nodeLinker: node-modules

# First-party @ivuorinen packages are exempt from the npmMinimalAgeGate
# supply-chain check, so freshly released config packages can be consumed
# immediately. The age gate still applies to all third-party packages.
npmPreapprovedPackages:
  - '@ivuorinen/*'

# Resolve no third-party version until it has been on the registry for three
# days, the window the shared Renovate preset waits (minimumReleaseAge). Yarn 4
# already gates at one day by default; declaring it keeps a future default
# change from silently removing the guard the exemption above refers to.
npmMinimalAgeGate: 3d