Skip to content

chore: raise dependency cooldown to 7 days - #1168

Open
filakovsky wants to merge 1 commit into
masterfrom
chore/dependency-cooldown-7-days
Open

filakovsky wants to merge 1 commit into
masterfrom
chore/dependency-cooldown-7-days

Conversation

@filakovsky

Copy link
Copy Markdown

Raises the dependency cooldown to at least 7 days for every package manager in this repo, so a newly published (and possibly compromised) version isn't installed until it has been public for a week.

Changes

  • pnpm: pnpm-workspace.yaml: minimumReleaseAge 1440 → 10080 (24 hours → 7 days)
  • Renovate: renovate.json: minimumReleaseAge 1 day → 7 days

Notes

  • Exclusions for packages published by Apify are unchanged.
  • Renovate waits 7 days too. Otherwise it would open update PRs that the package manager refuses to install.

🤖 Generated with Claude Code

Raise the minimum release age to at least 7 days (pnpm, Renovate) so newly
published versions aren't installed until they've been public for a week.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions github-actions Bot added the t-tooling Issues with this label are in the ownership of the tooling team. label Oct 21, 2026

@apify-factory apify-factory left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, nothing blocking.

🏭 Factory review — ℹ️ not auto-approved

This change was reviewed but cannot be auto-approved: a gate failed, so the review cannot end in an approval.

check result
Static gates ❌ 14/16 — file-extensions, deny-globs
Review findings ✅ none
Reviewer escalation ✅ none
Juror 1 — claude-sonnet-5-5, adversarial ⏭️ skipped — a gate failed
Why it was not auto-approved

Failed gates:

  • file-extensions: disallowed extension: pnpm-workspace.yaml, renovate.json
  • deny-globs: pnpm-workspace.yaml matches pnpm-workspace.yaml

The comments above are the review itself; this section only explains the approval decision. Push a change and request @apify-factory again to re-run it, or ask a human to review.

Reviewed 3e5837395 · workflow run

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

t-tooling Issues with this label are in the ownership of the tooling team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants