[PR #7634] [MERGED] chore: update pnpm and enable new security features #24356

Closed
opened 2026-04-15 22:19:44 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/7634
Author: @himself65
Created: 1/27/2026
Status: Merged
Merged: 1/27/2026
Merged by: @himself65

Base: canaryHead: himself65/2026/01/27/pnpm


📝 Commits (1)

  • ca85f5d chore: update pnpm and enable new security features

📊 Changes

3 files changed (+800 additions, -2510 deletions)

View changed files

📝 package.json (+1 -1)
📝 pnpm-lock.yaml (+790 -2509)
📝 pnpm-workspace.yaml (+9 -0)

📄 Description

Summary by cubic

Updates pnpm to 10.28.2 and enables stricter workspace security to guard against unsafe dependency changes. This improves supply chain safety and makes installs more predictable.

  • Dependencies

    • Upgrade pnpm to 10.28.2 and refresh pnpm-lock.yaml.
  • New Features

    • Enable blockExoticSubdeps.
    • Set trustPolicy to no-downgrade with trustPolicyIgnoreAfter: 43200.
    • Configure minimumReleaseAge: 0 (keeping future override commented due to upstream issue).

Written for commit ca85f5d278. Summary will update on new commits.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/7634 **Author:** [@himself65](https://github.com/himself65) **Created:** 1/27/2026 **Status:** ✅ Merged **Merged:** 1/27/2026 **Merged by:** [@himself65](https://github.com/himself65) **Base:** `canary` ← **Head:** `himself65/2026/01/27/pnpm` --- ### 📝 Commits (1) - [`ca85f5d`](https://github.com/better-auth/better-auth/commit/ca85f5d278e78c4c5ceb27204c7c3ad70e57269d) chore: update pnpm and enable new security features ### 📊 Changes **3 files changed** (+800 additions, -2510 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) 📝 `pnpm-lock.yaml` (+790 -2509) 📝 `pnpm-workspace.yaml` (+9 -0) </details> ### 📄 Description <!-- This is an auto-generated description by cubic. --> ## Summary by cubic Updates pnpm to 10.28.2 and enables stricter workspace security to guard against unsafe dependency changes. This improves supply chain safety and makes installs more predictable. - **Dependencies** - Upgrade pnpm to 10.28.2 and refresh pnpm-lock.yaml. - **New Features** - Enable blockExoticSubdeps. - Set trustPolicy to no-downgrade with trustPolicyIgnoreAfter: 43200. - Configure minimumReleaseAge: 0 (keeping future override commented due to upstream issue). <sup>Written for commit ca85f5d278e78c4c5ceb27204c7c3ad70e57269d. Summary will update on new commits.</sup> <!-- End of auto-generated description by cubic. --> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-15 22:19:44 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#24356