimumReleaseAgeExclude:
   - agent-install
 trustPolicy: no-downgrade
 blockExoticSubdeps: true
 overrides:
   vite: npm:@voidzero-dev/vite-plus-core@^0.1.15
   vitest: npm:@voidzero-dev/vite-plus-test@^0.1.15