mirror of
https://github.com/luxfi/safe-wallet.git
synced 2026-07-26 22:53:37 +00:00
Daniel DimitrovandGitHub
cb08d011ce
* chore: pin GitHub Actions to commit SHAs Pin every third-party action under .github/workflows and .github/actions to a 40-char commit SHA with a trailing version comment, per GitHub's security hardening guidance. anthropics/agent-action is bumped from the (long-stale) @beta tag to v1.0.99, which also requires renaming the `direct_prompt` input to `prompt`. chromaui/action is moved off the floating @latest tag onto v16.9.1. Resolves: WA-2301 * chore: bump npmMinumalAgeGate to 7 days * chore: set chromaui/action to v 16.8.0
26 lines
704 B
YAML
26 lines
704 B
YAML
compressionLevel: mixed
|
|
|
|
enableConstraintsChecks: true
|
|
|
|
enableGlobalCache: true
|
|
|
|
enableScripts: false
|
|
|
|
nodeLinker: node-modules
|
|
|
|
# eslint-config-next requires next at runtime but doesn't declare it as
|
|
# a peer dependency. Without this, Yarn hoists eslint-config-next to root
|
|
# where it can't resolve next (which lives in apps/web/node_modules/).
|
|
packageExtensions:
|
|
eslint-config-next@*:
|
|
peerDependencies:
|
|
next: '*'
|
|
|
|
# Set cool down period for npm packages to 7 days
|
|
# This prevents the installation of npm packages if
|
|
# they are updated within the last 7 days
|
|
npmMinimalAgeGate: 10080
|
|
# Allow in-house @safe-global packages to bypass the age gate
|
|
npmPreapprovedPackages:
|
|
- '@safe-global/*'
|