chore: lower safe-chain / pnpm minimum package age to 48h

.changeset/config.json

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://unpkg.com/@changesets/config@3.1.1/schema.json",
+  "$schema": "https://unpkg.com/@changesets/config@4.0.0/schema.json",
   "changelog": [
     "../internals/changelog/index.mjs",
     {
@@ -11,10 +11,10 @@
   "linked": [],
   "access": "restricted",
   "baseBranch": "main",
+  "format": "oxfmt",
   "updateInternalDependencies": "patch",
   "___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH": {
     "onlyUpdatePeerDependentsWhenOutOfRange": true
   },
-  "useCalculatedVersion": true,
   "ignore": ["@internals/*"]
 }

.github/workflows/autofix.yml

@@ -25,7 +25,7 @@ jobs:
           fetch-depth: 2
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 

.github/workflows/changeset-format.yml

@@ -23,7 +23,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 

.github/workflows/copilot-setup-steps.yml

@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 

.github/workflows/pr.yml

@@ -25,7 +25,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 
@@ -47,7 +47,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 
@@ -72,7 +72,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 
@@ -102,7 +102,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 
@@ -127,7 +127,7 @@ jobs:
           fetch-depth: 2
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 
@@ -152,7 +152,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 
@@ -199,7 +199,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 
@@ -225,7 +225,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
 

.github/workflows/release.yml

@@ -37,7 +37,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
           cache: 'false'
@@ -48,26 +48,24 @@ jobs:
 
       - name: Release
         id: release
-        uses: kubb-labs/config/.github/actions/release@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/actions/release@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       # Canary skips staging on purpose, so it stays automatic on every push.
-      # If the npm Trusted Publisher for these packages is ever locked to
-      # stage-only, this step will need its own non-stage-restricted entry.
       - name: Publish canary
         if: ${{ steps.release.outputs.staged != 'true' && github.event_name == 'push' && github.ref == 'refs/heads/main' }}
         continue-on-error: true
         shell: bash
         env:
           NPM_CONFIG_PROVENANCE: true
-        # Every main push publishes 0.0.0-canary-<UTC timestamp> under the
-        # `canary` dist-tag. The 0.0.0 base guarantees canaries sort below any
-        # real release and never collide with the `latest` tag.
+        # The 0.0.0 base guarantees canaries sort below any real release.
+        # --no-git-checks: the first bump dirties the tree, which would make
+        # pnpm version refuse for every package after it.
         run: |
           canary_version="0.0.0-canary-$(date -u +%Y%m%d%H%M%S)"
           echo "Canary version: ${canary_version}"
-          pnpm -r exec pnpm version "${canary_version}" --no-git-tag-version --allow-same-version
+          pnpm -r exec pnpm version "${canary_version}" --no-git-tag-version --allow-same-version --no-git-checks
           pnpm run build
           pnpm exec changeset publish --tag canary
 
@@ -90,7 +88,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Tools
-        uses: kubb-labs/config/.github/setup@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/setup@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           node-version: '22.22.3'
           cache: 'false'
@@ -104,7 +102,7 @@ jobs:
       # version independently.
       - name: Promote
         id: promote
-        uses: kubb-labs/config/.github/actions/promote@909a85919614def70d99dff599c943f1c5755975 # main
+        uses: kubb-labs/config/.github/actions/promote@3f4c08f50e67174c9e0ba09290bc79199f50ddfb # main
         with:
           staged-packages: ${{ needs.release.outputs.staged_packages }}
           github-token: ${{ secrets.GITHUB_TOKEN }}

.npmrc

@@ -1,6 +1,6 @@
 registry=https://registry.npmjs.org/
-# The 72h minimum-package-age policy (Aikido checklist #11) lives in
+# The 48h minimum-package-age policy (Aikido checklist #11) lives in
 # pnpm-workspace.yaml's minimumReleaseAge and CI's safe-chain
-# (SAFE_CHAIN_MINIMUM_PACKAGE_AGE_HOURS=72). No .npmrc equivalent exists,
+# (SAFE_CHAIN_MINIMUM_PACKAGE_AGE_HOURS=48). No .npmrc equivalent exists,
 # so it isn't set here.
 resolution-mode=highest

package.json

@@ -32,8 +32,8 @@
     "upgrade": "npx taze -r -w --exclude pnpm --maturity-period 3"
   },
   "devDependencies": {
-    "@changesets/changelog-github": "^0.7.0",
-    "@changesets/cli": "^2.31.1",
+    "@changesets/changelog-github": "^1.0.0",
+    "@changesets/cli": "^3.0.0",
     "@types/node": "catalog:",
     "@vitest/coverage-v8": "catalog:",
     "@vitest/ui": "catalog:",