To reduce the risk of installing compromised packages, we now utilize the new minimumReleaseAge setting (introduced with 10.20.x) to delay the installation of newly published versions for 1 day. As in most cases, malicious releases are discovered and removed from the registry within an hour this is meant to protect us sufficiently while still being able to install fixes for other security issues in time.

For technical reasons we have excluded packages with the scope "@coremedia" and "@jangaroo" via the minimumReleaseAgeExcludes from falling into this delay.

As this is part of the blueprint you are free to adjust these settings to your needs.

(CMS-28594)