Merge pull request #618 from preactjs/chore/pnpm-11-supply-chain-window

Upgrade pnpm supply-chain safeguards

Author: JoviDeCroock

.github/workflows/release.yml

@@ -38,7 +38,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v3
         with:
-          version: 10
+          version: 11.0.0
           run_install: false
 
       - name: Install Dependencies
@@ -83,7 +83,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v3
         with:
-          version: 10
+          version: 11.0.0
           run_install: false
 
       - name: Install Dependencies

.github/workflows/test.yml

@@ -26,7 +26,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v3
         with:
-          version: 10
+          version: 11.0.0
           run_install: false
 
       - name: Get pnpm store directory
@@ -47,10 +47,10 @@ jobs:
       - name: Setup Puppeteer
         run: npx puppeteer browsers install chrome
       - name: Build packages
-        run: yarn build
+        run: pnpm build
 
       - name: Run tests
-        run: yarn test
+        run: pnpm test
         env:
           CI: false
 

pnpm-workspace.yaml

@@ -1,2 +1,11 @@
 packages:
   - 'packages/*'
+
+minimumReleaseAge: 10080
+
+blockExoticSubdeps: true
+
+allowBuilds:
+  core-js: true
+  fsevents: true
+  puppeteer: true