Skip to content

FEC-1199: tighten supply chain settings in workspace - #3278

Open
tylermorrisford wants to merge 3 commits into
mainfrom
FEC-1199
Open

FEC-1199: tighten supply chain settings in workspace#3278
tylermorrisford wants to merge 3 commits into
mainfrom
FEC-1199

Conversation

@tylermorrisford

@tylermorrisford tylermorrisford commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Flip the pnpm age-gate from the soft fall-back to the strict posture, aligning with nimbus (#1859):

  • minimumReleaseAgeStrict: false -> true — no silent fall-back (or auto-generated
    exclude) when no version satisfies a range within the 24h gate
  • minimumReleaseAgeIgnoreMissingTime: true -> false — enforce the gate even when
    a package's registry metadata omits a publish time

Refs: FEC-1199 (epic FEC-964 — Supply Chain Hardening)

@tylermorrisford tylermorrisford self-assigned this Aug 3, 2026
@tylermorrisford
tylermorrisford requested a review from a team as a code owner August 3, 2026 20:19
@vercel

vercel Bot commented Aug 3, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
ui-kit Ready Ready Preview Aug 3, 2026 8:32pm

Request Review

@changeset-bot

changeset-bot Bot commented Aug 3, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 667e718

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant