]> Piment Noir Git Repositories - poolifier.git/commit
repositories / poolifier.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7d4fc8c) | patch
ci(renovate): enforce 3-day minimum release age for npm packages
authorJérôme Benoit <jerome.benoit@piment-noir.org>
Tue, 26 May 2026 17:47:40 +0000 (19:47 +0200)
committerJérôme Benoit <jerome.benoit@piment-noir.org>
Tue, 26 May 2026 17:47:40 +0000 (19:47 +0200)
commit2b68733e66e05a03725fc3491afc97ac37c7d6ae
treec9b15e6972cc032d5cc50298b04930d17ca918fatree | snapshot (zip tar.gz tar.bz2)
parent7d4fc8ceac651f59003b14c546c7a8524589791ecommit | diff
ci(renovate): enforce 3-day minimum release age for npm packages

Extend the Renovate config with the official 'security:minimumReleaseAgeNpm'
preset so that Renovate waits 3 days after publication before creating PRs
for any npm/pnpm dependency. This adds a buffer against unpublished or
freshly-broken releases (e.g. malicious packages, npm unpublish window,
transient registry/lockfile resolution issues).
renovate.json diff | blob | blame | history
Fast and small Node.js thread pool implementation mirror - https://github.com/poolifier/poolifier