Merge pull request #5060 from Dokploy/fix/aws-sdk-minimum-release-age-exclude

fix: disable minimumReleaseAge, it broke the Docker build on unrelated AWS SDK deps

apps/dokploy/package.json

@@ -47,8 +47,8 @@
 		"@ai-sdk/mistral": "^3.0.20",
 		"@ai-sdk/openai": "^3.0.29",
 		"@ai-sdk/openai-compatible": "^2.0.30",
-		"@aws-sdk/client-route-53": "^3.1097.0",
-		"@aws-sdk/client-secrets-manager": "^3.1097.0",
+		"@aws-sdk/client-route-53": "^3.1108.0",
+		"@aws-sdk/client-secrets-manager": "^3.1108.0",
 		"@better-auth/api-key": "1.6.23",
 		"@better-auth/passkey": "1.6.23",
 		"@better-auth/scim": "1.6.23",

packages/server/package.json

@@ -37,8 +37,8 @@
     "@ai-sdk/mistral": "^3.0.20",
     "@ai-sdk/openai": "^3.0.29",
     "@ai-sdk/openai-compatible": "^2.0.30",
-    "@aws-sdk/client-route-53": "^3.1097.0",
-    "@aws-sdk/client-secrets-manager": "^3.1097.0",
+    "@aws-sdk/client-route-53": "^3.1108.0",
+    "@aws-sdk/client-secrets-manager": "^3.1108.0",
     "@better-auth/api-key": "1.6.23",
     "@better-auth/passkey": "1.6.23",
     "@better-auth/scim": "1.6.23",

pnpm-workspace.yaml

@@ -4,8 +4,10 @@ packages:
   - "apps/schedules"
   - "packages/server"
 
-# Supply-chain hardening: refuse package versions younger than 3 days (4320 min),
+# Supply-chain hardening: refuse package versions younger than N days,
 # so newly-published malicious versions get caught/yanked before we install them.
-minimumReleaseAge: 4320
+# Disabled for now — kept breaking builds on unrelated fresh transitive deps
+# (see PR #4679). Re-enable when there's a per-scope threshold or exclude list.
+# minimumReleaseAge: 1440