pnpm-workspace.yaml

packages:
  - libs/**
  - packages/**
  - recipes
  - docs
  - performance/act-performance
allowBuilds:
  '@parcel/watcher': true
  '@swc/core': true
  core-js: true
  esbuild: true
  simple-git-hooks: true
linkWorkspacePackages: true
onlyBuiltDependencies:
  - "@swc/core"
  - core-js
  - core-js-pure
  - esbuild
  - sharp
  - simple-git-hooks
# Moved from `package.json` `pnpm.overrides` (pnpm settings migration —
# https://pnpm.io/settings). Pins for known-CVE downstream packages.
overrides:
  "js-yaml@<3.15.0": "3.15.2"
  flatted: ">=3.4.4"
  picomatch: ">=4.0.7"
  yaml: ">=2.9.0"
  undici: ">=8.10.0"
  rollup: ">=4.63.0"
  "minimatch@<3.1.4": ">=10.2.6"
  serialize-javascript: ">=7.1.0"
  svgo: ">=4.1.0"
  "brace-expansion@<5.0.7": ">=5.0.9"
  "node-forge@<1.4.0": ">=1.4.0"
  "body-parser@<1.21.3": ">=2.3.0"
  "body-parser@>=2.0.0 <2.3.0": ">=2.3.0"
  "shell-quote@<1.9.0": ">=1.10.0"
  "ajv@>=7.0.0-alpha.0 <8.18.0": ">=8.20.0"
  "handlebars@>=4.0.0 <4.7.9": ">=4.7.9"
  "qs@>=6.7.0 <=6.15.1": ">=6.15.3"
  "lodash@>=4.0.0 <=4.17.22": ">=4.18.1"
  "esbuild@<=0.24.2": ">=0.28.2"
  "path-to-regexp@>=8.0.0 <8.4.0": ">=8.4.2"
  "lodash-es@<=4.17.23": ">=4.18.0"
  "follow-redirects@<=1.15.11": ">=1.16.0"
  "fast-uri@<4.1.1": ">=4.1.3"
  "@babel/plugin-transform-modules-systemjs@>=7.12.0 <=7.29.3": ">=8.0.1"
  "ws@>=8.0.0 <8.20.1": ">=8.21.3"
  "webpack-dev-server@<=5.2.3": ">=5.2.6"
  "uuid@<11.1.1": ">=14.0.2"
  "ws@>=7.0.0 <7.5.11": ">=7.5.13"
  "http-proxy-middleware@>=0.16.0 <2.0.10": "2.0.10"
  "markdown-it@<=14.1.1": "14.3.1"
  "launch-editor@<=2.14.0": "2.14.1"
  "js-yaml@>=4.0.0 <=4.1.1": "4.3.2"
  "@babel/core@>=7.0.0 <=7.29.0": "7.29.7"
  "esbuild@>=0.27.3 <0.28.1": "0.28.2"
  "joi@>=17.0.0 <17.13.4": "17.13.6"
  "postcss@<=8.5.17": ">=8.5.26"
  "find-my-way@<=9.6.0": ">=9.9.0"