From fd97944a8543e3a0a352e73be1e1089db4426dd2 Mon Sep 17 00:00:00 2001
From: "socket-pr-bot[bot]"
 <294242679+socket-pr-bot[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 09:14:03 +0000
Subject: [PATCH] chore(deps): promote soaked exclusions (2026-07-30)

- taze@19.16.0 soak cleared (published 2026-07-22)
- js-yaml@5.2.2 soak cleared (published 2026-07-23)
---
 pnpm-workspace.yaml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index df0f8c55f..091f52971 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -143,17 +143,10 @@ minimumReleaseAgeExclude:
   # runner's whole-tree gate needs. The main package + its per-platform binary
   # family are pinned to the exact version (a scope glob would blanket-bypass a
   # future publish); exact-pinned so a future version re-soaks.
-  # taze 19.16.0 — the dep updater itself; forced ahead of the soak by owner
-  # directive so the regenerated single-registry patch (patchedDependencies)
-  # tracks the current release. Exact-pinned so a future version re-soaks.
-  # published: 2026-07-22 | removable: 2026-07-29
-  - 'taze@19.16.0'
   # verkit — new dev-only transitive of taze 19.16.0 (same owner directive);
   # exact-pinned so future versions re-soak.
   # published: 2026-07-24 | removable: 2026-07-31
   - '@shadscan/cli@0.2.0'
-  # published: 2026-07-23 | removable: 2026-07-30
-  - 'js-yaml@5.2.2'
 
 # Refuse transitive dependencies declared via git/tarball/local-tarball
 # specs — an npm package shouldn't be allowed to drag in a git URL we