diffsplain/pnpm-workspace.yaml at main · itsjling/diffsplain · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
packages:
  - .

allowBuilds:
  "@scarf/scarf": false
  esbuild: true
  sharp: true

minimumReleaseAgeExclude:
  - '@fallow-cli/darwin-arm64@3.24.1'
  - '@fallow-cli/darwin-x64@3.24.1'
  - '@fallow-cli/linux-arm64-gnu@3.24.1'
  - '@fallow-cli/linux-arm64-musl@3.24.1'
  - '@fallow-cli/linux-x64-gnu@3.24.1'
  - '@fallow-cli/linux-x64-musl@3.24.1'
  - '@fallow-cli/win32-arm64-msvc@3.24.1'
  - '@fallow-cli/win32-x64-msvc@3.24.1'
  - '@types/node@22.20.2 || 26.5.1'
  - '@types/react-dom@19.3.0'
  - '@types/react@19.3.0'
  - blume@1.6.4
  - fallow-type-aware@3.24.1
  - fallow@3.24.1
  - react-dom@19.3.0
  - react@19.3.0
  - scheduler@0.28.0
  - vite@8.3.0

# Temporary security floors; see docs/dependency-overrides.md for advisories
# and removal checks. Match only vulnerable versions; never downgrade fixes.
overrides:
  "brace-expansion@>=2.0.0 <2.1.4": 2.1.4
  "brace-expansion@>=5.0.0 <5.0.9": 5.0.9
  "dompurify@>=3.0.0 <3.4.13": 3.4.13
  "fast-uri@>=3.0.0 <3.1.6": 3.1.6
  "hono@>=4.0.0 <4.13.5": 4.13.5
  "js-yaml@>=3.0.0 <3.15.2": 3.15.2
  "js-yaml@>=4.0.0 <4.3.2": 4.3.2
  "nanoid@>=3.0.0 <3.3.18": 3.3.18
  "path-to-regexp@>=6.0.0 <6.3.0": 6.3.0
  "qs@>=6.0.0 <6.16.0": 6.16.0
  "svgo@>=4.0.0 <4.1.0": 4.1.0