Skip to content

chore: upgrade pnpm to v11#111

Merged
panz3r merged 3 commits into
mainfrom
chore/pnpm-v11
Jun 18, 2026
Merged

chore: upgrade pnpm to v11#111
panz3r merged 3 commits into
mainfrom
chore/pnpm-v11

Conversation

@panz3r

@panz3r panz3r commented Jun 18, 2026

Copy link
Copy Markdown
Member

This PR introduces several updates to the project configuration, focusing on package management and workspace security.
The main changes include upgrading the pnpm package manager version, and adding new security-related settings to enforce stricter dependency update policies.

Package management:

  • Upgraded the pnpm version in package.json from 10.21.0 to 11.8.0 to ensure compatibility with newer features and security updates.

Workspace and dependency security:

  • Added allowBuilds: sharp: false to pnpm-workspace.yaml to prevent the sharp package from being built, likely for security or compatibility reasons.
  • Introduced several security settings in pnpm-workspace.yaml:
    • Enforced a minimum release age of 24 hours for dependency updates (minimumReleaseAge: 1440 and minimumReleaseAgeStrict: true).
    • Blocked updates to packages with exotic dependencies (blockExoticSubdeps: true).
    • Added a commented-out trust policy to prevent trust level downgrades (NOTE: to be enabled after upgrading semver dependency)

@panz3r panz3r self-assigned this Jun 18, 2026
@panz3r panz3r added enhancement New feature or request security Security-related issues or changes dependencies Pull requests that update a dependency file labels Jun 18, 2026
@panz3r panz3r merged commit 4f082de into main Jun 18, 2026
10 checks passed
@panz3r panz3r deleted the chore/pnpm-v11 branch June 18, 2026 11:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file enhancement New feature or request security Security-related issues or changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant