Add 5-day cooldown on updates to mitigate supply-chain attacks

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
nemunaire 2026-07-05 19:36:10 +08:00
commit c66a1ee936

View file

@ -17,6 +17,11 @@
"enabled": true, "enabled": true,
"automerge": true "automerge": true
}, },
"minimumReleaseAge": "5 days",
"internalChecksFilter": "strict",
"vulnerabilityAlerts": {
"minimumReleaseAge": "0"
},
"packageRules": [ "packageRules": [
{ {
"matchManagers": ["npm", "pnpm", "yarn"], "matchManagers": ["npm", "pnpm", "yarn"],