mirror of
https://github.com/transloadit/uppy.git
synced 2026-07-17 16:50:22 +00:00
## Summary - add Yarn's native `npmMinimalAgeGate` with a 2 day / 2880 minute cooldown to help protect against supply chain attacks - rely on the existing Yarn 4.12.0 install path instead of a custom package-age script Closes #5974. ## Verification - `corepack yarn config get npmMinimalAgeGate` -> `2880` - `corepack yarn install --immutable` - `corepack yarn check`
14 lines
181 B
YAML
14 lines
181 B
YAML
changesetBaseRefs:
|
|
- main
|
|
- upstream/main
|
|
- origin/main
|
|
|
|
compressionLevel: mixed
|
|
|
|
initScope: uppy
|
|
|
|
nodeLinker: node-modules
|
|
|
|
npmMinimalAgeGate: 2880
|
|
|
|
npmPublishAccess: public
|