You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As a maintainer I set minimumReleaseAge and trustPolicy: no-downgrade in every repo I maintain to protect against supply chain attacks.
I also set minimumReleaseAgeExcludePrune and trustPolicyExcludePrune to help keep minimumReleaseAgeExclude and trustPolicyExclude free of outdated entries.
Describe the solution you'd like
minimumReleaseAgeExcludePrune and trustPolicyExcludePrune get default values true instead of false, possibly in the next major version. Users get automatic cleanup of pnpm-workspace.yaml out of the box instead of having to opt-in.
Describe the drawbacks of your solution
I can't think of any drawbacks, but there might be some edge cases where pnpm prunes entries some users want to keep in *exclude for documentation or future changes. They would then have to explicitely set prune to false to keep the old behavior.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Contribution
Describe the user story
As a maintainer I set
minimumReleaseAgeandtrustPolicy: no-downgradein every repo I maintain to protect against supply chain attacks.I also set
minimumReleaseAgeExcludePruneandtrustPolicyExcludePruneto help keepminimumReleaseAgeExcludeandtrustPolicyExcludefree of outdated entries.Describe the solution you'd like
minimumReleaseAgeExcludePruneandtrustPolicyExcludePruneget default values true instead of false, possibly in the next major version. Users get automatic cleanup ofpnpm-workspace.yamlout of the box instead of having to opt-in.Describe the drawbacks of your solution
I can't think of any drawbacks, but there might be some edge cases where pnpm prunes entries some users want to keep in
*excludefor documentation or future changes. They would then have to explicitely set prune to false to keep the old behavior.Describe alternatives you've considered
None
All reactions