From cc20fd2328117bf49d062df583e1cd09114a8985 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9D=A4=E6=98=AF=E7=BA=B1=E9=9B=BE=E9=85=B1=E5=93=9F?=
 =?UTF-8?q?=EF=BD=9E?= <49941141+Dragon1573@users.noreply.github.com>
Date: Tue, 11 Aug 2026 22:03:48 +0800
Subject: [PATCH] chore(renovate): enable supply-chain-attack protection
 (#7723)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Configure Mend Renovate to match default pnpm "min age" setting
- Prevent pull request creation for npm dependencies younger than 1 day

Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com>
---
 renovate.json | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/renovate.json b/renovate.json
index 0180f75df..eefd68097 100644
--- a/renovate.json
+++ b/renovate.json
@@ -14,6 +14,8 @@
     "shared/**"
   ],
   "rangeStrategy": "replace",
+  "prCreation": "not-pending",
+  "internalChecksFilter": "strict",
   "packageRules": [
     {
       "matchUpdateTypes": ["patch"],
@@ -50,6 +52,11 @@
       "matchManagers": ["npm"],
       "matchPackageNames": ["typescript"],
       "allowedVersions": "<7.0.0 || >=7.1.0"
+    },
+    {
+      "description": "Prevent project from supply chain attack",
+      "matchDatasources": ["npm"],
+      "minimumReleaseAge": "1 days"
     }
   ],
   "postUpdateOptions": ["pnpmDedupe"],