chore: set minimum age gap for dependencies update#762
Conversation
|
|
In Central, we're also doing |
|
Approved because it's a step in the right direction. We should standardise on the ODK policy when it's decided. I think ignore scripts is also very important because that stops the worst hacks. We can opt back in to specific scripts that we need to run by setting the dependenciesMeta in the package.json. |
| "packages/*" | ||
| ], | ||
| "scripts": { | ||
| "preinstall": "npx only-allow yarn", |
There was a problem hiding this comment.
Removing this because the project uses Yarn 4, packageManager, and Volta, which should be sufficient.
I have verified this PR works in these browsers (latest versions):
What else has been done to verify that this works as intended?
Why is this the best possible solution? Were any other approaches considered?
How does this change affect users? Describe intentional changes to behavior and behavior that could have accidentally been affected by code changes. In other words, what are the regression risks?
Do we need any specific form for testing your changes? If so, please attach one.
What's changed
Discussed here