Rename trustPolicyIgnoreAfter to trustPolicyIgnoreAfterMinutes

...this setting is named like that in user-facing and internal
Rush config, but must be surfaced as trustPolicyIgnoreAfter
in the synthesised package.json.

Author: fpapado

common/changes/@microsoft/rush/feature-add-trust-policy-support_2026-04-07-00-00.json

@@ -1,7 +1,7 @@
 {
   "changes": [
     {
-      "comment": "Add support for pnpm `trustPolicy`, `trustPolicyExclude`, and `trustPolicyIgnoreAfter` settings in `pnpm-config.json`.",
+      "comment": "Add support for pnpm `trustPolicy`, `trustPolicyExclude`, and `trustPolicyIgnoreAfterMinutes` settings in `pnpm-config.json`.",
       "type": "minor",
       "packageName": "@microsoft/rush"
     }

common/reviews/api/rush-lib.api.md

@@ -769,7 +769,7 @@ export interface _IPnpmOptionsJson extends IPackageManagerOptionsJsonBase {
     strictPeerDependencies?: boolean;
     trustPolicy?: PnpmTrustPolicy;
     trustPolicyExclude?: string[];
-    trustPolicyIgnoreAfter?: number;
+    trustPolicyIgnoreAfterMinutes?: number;
     unsupportedPackageJsonSettings?: unknown;
     useWorkspaces?: boolean;
 }
@@ -1199,7 +1199,7 @@ export class PnpmOptionsConfiguration extends PackageManagerOptionsConfiguration
     readonly strictPeerDependencies: boolean;
     readonly trustPolicy: PnpmTrustPolicy | undefined;
     readonly trustPolicyExclude: string[] | undefined;
-    readonly trustPolicyIgnoreAfter: number | undefined;
+    readonly trustPolicyIgnoreAfterMinutes: number | undefined;
     readonly unsupportedPackageJsonSettings: unknown | undefined;
     updateGlobalOnlyBuiltDependencies(onlyBuiltDependencies: string[] | undefined): void;
     updateGlobalPatchedDependencies(patchedDependencies: Record<string, string> | undefined): void;

libraries/rush-lib/assets/rush-init/common/config/rush/pnpm-config.json

@@ -141,15 +141,15 @@
    * For example, the following setting ignores trust level changes for packages published
    * more than 14 days ago:
    *
-   * "trustPolicyIgnoreAfter": 20160
+   * "trustPolicyIgnoreAfterMinutes": 20160
    *
    * (SUPPORTED ONLY IN PNPM 10.27.0 AND NEWER)
    *
    * PNPM documentation: https://pnpm.io/settings#trustpolicyignoreafter
    *
    * The default value is undefined (no exclusion).
    */
-  /*[LINE "HYPOTHETICAL"]*/ "trustPolicyIgnoreAfter": 20160,
+  /*[LINE "HYPOTHETICAL"]*/ "trustPolicyIgnoreAfterMinutes": 20160,
 
   /**
    * If true, then Rush will add the `--strict-peer-dependencies` command-line parameter when

libraries/rush-lib/src/logic/installManager/InstallHelpers.ts

@@ -39,7 +39,7 @@ interface ICommonPackageJson extends IPackageJson {
     minimumReleaseAgeExclude?: typeof PnpmOptionsConfiguration.prototype.minimumReleaseAgeExclude;
     trustPolicy?: typeof PnpmOptionsConfiguration.prototype.trustPolicy;
     trustPolicyExclude?: typeof PnpmOptionsConfiguration.prototype.trustPolicyExclude;
-    trustPolicyIgnoreAfter?: typeof PnpmOptionsConfiguration.prototype.trustPolicyIgnoreAfter;
+    trustPolicyIgnoreAfter?: typeof PnpmOptionsConfiguration.prototype.trustPolicyIgnoreAfterMinutes;
   };
 }
 
@@ -184,22 +184,23 @@ export class InstallHelpers {
         commonPackageJson.pnpm.trustPolicyExclude = pnpmOptions.trustPolicyExclude;
       }
 
-      if (pnpmOptions.trustPolicyIgnoreAfter !== undefined) {
+      if (pnpmOptions.trustPolicyIgnoreAfterMinutes !== undefined) {
         if (
           rushConfiguration.rushConfigurationJson.pnpmVersion !== undefined &&
           semver.lt(rushConfiguration.rushConfigurationJson.pnpmVersion, '10.27.0')
         ) {
           terminal.writeWarningLine(
             Colorize.yellow(
               `Your version of pnpm (${rushConfiguration.rushConfigurationJson.pnpmVersion}) ` +
-                `doesn't support the "trustPolicyIgnoreAfter" field in ` +
+                `doesn't support the "trustPolicyIgnoreAfterMinutes" field in ` +
                 `${rushConfiguration.commonRushConfigFolder}/${RushConstants.pnpmConfigFilename}. ` +
                 'Remove this field or upgrade to pnpm 10.27.0 or newer.'
             )
           );
         }
 
