mirror of
https://github.com/CopilotKit/CopilotKit.git
synced 2026-09-14 16:26:20 +08:00
Benjamin Taylor
1110f18e30
The packed Channels umbrella (and the runtime-package verify) install first-party packages straight from the registry, so a just-published @copilotkit/* version fails pnpm's 24h minimumReleaseAge check — this is what reddened `unit (20.x)` on channels PRs. The enumerated exclude lists drift every time an internal dependency is added (main already had to bolt on @copilotkit/channels-core, then #6012 added @copilotkit/core + shared). Wildcard the @copilotkit/* scope (org-owned, same publish pipeline — no outsider can inject a package, and it stops the drift). Keep @ag-ui enumerated rather than wildcarded: it's a separate upstream org, so we don't extend immediate-install trust to its entire scope. Third-party deps stay fully gated. Applied to both the generated consumer workspace and the repo-root .npmrc. Verified: `pnpm run verify:channels-umbrella` installs the packed umbrella with no ERR_PNPM_NO_MATURE_MATCHING_VERSION; umbrella unit tests green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
17 lines
878 B
Plaintext
17 lines
878 B
Plaintext
minimum-release-age=1440
|
|
# Exempt first-party publishes from the release-age gate — cross-repo deps
|
|
# regularly pull a just-released version that would otherwise fail the 24h
|
|
# check. @copilotkit/* is an org-owned scope on our own publish pipeline (no
|
|
# outsider can inject a package), so a wildcard avoids re-enumerating every
|
|
# internal package each time a new one ships. @ag-ui is a separate upstream
|
|
# org, so its packages are enumerated rather than blanket-trusting the scope.
|
|
minimum-release-age-exclude[]=@copilotkit/*
|
|
minimum-release-age-exclude[]=@ag-ui/core
|
|
minimum-release-age-exclude[]=@ag-ui/client
|
|
minimum-release-age-exclude[]=@ag-ui/encoder
|
|
minimum-release-age-exclude[]=@ag-ui/proto
|
|
minimum-release-age-exclude[]=@ag-ui/langgraph
|
|
minimum-release-age-exclude[]=@ag-ui/a2ui-middleware
|
|
minimum-release-age-exclude[]=@ag-ui/a2ui-toolkit
|
|
block-exotic-subdeps=true
|