use lock file

Author: baseballyama

.npmrc

@@ -1,2 +1 @@
-package-lock=false
 enable-pre-post-scripts=true

docs-svelte-kit/package.json

@@ -4,8 +4,8 @@
   "type": "module",
   "version": "0.0.0",
   "scripts": {
-    "lint": "eslint --cache .",
-    "lint-fix": "eslint --cache . --fix",
+    "lint": "eslint --concurrency auto --cache .",
+    "lint-fix": "eslint --concurrency auto --cache . --fix",
     "build": "cd ../packages/eslint-plugin-svelte && pnpm build && cd ../../docs-svelte-kit && pnpm run svelte-kit build",
     "preview": "pnpm run svelte-kit preview",
     "dev": "pnpm run svelte-kit dev",

packages/eslint-plugin-svelte/package.json

@@ -35,7 +35,7 @@
     "debug": "pnpm run mocha \"tests/src/**/*.ts\" --reporter dot --timeout 60000",
     "lint": "run-p lint:*",
     "lint-fix": "pnpm run lint:es --fix",
-    "lint:es": "eslint --cache .",
+    "lint:es": "eslint --concurrency auto --cache .",
     "mocha": "pnpm run ts ./node_modules/mocha/bin/mocha.js",
     "new": "pnpm run ts ./tools/new-rule.ts",
     "prebuild": "pnpm run clean",
@@ -69,7 +69,7 @@
     "postcss-load-config": "^3.1.4",
     "postcss-safe-parser": "^7.0.0",
     "semver": "^7.6.3",
-    "svelte-eslint-parser": "^1.3.0"
+    "svelte-eslint-parser": "^1.4.0"
   },
   "devDependencies": {
     "@babel/core": "^7.28.3",
@@ -103,7 +103,7 @@
     "sass": "^1.92.0",
     "source-map-js": "^1.2.1",
     "stylus": "^0.64.0",
-    "svelte": "^5.38.6",
+    "svelte": "^5.41.0",
     "svelte-i18n": "^4.0.1",
     "tsx": "^4.20.5",
     "type-coverage": "^2.29.7",

pnpm-workspace.yaml

@@ -1,3 +1,12 @@
+# Do not adopt new versions of dependency libraries within the first 24 hours of their release (to reduce the risk of supply chain attacks).
+minimumReleaseAge: 1440
+
+minimumReleaseAgeExclude:
+  - svelte-eslint-parser
+  - svelte
+  - '@ota-meshi/*'
+  - typescript-eslint-parser-for-extra-files
+
 packages:
   - 'packages/*'
   - 'docs-svelte-kit'