Harden pnpm config (#6)

Andarist · web-flow · commit 77db1bd38498 · 2026-05-16T15:38:39.000Z
diff --git a/package.json b/package.json
@@ -41,5 +41,5 @@
   "engines": {
     "node": "^22.11 || ^24 || >=26"
   },
-  "packageManager": "pnpm@11.1.0"
+  "packageManager": "pnpm@11.1.1+sha512.d1fdf5f73c617b64fa1a56a81c3c8dfe0e966e33a6010aa256b517ae77be21d93e05affc0de1a83b0e4f29d569f68b446ae8f068cd7247c0bb3df0fb4d7bdf9a"
 }
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -5,9 +5,13 @@ packages:
 allowBuilds:
   dprint: true
 
+blockExoticSubdeps: true
 dedupePeers: true
+dedupePeerDependents: true
+minimumReleaseAge: 10080
 
 overrides:
   rolldown: ^1.0.0
 
 shellEmulator: true
+trustPolicy: no-downgrade

Original file line number	Diff line number	Diff line change
`@@ -41,5 +41,5 @@`
`41`	`41`	`"engines": {`
`42`	`42`	`"node": "^22.11 \|\| ^24 \|\| >=26"`
`43`	`43`	`},`
`44`		`- "packageManager": "pnpm@11.1.0"`
	`44`	`+ "packageManager": "pnpm@11.1.1+sha512.d1fdf5f73c617b64fa1a56a81c3c8dfe0e966e33a6010aa256b517ae77be21d93e05affc0de1a83b0e4f29d569f68b446ae8f068cd7247c0bb3df0fb4d7bdf9a"`
`45`	`45`	`}`