mirror of
https://github.com/hanzoai/next.js.git
synced 2026-09-24 17:00:51 +00:00
Depends on pnpm 10.x: https://github.com/vercel/next.js/pull/92283 Enables https://pnpm.io/settings#minimumreleaseage to protect against supply-chain attacks. The `minimumReleaseAgeExclude` list is copied from https://github.com/vercel/front/blob/1c3a9458d970265e1fb5ec14ddfed9a0eab2abef/pnpm-workspace.yaml#L13, with `react` and `react-dom` added.
11 lines
165 B
YAML
11 lines
165 B
YAML
packages:
|
|
- 'crates/binding'
|
|
- '.'
|
|
|
|
blockExoticSubdeps: true
|
|
minimumReleaseAge: 2880 # 48 hrs
|
|
minimumReleaseAgeExclude:
|
|
- '@next/*'
|
|
- 'next'
|
|
- '@rspack/*'
|