Enforce dependency minimum release age

[notaphplover]

Changed

• Updated trust policy to enforce minimum release age

Summary by CodeRabbit

• Documentation

  • Updated GitHub issue template to direct users to GitHub Discussions for questions and help resources.

• Chores

  • Enhanced dependency management configuration to improve stability and update handling.

[changeset-bot]

⚠️ No Changeset found

Latest commit: ad0ba49

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a4552c1b-5272-4290-8961-5401fc3ccec8

📥 Commits

Reviewing files that changed from the base of the PR and between dd6b773 and ad0ba49.

📒 Files selected for processing (3)

• .github/ISSUE_TEMPLATE/question.yml
• .github/renovate.json
• pnpm-workspace.yaml

---

📝 Walkthrough

Walkthrough

This pull request updates three configuration files to improve project governance and contributor guidance. The GitHub issue template is enhanced to direct questions toward GitHub Discussions; Renovate configuration adds a rule preventing npm updates younger than 3 days from being applied; and pnpm workspace configuration adds a corresponding release age setting.

Changes

Project Configuration and Template Updates

Layer / File(s)	Summary
Issue template GitHub Discussions guidance .github/ISSUE_TEMPLATE/question.yml	The question template description and resource list are updated to include GitHub Discussions as a primary help option alongside StackOverflow.
Renovate npm release age rule .github/renovate.json	A new packageRules entry is inserted to enforce a minimum 3-day release age for npm dependency updates, with structural adjustments to the surrounding config.
pnpm workspace release age configuration pnpm-workspace.yaml	A minimumReleaseAge top-level setting is added and the strictPeerDependencies key is repositioned within the workspace configuration.

Estimated Code Review Effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Poem

🐰 A tale of configs fine and true,
GitHub Discussions guide folks through,
Renovate slows the speedy releases,
While pnpm keeps the workspace eases,
Small tweaks for smoother project flows!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Enforce dependency minimum release age' directly and accurately summarizes the main change across all files: adding minimum release age policies to both Renovate configuration and pnpm workspace settings.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/enforce-minium-release-age-policy

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}