REPO_POLICIES: pinning covers what we download ourselves; distribution packages are outside it (#156)

2026-11-06 01:18:44 +01:00
parent 9389bf0172
commit 6e5fa4c607
4 changed files with 41 additions and 34 deletions
@@ -21,6 +21,11 @@ fmt-check, and commit.

 # Completed Steps

+- 2026-11-06: The pinning rule in `prompts/REPO_POLICIES.md` now opens with its
+  scope: what we download and install ourselves in scripts and Dockerfiles
+  (https://git.eeqj.de/sneak/prompts/issues/154). Distribution packages are
+  outside the rule, and updating and upgrading them is allowed. Both checklists
+  say the same.
 - 2026-11-04: Each repository now commits yarn 4 and installs with
  `yarn install --immutable` (https://git.eeqj.de/sneak/prompts/issues/149), on
  sneak's ruling at