Skip to content

Security bumps #779

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
james-od wants to merge 9 commits into
base: main
Choose a base branch
from
Draft

Security bumps #779

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
2e7ca83
Bump axios to 1.13.5
james-od Feb 24, 2026
7da0c6e
Bump typescript estlin plugin
james-od Feb 24, 2026
9def697
Remove package-lock.json since pnpm now
james-od Feb 24, 2026
69e092b
Remove eslint-config-standard-with-typescript
james-od Feb 24, 2026
ed14fa7
Bump api-extractor
james-od Feb 24, 2026
7fe7c00
Temporarily bump min age
james-od Feb 24, 2026
06255cf
Eslint bumps
james-od Feb 24, 2026
55a879b
Just remove 'eslint-plugin-storybook'?
james-od Feb 24, 2026
901eb3e
Merge branch 'main' into security_bumps
nicfix Feb 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .npmrc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
# Security: Enforce a 1-day cooldown before installing newly published packages
# This helps prevent supply chain attacks by giving the community time to identify malicious releases
# Value is in minutes (1440 = 24 hours)
minimum-release-age=1440
# Temporarily drop for minimatch fix
minimum-release-age=720

# We are pinning the purchases-ui-js version that we are developing.
# We can exclude it from the minimum-release-age check.
Expand Down
Loading