pnpm-workspace.yaml

allowBuilds:
  better-sqlite3@12.9.0: true
  cpu-features@0.0.10: true
  es5-ext@0.10.64: true
  esbuild@0.27.3: true
  esbuild@0.28.1: true
  lightningcss@1.32.0: true
  msw: true
  protobufjs@7.5.8: true
  protobufjs@7.6.3: true
  protobufjs@7.6.5: true
  sharp@0.34.5: true
  ssh2@1.17.0: true
  vue-demi@0.14.10: true
  workerd@1.20260426.1: true
  workerd@1.20260504.1: true
  workerd@1.20260507.1: true
  workerd@1.20260511.1: true
auditConfig:
  ignoreGhsas:
    # Fixed locally by config/patches/image-size@2.0.2.patch; no upstream release yet.
    # Keep these version-based audit exceptions only while that patch is applied.
    - GHSA-5p2g-fcmc-qvqq
    - GHSA-w3rx-r6r6-pgpr
    # No published fix; bounded parser and AST walkers in braces@3.0.3.patch.
    # Regression coverage: src/lib/dependencyPatches.test.ts.
    - GHSA-vfj7-8cjw-p6xm
blockExoticSubdeps: true
catalog:
  # Vite+ dependency aliases.
  vite: npm:@voidzero-dev/vite-plus-core@0.1.24
  vite-plus: 0.1.24
  vitest: npm:@voidzero-dev/vite-plus-test@0.1.24
dangerouslyAllowAllBuilds: false
enableGlobalVirtualStore: true
linkWorkspacePackages: false
minimumReleaseAge: 1440
minimumReleaseAgeExclude:
  - accounts
  - mppx
  - tapimo
  - tmp
  - viem
  - '@babel/core@7.29.6'
  - axios@1.20.0
  - shell-quote@1.10.0
  - '@grpc/grpc-js@1.14.5'
  - esbuild@0.28.1
  - protobufjs@7.6.5
  - form-data@4.0.6
  - vite-plus@0.1.24
  - launch-editor@2.14.1
  - ip-address@10.7.1
  - nanoid@3.3.18
  - nanoid@5.1.16
  - postcss@8.5.23
  - brace-expansion@5.0.12
  - fast-uri@3.1.8
  - tar@7.5.21
  - undici@7.29.1
  - ws@8.21.0
minimumReleaseAgeStrict: true
overrides:
  '@modelcontextprotocol/sdk': 1.31.0
  '@vue/compiler-core': 3.5.42
  '@vue/compiler-dom': 3.5.42
  '@vue/compiler-sfc': 3.5.42
  '@vue/compiler-ssr': 3.5.42
  '@vue/reactivity': 3.5.42
  '@vue/runtime-core': 3.5.42
  '@vue/runtime-dom': 3.5.42
  '@vue/server-renderer': 3.5.42
  '@vue/shared': 3.5.42
  vue: 3.5.42
  proxy-addr: 2.0.8
  seroval: 1.6.3
  source-map-js: 1.2.2
  tinypool: 2.1.2
  '@babel/core': 7.29.6
  '@grpc/grpc-js': 1.14.5
  axios: 1.20.0
  '@hono/node-server@<2.0.5': 2.0.10
  brace-expansion: 5.0.12
  esbuild: 0.28.1
  fast-uri: 3.1.8
  form-data: 4.0.6
  ip-address: 10.7.1
  launch-editor: 2.14.1
  nanoid@<3.3.18: 3.3.18
  'nanoid@>=4.0.0 <5.1.16': 5.1.16
  postcss: 8.5.23
  protobufjs: 7.6.5
  shell-quote: 1.11.0
  # Miniflare pins an older sharp; keep the patched release until it upgrades.
  sharp: 0.35.5
  tar: 7.5.21
  tmp: 0.2.7
  # remark-mdx-frontmatter still requires toml ^3.0.0; both advisories need 4.2.0.
  'remark-mdx-frontmatter>toml': 4.2.0
  undici: 7.29.1
  uuid: 11.1.1
  vite: 'catalog:'
  vite-plus: 0.1.24
  vitest: 'catalog:'
  ws: 8.21.0
packageExtensions:
  '@cloudflare/vitest-pool-workers@*':
    dependencies:
      undici: 7.29.1
  '@svgr/core@*':
    dependencies:
      '@svgr/plugin-jsx': 8.1.0
  '@voidzero-dev/vite-plus-core@*':
    dependencies:
      vite-plus: 0.1.24
  local-pkg@*:
    dependencies:
      '@svgr/core': 8.1.0
patchedDependencies:
  '@chat-adapter/slack@4.27.0': config/patches/@chat-adapter__slack@4.27.0.patch
  '@slack/web-api@7.15.2': config/patches/@slack__web-api@7.15.2.patch
  # TODO: Remove when TanStack Start server entry no longer eagerly resolves virtual router modules during Worker test startup.
  # Related: https://github.com/cloudflare/workers-sdk/issues/11100
  '@tanstack/react-start@1.167.65': config/patches/@tanstack__react-start@1.167.65.patch
  braces@3.0.3: config/patches/braces@3.0.3.patch
  emulate@0.5.0: config/patches/emulate@0.5.0.patch
  image-size@2.0.2: config/patches/image-size@2.0.2.patch
  prool@0.2.4: config/patches/prool@0.2.4.patch
peerDependencyRules:
  allowAny:
    - vite
    - vitest
  allowedVersions:
    accounts: 0.15.2
    vite: '*'
    vitest: '*'
strictDepBuilds: true
strictPeerDependencies: true