# Match the CI runner's supply-chain policy so a lockfile resolved here is one
# CI will accept. Without it, `pnpm install` locally can pick a package
# published minutes ago, and the build only fails later on the runner --
# which is exactly what happened on run 12.
#
# 1440 minutes = 24h, the runner's cutoff.
minimum-release-age=1440

# Treat a dependency whose build script was skipped as an error, not a warning.
# The runner does; without this the local install passes, the runner fails, and
# the difference is only discoverable by pushing.
strict-dep-builds=true
