[PR #8011] [MERGED] [AI] Add npm minimal age gate for supply-chain defense #109767

Closed
opened 2026-06-02 18:53:46 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/actualbudget/actual/pull/8011
Author: @MatissJanis
Created: 5/31/2026
Status: Merged
Merged: 6/1/2026
Merged by: @MatissJanis

Base: masterHead: claude/festive-ptolemy-yoZ36


📝 Commits (3)

  • 919aa45 [AI] Add npmMinimalAgeGate to block dependency versions newer than 3 days
  • ebb4415 [autofix.ci] apply automated fixes
  • d61d0e5 [AI] Add release notes for npm minimal age gate

📊 Changes

2 files changed (+11 additions, -0 deletions)

View changed files

📝 .yarnrc.yml (+5 -0)
upcoming-release-notes/8011.md (+6 -0)

📄 Description

Description

Extra protection when we are doing dependency upgrades.

Plus should make the upgrade ergonomics slightly better as we won't need to manually check the release date for the version bumps.

n/a

Testing

N/A

Checklist

  • Release notes added (see link above)
  • No obvious regressions in affected areas
  • Self-review has been performed - I understand what each change in the code does and why it is needed

https://claude.ai/code/session_01SVxxPz4Ku8GmkYzTLrLQWo


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/actualbudget/actual/pull/8011 **Author:** [@MatissJanis](https://github.com/MatissJanis) **Created:** 5/31/2026 **Status:** ✅ Merged **Merged:** 6/1/2026 **Merged by:** [@MatissJanis](https://github.com/MatissJanis) **Base:** `master` ← **Head:** `claude/festive-ptolemy-yoZ36` --- ### 📝 Commits (3) - [`919aa45`](https://github.com/actualbudget/actual/commit/919aa450b2026a9297e90369347ea183c4c1d060) [AI] Add npmMinimalAgeGate to block dependency versions newer than 3 days - [`ebb4415`](https://github.com/actualbudget/actual/commit/ebb4415e925bf08867f12cea3adc87f534747487) [autofix.ci] apply automated fixes - [`d61d0e5`](https://github.com/actualbudget/actual/commit/d61d0e57b0d2029bda2fbe0c403cf3f8f9037b63) [AI] Add release notes for npm minimal age gate ### 📊 Changes **2 files changed** (+11 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `.yarnrc.yml` (+5 -0) ➕ `upcoming-release-notes/8011.md` (+6 -0) </details> ### 📄 Description ## Description Extra protection when we are doing dependency upgrades. Plus should make the upgrade ergonomics slightly better as we won't need to manually check the release date for the version bumps. ## Related issue(s) <!-- Add any related issue numbers here if applicable --> n/a ## Testing N/A ## Checklist - [x] Release notes added (see link above) - [x] No obvious regressions in affected areas - [x] Self-review has been performed - I understand what each change in the code does and why it is needed https://claude.ai/code/session_01SVxxPz4Ku8GmkYzTLrLQWo --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-06-02 18:53:46 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/actual#109767