synapse-sdk/pnpm-workspace.yaml at 3c3bd9d48f29c16a543b57cd9d36325ff61ed3c9 · FilOzone/synapse-sdk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
packages:
  - packages/*
  - examples/*
  - apps/*
  - docs
  - utils

allowBuilds:
  esbuild: true
  keccak: false
  msw: true
  sharp: true
  workerd: true

blockExoticSubdeps: true

catalog:
  '@biomejs/biome': 2.4.15
  '@types/mocha': ^10.0.10
  '@types/node': ^25.6.0
  '@types/react': ^19.2.7
  '@types/react-dom': ^19.2.3
  abitype: ^1.2.0
  mocha: ^11.7.4
  msw: 2.14.6
  ox: ^0.14.16
  typescript: 6.0.3
  viem: ^2.52.0
  wagmi: ^3.0.2
  zod: ^4.3.5
  iso-web: 2.2.1

minimumReleaseAge: 10080

minimumReleaseAgeExclude:
  # first-party (hugomrdias): published and consumed by us immediately
  - iso-ledger
  - iso-web
  - iso-kv
  - iso-base
  - '@hugomrdias/docs'
  - playwright-test
  # viem 2.52.0 bump (#810) landed inside cooldown; viem pins ox exactly.
  # Remove after 2026-06-08 when both age out.
  - viem@2.52.0
  - ox@0.14.27

trustPolicy: no-downgrade

trustPolicyExclude:
  # 0.2.0 published manually without provenance (0.1.9 was trusted-published).
  # Remove when republished via trusted CI.
  - '@hugomrdias/docs@0.2.0'
  # 2.0.x published manually; 2.0.2 (2026-06-01) is trusted-published.
  # Remove after 2026-06-08 when 2.0.2 ages past cooldown.
  - 'astro-mermaid@2.0.1'
  # tinylibs staged-publishing false positive (npm metadata omitted trusted-publisher
  # signal, see tinylibs/tinyclip#37); 1.2.4 (2026-05-31) is trusted-published.
  # Remove after 2026-06-07.
  - 'tinyexec@1.2.2'
  # Same staged-publishing false positive; tarball diffed clean vs 0.1.12.
  # 0.1.14 (2026-06-03) is trusted-published. Remove after 2026-06-10.
  - 'tinyclip@0.1.13'
  # Last 4.x (Dec 2024) predates chokidar adopting trusted publishing at 5.0.0.
  # Permanent while anything depends on chokidar@^4.
  - chokidar@4.0.3