Repository navigation

meta: harden dependency supply chain - #1178

Merged

ovflowd merged 14 commits into

mainfrom

meta/harden-dependencies

Oct 27, 2026

Merged

meta: harden dependency supply chain#1178
ovflowd merged 14 commits into
mainfrom
meta/harden-dependencies

Commits on Oct 25, 2026
- meta: harden pnpm workspace
  ovflowd
  committed
  fea198c
- chore: trim runtime dependencies
  ovflowd
  committed
  f7f5e4e
- chore: stop recording unused piscina timings
  ovflowd
  committed
  2496928
- meta: let dependency review reach scorecard
  ovflowd
  committed
  19dd15c
- meta: harden publish job
  ovflowd
  committed
  a1648ee
- meta: use the latest shared setup-environment action
  ovflowd
  committed
  62f77e2
- meta: lower the minimum release age to 3 days
  ovflowd
  committed
  fb2594b
- docs: note how TypeScript configs load with cosmiconfig 10
  ovflowd
  committed
  c7209db
- chore: drop the recordTiming comment
  ovflowd
  committed
  de85063
- refactor(react): move reading time constants to constants.mjs
  ovflowd
  committed
  a273f0e
- meta: skip the release age gate for @node-core packages
  ovflowd
  committed
  d578663
Commits on Oct 26, 2026
- meta: update @node-core/ui-components to 1.8.1
  ovflowd
  committed
  7808e92
- meta: drop the comments from pnpm-workspace.yaml
  ovflowd
  committed
  b109674
Commits on Oct 27, 2026
- meta: skip the dependency cache when publishing
  ovflowd
  committed
  72c862d