From c2decf5d249ebc5b086ee24ba493657619ca477c Mon Sep 17 00:00:00 2001 From: Hugo Richard Date: Thu, 21 May 2026 12:17:58 +0100 Subject: [PATCH 1/2] chore(bun): bump packageManager to v1.3.14 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 24f82eb..9b8fcd3 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,7 @@ }, "author": "HugoRCD", "license": "MIT", - "packageManager": "bun@1.2.4", + "packageManager": "bun@1.3.14", "scripts": { "dev": "turbo run dev --filter=my-module-playground", "dev:prepare": "turbo run dev:prepare", From 771d1741a3c47da10b2865492799eb2d4b2cab80 Mon Sep 17 00:00:00 2001 From: Hugo Richard Date: Thu, 21 May 2026 12:17:58 +0100 Subject: [PATCH 2/2] chore(bun): add minimumReleaseAge to harden supply chain --- bunfig.toml | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 bunfig.toml diff --git a/bunfig.toml b/bunfig.toml new file mode 100644 index 0000000..f3e3ba0 --- /dev/null +++ b/bunfig.toml @@ -0,0 +1,3 @@ +[install] +minimumReleaseAge = 172800 +minimumReleaseAgeExcludes = ["@nuxt/*", "@nuxtjs/*", "nuxt", "nuxt-*", "@vercel/*", "@ai-sdk/*", "ai"]