Skip to content

Configure npm Minimum Release Age and Patch proxy-addr - #292

Merged
jonfairbanks merged 2 commits into
masterfrom
feature/npm-min-release-age
Sep 19, 2026
Merged

jonfairbanks merged 2 commits into
masterfrom
feature/npm-min-release-age

Conversation

@jonfairbanks

@jonfairbanks jonfairbanks commented Sep 19, 2026

Copy link
Copy Markdown
Owner

Summary

  • Add a root .npmrc containing min-release-age=7.
  • Update the locked proxy-addr dependency from 2.0.7 to 2.0.8 to fix the critical vulnerability reported by Snyk.
  • Apply an approved one-time release-age exception for this patch; retain the seven-day setting without a permanent exclusion.

@jonfairbanks jonfairbanks changed the title Configure npm Minimum Release Age Configure npm Minimum Release Age and Patch proxy-addr Sep 19, 2026
@jonfairbanks
jonfairbanks merged commit 6ae5e45 into master Sep 19, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant