Skip to content

Enforce seven-day package release age - #176

Merged
bvolpato merged 2 commits into
masterfrom
codex/dependency-cooldown-7d-20261021
Oct 23, 2026
Merged

bvolpato merged 2 commits into
masterfrom
codex/dependency-cooldown-7d-20261021

Conversation

@bvolpato

Copy link
Copy Markdown
Collaborator

Summary

Enforce a seven-day minimum release age for npm dependency resolution and Dependabot updates.

Changes

  • Add the npm min-release-age=7 setting.
  • Add a default seven-day Dependabot cooldown while preserving the existing semver-minor cooldown and daily schedule.
  • Install npm 11.21.0 with a rolling seven-day cutoff in CI.

Testing

  • npm ci --ignore-scripts passed.
  • npm run lint passed.

@bvolpato
bvolpato merged commit 1a5a93e into master Oct 23, 2026
6 checks passed
@bvolpato
bvolpato deleted the codex/dependency-cooldown-7d-20261021 branch October 23, 2026 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant