From c66a1ee936c19f128ea712780678563936d6ecc4 Mon Sep 17 00:00:00 2001
From: Pierre-Olivier Mercier <nemunaire@nemunai.re>
Date: Sun, 5 Jul 2026 19:36:10 +0800
Subject: [PATCH] Add 5-day cooldown on updates to mitigate supply-chain
 attacks

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 default.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/default.json b/default.json
index aa32a44..2785908 100644
--- a/default.json
+++ b/default.json
@@ -17,6 +17,11 @@
     "enabled": true,
     "automerge": true
   },
+  "minimumReleaseAge": "5 days",
+  "internalChecksFilter": "strict",
+  "vulnerabilityAlerts": {
+    "minimumReleaseAge": "0"
+  },
   "packageRules": [
     {
       "matchManagers": ["npm", "pnpm", "yarn"],