From 3975e9d753360d75797b91cc92dac63bbec2a46e Mon Sep 17 00:00:00 2001
From: ethernet <arilotter@gmail.com>
Date: Fri, 31 Jul 2026 12:45:30 -0400
Subject: [PATCH] fix(npm): npm 11.10-12.0 support min-release-age but NOT
 min-release-age-exclude.

that would break stuff :)
---
 .npmrc               | 3 +++
 package.json         | 3 ++-
 website/.npmrc       | 3 +++
 website/package.json | 3 ++-
 4 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/.npmrc b/.npmrc
index 827dcde2398..2c652d8914c 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1,3 +1,6 @@
+# needed to prevent bad npm that has min-release-age but not exclude
+engine-strict=true
+
 min-release-age=14
 # allow assistant-ui packages & a couple specific deps since they update a LOT.
 # remove this when we stabilize (or we haven't updated in 2 wks)
diff --git a/package.json b/package.json
index d6f12502ffb..d6d6bd62599 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,8 @@
     "brace-expansion": "5.0.8"
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=20.0.0",
+    "npm": "<11.10.0 || >=12.0.0"
   },
   "allowScripts": {
     "unicode-animations": false,
diff --git a/website/.npmrc b/website/.npmrc
index 59829288b4a..016ec44347f 100644
--- a/website/.npmrc
+++ b/website/.npmrc
@@ -1,3 +1,6 @@
+# needed to prevent bad npm that has min-release-age but not exclude
+engine-strict=true
+
 min-release-age=14
 
 # fast-uri 3.1.4 includes fixes for vulns. remove this when 3.1.4 is > 2wks  old
diff --git a/website/package.json b/website/package.json
index 9522bdfbd58..bb752328ad8 100644
--- a/website/package.json
+++ b/website/package.json
@@ -53,7 +53,8 @@
     ]
   },
   "engines": {
-    "node": ">=20.0"
+    "node": ">=20.0",
+    "npm": "<11.10.0 || >=12.0.0"
   },
   "allowScripts": {
     "core-js@3.49.0": true,