@boldblackai/harness 1.10.0 → 1.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -208,7 +208,7 @@ npx @boldblackai/harness --no-verify -p "write me a fizzbuzz in Go"
|
|
|
208
208
|
|
|
209
209
|
The image build enforces a 7-day cooldown on dependency resolution — a guard against supply-chain compromises that are typically discovered and yanked within hours.
|
|
210
210
|
|
|
211
|
-
- **pnpm**: `
|
|
211
|
+
- **pnpm**: `PNPM_CONFIG_MINIMUM_RELEASE_AGE=10080` (minutes) via environment variable
|
|
212
212
|
- **uv**: `--exclude-newer` set to 7 days ago at image build time
|
|
213
213
|
|
|
214
214
|
The cooldown applies to transitive dependencies too. Older packages install normally.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@boldblackai/harness",
|
|
3
|
-
"version": "1.10.
|
|
3
|
+
"version": "1.10.1",
|
|
4
4
|
"description": "Portable environment for running coding agents in a container",
|
|
5
5
|
"bin": {
|
|
6
6
|
"harness": "bin/harness.js"
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
"type": "git",
|
|
11
11
|
"url": "git+https://github.com/boldblackai/harness.git"
|
|
12
12
|
},
|
|
13
|
-
"packageManager": "pnpm@
|
|
13
|
+
"packageManager": "pnpm@12.3.4",
|
|
14
14
|
"license": "MIT",
|
|
15
15
|
"publishConfig": {
|
|
16
16
|
"access": "public"
|