tighten security (#213)

Tbaut · web-flow · commit 09b5315a80ef · 2026-04-07T18:20:02.000+01:00
diff --git a/.github/workflows/cloudflare-deployment.yaml b/.github/workflows/cloudflare-deployment.yaml
@@ -22,7 +22,7 @@ jobs:
       - name: Install pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.29.3
+          version: 10.33.0
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
@@ -19,7 +19,7 @@ jobs:
       - name: Install pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.29.3
+          version: 10.33.0
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
diff --git a/.tool-versions b/.tool-versions
@@ -1,2 +1,2 @@
 nodejs 22.16.0
-pnpm 10.29.3
+pnpm 10.33.0
diff --git a/package.json b/package.json
@@ -71,5 +71,5 @@
     "typescript": "^6.0.2",
     "vite": "^8.0.5"
   },
-  "packageManager": "pnpm@10.29.3"
+  "packageManager": "pnpm@10.33.0"
 }
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -0,0 +1,6 @@
+blockExoticSubdeps: true
+minimumReleaseAge: 4320 # 3 days
+minimumReleaseAgeExclude: [
+  "@gnosispay/*"
+]
+trustPolicy: "no-downgrade"
diff --git a/pse-backend-demo/package.json b/pse-backend-demo/package.json
@@ -62,5 +62,5 @@
     "skipNodeModulesBundle": true,
     "publicDir": "src/static"
   },
-  "packageManager": "pnpm@10.29.3"
+  "packageManager": "pnpm@10.33.0"
 }
diff --git a/pse-backend-demo/pnpm-workspace.yaml b/pse-backend-demo/pnpm-workspace.yaml
@@ -0,0 +1,6 @@
+blockExoticSubdeps: true
+minimumReleaseAge: 4320 # 3 days
+minimumReleaseAgeExclude: [
+  "@gnosispay/*"
+]
+trustPolicy: "no-downgrade"

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`nodejs 22.16.0`
`2`		`-pnpm 10.29.3`
	`2`	`+pnpm 10.33.0`
Original file line number	Diff line number	Diff line change
`@@ -71,5 +71,5 @@`
`71`	`71`	`"typescript": "^6.0.2",`
`72`	`72`	`"vite": "^8.0.5"`
`73`	`73`	`},`
`74`		`- "packageManager": "pnpm@10.29.3"`
	`74`	`+ "packageManager": "pnpm@10.33.0"`
`75`	`75`	`}`
Original file line number	Diff line number	Diff line change
`@@ -62,5 +62,5 @@`
`62`	`62`	`"skipNodeModulesBundle": true,`
`63`	`63`	`"publicDir": "src/static"`
`64`	`64`	`},`
`65`		`- "packageManager": "pnpm@10.29.3"`
	`65`	`+ "packageManager": "pnpm@10.33.0"`
`66`	`66`	`}`