Skip to content

feat: enforce 7-day dependency cooldown via Bun minimumReleaseAge#92

Merged
watany-dev merged 2 commits into
mainfrom
claude/dependency-breach-cooldown-bagsG
Jun 22, 2026
Merged

feat: enforce 7-day dependency cooldown via Bun minimumReleaseAge#92
watany-dev merged 2 commits into
mainfrom
claude/dependency-breach-cooldown-bagsG

Conversation

@watany-dev

Copy link
Copy Markdown
Owner

Supply chain attack mitigation: newly published package versions
must be at least 7 days old before bun install accepts them.
Also add overrides for smol-toml and picomatch audit vulnerabilities.

https://claude.ai/code/session_01HWrHVzWLTY4ny4JiSeRMqE

Supply chain attack mitigation: newly published package versions
must be at least 7 days old before bun install accepts them.
Also add overrides for smol-toml and picomatch audit vulnerabilities.

https://claude.ai/code/session_01HWrHVzWLTY4ny4JiSeRMqE
@watany-dev

Copy link
Copy Markdown
Owner Author

@copilot resolve the merge conflicts in this pull request

…ach-cooldown-bagsG

# Conflicts:
#	bun.lock
#	bunfig.toml
#	package.json

Copilot AI commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

@copilot resolve the merge conflicts in this pull request

Resolved. The three conflicting files were merged as follows:

  • bunfig.toml: kept main's version (includes minimumReleaseAgeExcludes)
  • package.json: kept main's overrides (superset with more up-to-date versions)
  • bun.lock: used main's lock file to match the resolved dependencies

After the merge, the branch is fully up-to-date with main (commit 7ede813).

@watany-dev watany-dev merged commit fddd622 into main Jun 22, 2026
6 of 7 checks passed
@watany-dev watany-dev deleted the claude/dependency-breach-cooldown-bagsG branch June 22, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants