panates / rman / 40672724234

95%

main: 95%

push

github

feat(deps): follow pnpm's minimumReleaseAge, verify with the installing tool

- In a pnpm repository a package setting no deps.minAge takes pnpm's own
  minimumReleaseAge (pnpm config get, else the 1440-minute default measured
  on pnpm 12.10.1) and minimumReleaseAgeExclude. deps -u wrote releases
  younger than that, and the next plain pnpm install exempted each one in
  pnpm-workspace.yaml without asking (panates/opra).
- verify asks the package manager the lockfile belongs to before
  packageManager.node, which also decides who publishes: opra sets npm for
  provenance, and npm cannot read workspace:^.
- Read a pnpm peer issue's unquoted range (^5.112.0:), which ended the issue
  before its requirers.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

4933 of 5390 branches covered (91.52%)

Branch coverage included in aggregate %.

133 of 139 new or added lines in 2 files covered. (95.68%)

25784 of 26947 relevant lines covered (95.68%)

292.49 hits per line