Skip to content

security: stricter pnpm config blockExoticSubdeps & trustPolicy - #21

Merged
bart-krakowski merged 1 commit into
TanStack:alphafrom
Sheraff:stricter-pnpm-deps-config
May 18, 2026
Merged

bart-krakowski merged 1 commit into
TanStack:alphafrom
Sheraff:stricter-pnpm-deps-config

Conversation

@Sheraff

@Sheraff Sheraff commented May 17, 2026

Copy link
Copy Markdown

Enables pnpm's no-downgrade trust policy and blocks exotic transitive dependencies via blockExoticSubdeps.

@coderabbitai

coderabbitai Bot commented May 17, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 18fec30b-51dd-4af9-a335-1dbaa2c21693

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

@pkg-pr-new

pkg-pr-new Bot commented May 17, 2026

Copy link
Copy Markdown
@tanstack/react-time

npm i https://pkg.pr.new/TanStack/time/@tanstack/react-time@21

@tanstack/react-time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/react-time-devtools@21

@tanstack/solid-time

npm i https://pkg.pr.new/TanStack/time/@tanstack/solid-time@21

@tanstack/solid-time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/solid-time-devtools@21

@tanstack/time

npm i https://pkg.pr.new/TanStack/time/@tanstack/time@21

@tanstack/time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/time-devtools@21

commit: 2756e7a

@bart-krakowski bart-krakowski left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🙌

@bart-krakowski
bart-krakowski merged commit 29dcb6d into TanStack:alpha May 18, 2026
7 of 8 checks passed
bart-krakowski added a commit that referenced this pull request Sep 22, 2026
* chore: project setup

* fix: resolve CI test failures

- Fix sherif: sort dependencies alphabetically, align solid-js and @eslint-react/eslint-plugin versions
- Add missing devDependencies (@vitejs/plugin-react to react-time-devtools)
- Fix solid-time-devtools JSX build by using pre-compiled solid template
- Fix vitest configs: remove references to non-existent test-setup.ts files
- Fix time package test:lib: add --passWithNoTests flag
- Configure react-time-devtools tsdown with jsx: 'automatic'
- Update knip.json to ignore intentional template dependencies
- Remove unused test-setup.ts files
- Remove unused React imports from examples

* chore: project setup

* ci: apply automated fixes

* feat: base

* ci: apply automated fixes

* feat: parse

* feat: withDateOperation HOF and startOf util

* ci: apply automated fixes

* feat: endOf util

* ci: apply automated fixes

* feat: returnFormat option

* feat: utils

* ci: apply automated fixes

* feat: utils

* ci: apply automated fixes

* feat: date comparition utils

* ci: apply automated fixes

* feat: date comparition utils

* ci: apply automated fixes

* refactor: date comparition utils

* refactor: date comparition utils

* ci: apply automated fixes

* feat: format util

* feat: format util

* ci: apply automated fixes

* feat: isLeapYear, isWeekend and isWeekday utils

* feat: isLeapYear, isWeekend and isWeekday utils

* ci: apply automated fixes

* feat: range util

* ci: apply automated fixes

* refactor: date utils

* ci: apply automated fixes

* feat: calendar

* ci: apply automated fixes

* feat: calendar

* feat: calendar

* feat: calendar

* ci: apply automated fixes

* feat: event resize

* feat: event resize

* feat: event resize

* feat: event resize

* feat: event resize

* feat: event resize

* feat: event resize

* feat: calendar

* feat: calendar example

* feat: calendar example

* feat: calendar example

* feat: availability rules

* feat: availability rules

* feat: resources

* feat: devtools setup

* feat: devtools

* feat: calendar

* ci: apply automated fixes

* feat: timeline example

* feat: timeline

* ci: apply automated fixes

* feat: timeline

* feat: timeline

* feat: timeline

* feat: lazy loading

* feat: timeline

* ci: apply automated fixes

* feat: recursive events

* ci: apply automated fixes

* feat: infinite loading

* feat: capacity/consumption

* feat: capacity/consumption

* ci: apply automated fixes

* feat: capacity/consumption

* feat: capacity/consumption

* feat: dependencies

* test: calendar core

* fix: calendar

* test: calendar core

* ci: apply automated fixes

* docs: roadmap

* style: format

* ci: apply automated fixes

* feat: undo and redo

* ci: apply automated fixes

* feat: go to next/previous occurrence

* ci: apply automated fixes

* ci: add zizmor workflow (#19)

Co-authored-by: Bartłomiej Krakowski <48633090+bart-krakowski@users.noreply.github.com>

* feat: undo and redo

* ci: apply automated fixes

* fix: calendar

* feat: calendar

* ci: apply automated fixes

* feat: all-day events

* chore(pnpm): update pnpm to v11 (#20)

* security: stricter pnpm config blockExoticSubdeps & trustPolicy (#21)

* feat: calendar example

* feat: calendar example

* ci: apply automated fixes

* chore: enforce pnpm 11 (#22)

Co-authored-by: Bartłomiej Krakowski <48633090+bart-krakowski@users.noreply.github.com>

* chore: migrate changesets changelog generator (#23)

* chore: ai infrastructure

* ci: apply automated fixes

* perf: calendar core

* ci: apply automated fixes

* feat: recurrence exceptions

* ci: apply automated fixes

* feat: calendar

* ci: apply automated fixes

* docs: adrs

* ci: apply automated fixes

* feat: date primitives functions (#39)

* ci: apply automated fixes

* chore: update pnpm to 11.9

* chore: set pnpm minimum release age

---------

Co-authored-by: Bart Krakowski <bartlomiej@krakowski.dev>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Bartłomiej Krakowski <48633090+bart-krakowski@users.noreply.github.com>
Co-authored-by: Harry Whorlow <79278353+harry-whorlow@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants