60 lines
1.8 KiB
YAML
60 lines
1.8 KiB
YAML
packages:
|
|
- "apps/*"
|
|
- "packages/*"
|
|
- "e2e"
|
|
|
|
publicHoistPattern:
|
|
- "@takumi-rs/core-*"
|
|
|
|
overrides:
|
|
"@types/react": "^19.2.14"
|
|
"@types/react-dom": "^19.2.3"
|
|
"glob>minimatch": "^10.2.5"
|
|
"cheerio>undici": "^7.24.0"
|
|
# undici advisories (GHSA-vmh5-mc38-953g, GHSA-vxpw-j846-p89q, GHSA-hm92-r4w5-c3mj,
|
|
# GHSA-pr7r-676h-xcf6, GHSA-35p6-xmwp-9g52, GHSA-g8m3-5g58-fq7m). Scoped per-parent
|
|
# because @vercel/blob is on the v6 line and @brightdata/sdk on the v7 line.
|
|
"@brightdata/sdk>undici": "^7.28.0"
|
|
"@vercel/blob>undici": "^6.27.0"
|
|
kysely: "~0.28.14"
|
|
h3: ">=2.0.1-rc.18"
|
|
h3-v2: "npm:h3@>=2.0.1-rc.18"
|
|
picomatch: "^4.0.4"
|
|
"anymatch>picomatch": "^2.3.2"
|
|
"micromatch>picomatch": "^2.3.2"
|
|
dompurify: "^3.4.11" # GHSA-cmwh-pvxp-8882: ALLOWED_ATTR pollution via setConfig()
|
|
yaml: "^2.8.3"
|
|
"@esbuild-kit/core-utils>esbuild": "^0.25.0"
|
|
esbuild: "^0.28.1" # GHSA-g7r4-m6w7-qqqr: dev-server arbitrary file read on Windows
|
|
"@tanstack/devtools-vite>launch-editor": "^2.14.1" # GHSA-v6wh-96g9-6wx3: NTLMv2 hash disclosure
|
|
# GHSA-h67p-54hq-rp68: js-yaml quadratic-complexity DoS (read-yaml-file, fixed in 3.15.0).
|
|
"read-yaml-file>js-yaml": "^3.15.0"
|
|
fast-uri: "^3.1.2"
|
|
ws: "^8.20.1"
|
|
protobufjs: "^7.5.8"
|
|
|
|
allowBuilds:
|
|
"@tailwindcss/oxide": true
|
|
esbuild: true
|
|
msgpackr-extract: true
|
|
puppeteer: true
|
|
sharp: true
|
|
unrs-resolver: true
|
|
"@sentry/cli": true # postinstall downloads the sentry-cli binary
|
|
"@scarf/scarf": false
|
|
"@tree-sitter-grammars/tree-sitter-yaml": false
|
|
core-js: false
|
|
core-js-pure: false
|
|
msw: false
|
|
protobufjs: false
|
|
tree-sitter: false
|
|
tree-sitter-json: false
|
|
|
|
blockExoticSubdeps: true
|
|
minimumReleaseAge: 5760
|
|
minimumReleaseAgeExclude:
|
|
- nitro
|
|
- srvx
|
|
- vite
|
|
trustPolicy: no-downgrade
|
|
trustPolicyIgnoreAfter: 129600
|