pnpm-workspace.yaml

# pnpm settings. Moved here from .npmrc: pnpm 10+ reads only auth/registry
# settings from .npmrc — every other setting must live in this file.

# Automatically install missing peer dependencies when possible.
autoInstallPeers: true

# Require packages to be at least 4320 minutes (3 days) old before install.
minimumReleaseAge: 4320

# Enforce package manager checks for project consistency.
packageManagerStrict: true

# Do not require an exact package manager version match.
packageManagerStrictVersion: false

# Prefer using the lockfile as-is for deterministic installs.
preferFrozenLockfile: true

# Verify package integrity in the store before linking.
verifyStoreIntegrity: true

# Do not fail installs on peer dependency conflicts.
strictPeerDependencies: false

# Use pnpm's isolated node_modules linker layout.
nodeLinker: isolated

allowBuilds:
  esbuild: true

# Security override: force js-yaml past GHSA-h67p-54hq-rp68 (affects <=4.1.1).
# Pulled in transitively via @commitlint/cli > cosmiconfig (dev-only tooling).
overrides:
  js-yaml@<4.2.0: '^4.2.0'