-        commonPackageJson.pnpm.trustPolicyIgnoreAfter = pnpmOptions.trustPolicyIgnoreAfter;
+        // NOTE: the pnpm setting is `trustPolicyIgnoreAfter`, but the rush pnpm setting is `trustPolicyIgnoreAfterMinutes`
+        commonPackageJson.pnpm.trustPolicyIgnoreAfter = pnpmOptions.trustPolicyIgnoreAfterMinutes;
       }
 
       if (pnpmOptions.unsupportedPackageJsonSettings) {

libraries/rush-lib/src/logic/pnpm/PnpmOptionsConfiguration.ts

@@ -171,7 +171,7 @@ export interface IPnpmOptionsJson extends IPackageManagerOptionsJsonBase {
   /**
    * {@inheritDoc PnpmOptionsConfiguration.trustPolicyIgnoreAfter}
    */
-  trustPolicyIgnoreAfter?: number;
+  trustPolicyIgnoreAfterMinutes?: number;
   /**
    * {@inheritDoc PnpmOptionsConfiguration.alwaysInjectDependenciesFromOtherSubspaces}
    */
@@ -357,7 +357,7 @@ export class PnpmOptionsConfiguration extends PackageManagerOptionsConfiguration
    *
    * PNPM documentation: https://pnpm.io/settings#trustpolicyignoreafter
    */
-  public readonly trustPolicyIgnoreAfter: number | undefined;
+  public readonly trustPolicyIgnoreAfterMinutes: number | undefined;
 
   /**
    * If true, then `rush update` add injected install options for all cross-subspace
@@ -555,7 +555,7 @@ export class PnpmOptionsConfiguration extends PackageManagerOptionsConfiguration
     this.minimumReleaseAgeExclude = json.minimumReleaseAgeExclude;
     this.trustPolicy = json.trustPolicy;
     this.trustPolicyExclude = json.trustPolicyExclude;
-    this.trustPolicyIgnoreAfter = json.trustPolicyIgnoreAfter;
+    this.trustPolicyIgnoreAfterMinutes = json.trustPolicyIgnoreAfterMinutes;
     this.alwaysInjectDependenciesFromOtherSubspaces = json.alwaysInjectDependenciesFromOtherSubspaces;
     this.alwaysFullInstall = json.alwaysFullInstall;
     this.pnpmLockfilePolicies = json.pnpmLockfilePolicies;

libraries/rush-lib/src/logic/pnpm/test/PnpmOptionsConfiguration.test.ts

@@ -113,7 +113,7 @@ describe(PnpmOptionsConfiguration.name, () => {
       'webpack@4.47.0 || 5.102.1',
       '@babel/core@7.28.5'
     ]);
-    expect(pnpmConfiguration.trustPolicyIgnoreAfter).toEqual(20160);
+    expect(pnpmConfiguration.trustPolicyIgnoreAfterMinutes).toEqual(20160);
   });
 
   it('loads catalog and catalogs', () => {

libraries/rush-lib/src/logic/pnpm/test/jsonFiles/pnpm-config-trustPolicy.json

@@ -1,5 +1,5 @@
 {
   "trustPolicy": "no-downgrade",
   "trustPolicyExclude": ["@myorg/*", "chokidar@4.0.3", "webpack@4.47.0 || 5.102.1", "@babel/core@7.28.5"],
-  "trustPolicyIgnoreAfter": 20160
+  "trustPolicyIgnoreAfterMinutes": 20160
 }

libraries/rush-lib/src/schemas/pnpm-config.schema.json

@@ -229,7 +229,7 @@
       }
     },
 
-    "trustPolicyIgnoreAfter": {
+    "trustPolicyIgnoreAfterMinutes": {
       "description": "The number of minutes after which pnpm will ignore trust level downgrades. Packages published longer ago than this threshold will not be blocked even if their trust level has decreased.\n\n(SUPPORTED ONLY IN PNPM 10.27.0 AND NEWER)\n\nPNPM documentation: https://pnpm.io/settings#trustpolicyignoreafter",
       "type": "number"
     },