stacklok / toolhive-studio / 23804695987

60%

push

github

chore(renovate): add minimumReleaseAge of 3 days (#1881)

* chore(renovate): add minimumReleaseAge of 7 days

Aligns Renovate with the existing min-release-age=7 in .npmrc to provide
defense-in-depth against supply chain attacks. Renovate will now wait
7 days before proposing new dependency versions.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: add min-release-age=7 to .npmrc

Blocks installation of npm packages published less than 7 days ago,
reducing exposure to supply chain attacks at install time.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: correct min-release-age unit from days to minutes

The .npmrc min-release-age setting uses minutes, not days.
7 days = 10080 minutes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: change minimum release age from 7 to 3 days

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2988 of 5227 branches covered (57.16%)

Branch coverage included in aggregate %.

4878 of 7791 relevant lines covered (62.61%)

126.03 hits per line