From a4d5112b37c1b012b761df66286e73b858205482 Mon Sep 17 00:00:00 2001
From: mcgrew-oai <146999853+mcgrew-oai@users.noreply.github.com>
Date: Sun, 12 Apr 2026 16:27:44 -0400
Subject: [PATCH] build(pnpm): require reviewed dependency build scripts
 (#17558)

## Description

Enable pnpm's reviewed build-script gate for this repo.

## What changed

- added `strictDepBuilds: true` to `pnpm-workspace.yaml`

## Why

The repo already uses pinned pnpm and frozen installs in CI. This adds
the remaining guard so dependency build scripts do not run unless they
are explicitly reviewed.

## Validation

- ran `pnpm install --frozen-lockfile`

Co-authored-by: Codex <noreply@openai.com>
---
 pnpm-workspace.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index a47e4bd8a..8643d3f90 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -9,3 +9,4 @@ ignoredBuiltDependencies:
 minimumReleaseAge: 10080
 
 blockExoticSubdeps: true
+strictDepBuilds: true