From f281230517d007d6f50362a02f9e989a612b1787 Mon Sep 17 00:00:00 2001 From: gabriel miranda Date: Wed, 27 May 2026 09:32:22 -0300 Subject: [PATCH 1/2] chore: migrate to pnpm 11 with minimumReleaseAge Pin packageManager to pnpm@11.3.0 and set minimumReleaseAge: 1440 in pnpm-workspace.yaml to delay installing freshly published versions (supply-chain hardening). Co-Authored-By: Claude Opus 4.7 (1M context) --- package.json | 2 +- pnpm-workspace.yaml | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) create mode 100644 pnpm-workspace.yaml diff --git a/package.json b/package.json index d1470db..bc29ba2 100644 --- a/package.json +++ b/package.json @@ -18,5 +18,5 @@ "@types/react": "19.1.8", "wrangler": "4.23.0" }, - "packageManager": "pnpm@10.23.0" + "packageManager": "pnpm@11.3.0" } diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml new file mode 100644 index 0000000..c5752dd --- /dev/null +++ b/pnpm-workspace.yaml @@ -0,0 +1,5 @@ +allowBuilds: + esbuild: true + sharp: true + workerd: true +minimumReleaseAge: 1440 From 3a7083888d7e5a66dcd61dd5ce7b1ba3ef58a854 Mon Sep 17 00:00:00 2001 From: gabriel miranda Date: Wed, 27 May 2026 09:54:17 -0300 Subject: [PATCH 2/2] chore: migrate to pnpm 11 --- .github/workflows/lint.yml | 2 +- pnpm-workspace.yaml | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 1cce39f..bd81620 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -20,7 +20,7 @@ jobs: - name: Setup Node uses: actions/setup-node@v6 with: - node-version: 20 + node-version: 22 cache: "pnpm" - name: Install packages run: pnpm install diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index c5752dd..661850f 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -2,4 +2,3 @@ allowBuilds: esbuild: true sharp: true workerd: true -minimumReleaseAge: 1440