From 604d5a1f1d35514edaeb689740fdb27d7b1d3bc7 Mon Sep 17 00:00:00 2001 From: anupamme Date: Sun, 16 Aug 2026 15:21:01 +0000 Subject: [PATCH] fix: package_managers.pnpm.pnpm-missing-minimum-release-age.pnpm-minimum-release-age security vulnerability Automated security fix generated by OrbisAI Security --- pnpm-workspace.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 8208dbb..4455bd1 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -5,6 +5,9 @@ allowBuilds: '@deepseek-ai/dsh-subprocess-local': false esbuild: true node-pty: false +minimumReleaseAge: 10080 +blockExoticSubdeps: true +trustPolicy: no-downgrade minimumReleaseAgeExclude: - '@deepseek-ai/cordis-plugin-include@1.0.6' - '@deepseek-ai/cordis-plugin-loader@1.0.2'