security: stricter pnpm config blockExoticSubdeps & trustPolicy

[Sheraff]

Enables pnpm's no-downgrade trust policy and blocks exotic transitive dependencies via blockExoticSubdeps.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 18fec30b-51dd-4af9-a335-1dbaa2c21693

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[pkg-pr-new]

• @tanstack/time-example-react-basic
• @tanstack/time-example-react-timeline

@tanstack/react-time

npm i https://pkg.pr.new/TanStack/time/@tanstack/react-time@21

@tanstack/react-time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/react-time-devtools@21

@tanstack/solid-time

npm i https://pkg.pr.new/TanStack/time/@tanstack/solid-time@21

@tanstack/solid-time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/solid-time-devtools@21

@tanstack/time

npm i https://pkg.pr.new/TanStack/time/@tanstack/time@21

@tanstack/time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/time-devtools@21

commit: 2756e7a

[bart-krakowski]

🙌