From 2f2b58f039612736038a81cef2d4a9f96f223ca6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mateusz=20Burzy=C5=84ski?= <mateuszburzynski@gmail.com>
Date: Sat, 16 May 2026 17:11:49 +0200
Subject: [PATCH] Harden `pnpm` config

---
 package.json        | 2 +-
 pnpm-workspace.yaml | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 4b3ba40..ec3f3a6 100644
--- a/package.json
+++ b/package.json
@@ -41,5 +41,5 @@
   "engines": {
     "node": "^22.11 || ^24 || >=26"
   },
-  "packageManager": "pnpm@11.1.0"
+  "packageManager": "pnpm@11.1.1+sha512.d1fdf5f73c617b64fa1a56a81c3c8dfe0e966e33a6010aa256b517ae77be21d93e05affc0de1a83b0e4f29d569f68b446ae8f068cd7247c0bb3df0fb4d7bdf9a"
 }
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index cb885e7..9619506 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -5,9 +5,13 @@ packages:
 allowBuilds:
   dprint: true
 
+blockExoticSubdeps: true
 dedupePeers: true
+dedupePeerDependents: true
+minimumReleaseAge: 10080
 
 overrides:
   rolldown: ^1.0.0
 
 shellEmulator: true
+trustPolicy: no-downgrade