From fd55b964fc59a2ed96418cd389a45d836909e1bb Mon Sep 17 00:00:00 2001
From: bvolpato <brunocvcunha@gmail.com>
Date: Wed, 21 Oct 2026 13:34:29 -0400
Subject: [PATCH] Enforce seven-day package release age

---
 .github/dependabot.yml                | 1 +
 .github/workflows/lint-on-push-pr.yml | 4 ++++
 .npmrc                                | 1 +
 3 files changed, 6 insertions(+)
 create mode 100644 .npmrc

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 466f02c..2ad86f3 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -13,6 +13,7 @@ updates:
     schedule:
       interval: daily
     cooldown:
+      default-days: 7
       semver-minor-days: 7
     groups:
       dev-dependencies:
diff --git a/.github/workflows/lint-on-push-pr.yml b/.github/workflows/lint-on-push-pr.yml
index 2ce051b..32df80f 100644
--- a/.github/workflows/lint-on-push-pr.yml
+++ b/.github/workflows/lint-on-push-pr.yml
@@ -11,5 +11,9 @@ jobs:
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 24
+      - name: Use npm with release-age support
+        run: |
+          npm install --global --prefix "$RUNNER_TEMP/npm-tools" npm@11.21.0 --ignore-scripts --no-audit --no-fund --before="$(node -e 'process.stdout.write(new Date(Date.now() - 7 * 24 * 60 * 60 * 1000).toISOString())')"
+          echo "$RUNNER_TEMP/npm-tools/bin" >> "$GITHUB_PATH"
       - run: npm ci --ignore-scripts
       - run: npm run lint
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..7253a5c
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+min-release-age=7