pnpm-workspace.yaml

packages:
  - design-system
  - storybook
  - generators/*
  - packages/*
  - packages/components/*
  - packages/components/buttons/*
  - packages/components/dropdowns/*
  - packages/components/fields/*
  - packages/components/inputs/*
  - packages/components/spacings/*
  - presets/*
  - visual-testing-app

# Postinstall scripts pnpm is allowed to run (strict allow-list).
onlyBuiltDependencies:
  - '@percy/core'
  - '@swc/core'
  - core-js
  - core-js-pure
  - esbuild
  - puppeteer
  - unrs-resolver

# Transitive-dep pins for Dependabot security advisories and known-good
# baselines. yarn-style `package@range` keys are preserved so the same
# entry can target multiple incoming ranges.
overrides:
  '@babel/preset-env': ^7.18.6
  '@babel/plugin-transform-modules-systemjs': ^7.29.4
  '@types/eslint': ^9.0.0
  '@types/react': ^19.0.3
  '@types/react-dom': 19.2.1
  '@types/react-router': 5.1.20
  '@types/unist': 3.0.3
  '@typescript-eslint/eslint-plugin': 8.59.4
  '@typescript-eslint/parser': 8.59.4
  '@conventional-changelog/git-client': ^2.0.0
  axios: ^1.15.2
  basic-ftp: ^5.2.2
  core-js-compat: ^3.23.4
  fast-uri: ^3.1.2
  flatted: ^3.4.2
  follow-redirects: ^1.16.0
  glob-parent: ^6.0.0
  handlebars: ^4.7.9
  immutable: ^4.3.8
  ip-address: ^10.1.1
  # jest-environment-puppeteer pulls jest-environment-node@29.7.0 (which
  # bundles jest-mock@29.7.0, missing `clearMocksOnScope`). pnpm hoists 29.7.0
  # into .pnpm/node_modules/, which is what Jest's `testEnvironment: 'node'`
  # resolver finds. Jest 30 then crashes in Runtime.resetModules. Forcing the
  # whole tree to a jest-mock@30.4.x-compatible version fixes the resolution.
  jest-environment-node: ^30.4.1
  'js-yaml@^4.0.0': ^4.1.1
  json5: ^2.0.0
  lodash: ^4.18.1
  lodash-es: ^4.18.0
  minimatch: ^10.2.3
  'path-to-regexp@^1.7.0': ^3.3.0
  'path-to-regexp@2.2.1': ^3.3.0
  'picomatch@^2.0.4': ^2.3.2
  'picomatch@^2.2.1': ^2.3.2
  'picomatch@^2.2.2': ^2.3.2
  'picomatch@^2.2.3': ^2.3.2
  'picomatch@^2.3.1': ^2.3.2
  postcss: ^8.5.10
  react-from-dom: 0.6.2
  'rollup@^2.79.1': ^2.80.0
  'rollup@^4.34.9': ^4.59.0
  svgo: ^3.3.3
  systeminformation: ^5.31.6
  'tar-fs@^2.0.0': ^2.1.4
  'tar-fs@^3.0.6': ^3.1.1
  'trim@0.0.1': ^0.0.3

patchedDependencies:
  typescript-react-function-component-props-handler@1.1.1: patches/typescript-react-function-component-props-handler@1.1.1.patch

# Single source of truth for external dep versions across the workspace.
# Workspace package.json files reference catalog entries via the catalog protocol:
#   "lodash": "catalog:"          -> default catalog (singletons / leaf utilities)
#   "react":  "catalog:react"     -> named catalog (deps that move together)
#   "react":  "catalog:peer"      -> peer catalog (consumer compatibility ranges)
#
# Named catalogs group deps by role in the toolchain:
#   build      — compile/bundle/style toolchain (babel, vite, svgr, emotion, postcss, ts)
#   lint       — code-quality enforcers (eslint, stylelint, prettier, typescript-eslint)
#   peer       — consumer compatibility ranges for public packages
#   react      — react framework and react-bound libraries
#   repo       — monorepo plumbing & release tooling (changesets, manypkg, husky, ...)
#   rich-text  — slate + remark/unified/vfile (rich-text editor stack)
#   storybook  — storybook dev environment (must move in lockstep)
#   test       — jest, testing library, percy, puppeteer, jsdom
#
# Entries inside each named catalog are grouped by sub-cohort (separator
# comments + blank lines) rather than alphabetized. Keep new entries in
# their group instead of dropping them at the bottom. The default catalog
# stays alphabetical (its members are singletons by definition).
#
# scripts/check-workspace-constraints.js enforces that every dep named in
# a catalog is consumed only via its catalog reference; literal versions
# in workspace package.json files are an error. It also flags uncataloged
# deps used at multiple specifiers across workspaces (drift) — the fix is
# to add the dep to a catalog. The parser tolerates blank lines and `#`
# comments anywhere inside a catalog block.

catalog:
  '@fontsource/inter': 5.2.8
  '@types/debounce-promise': ^3.1.6
  '@types/dompurify': ^2.4.0
  '@types/escape-html': 1.0.4
  '@types/history': ^4.7.11
  '@types/is-hotkey': ^0.1.7
  '@types/is-url': ^1.2.32
  '@types/listr': 0.14.10
  '@types/lodash': ^4.17.24
  '@types/node': ^22.13.1
  '@types/prettier': ^2.7.3
  '@types/raf-schd': ^4.0.1
  '@types/shelljs': 0.8.17
  colors: 1.4.0
  commander: ^13.1.0
  cross-env: 10.1.0
  debounce-promise: ^3.1.2
  dompurify: 3.4.9
  escape-html: 1.0.3
  execa: 9.6.1
  glob: 13.0.6
  global: 4.4.0
  history: 4.10.1
  immutable: 4.3.8
  is-hotkey: 0.2.0
  is-url: ^1.2.4
  listr: 0.14.3
  listr-verbose-renderer: 0.6.0
  lodash: 4.18.1
  moment: 2.30.1
  moment-timezone: 0.6.2
  nodemon: ^3.0.0
  omit-empty-es: 1.2.0
  'popper.js': ^1.15.0
  publint: ^0.3.21
  qs: 6.15.2
  raf-schd: ^4.0.3
  rcfile: 1.0.3
  replace: 1.2.2
  rimraf: 3.0.2
  serve: ^14.2.5
  shelljs: 0.10.0
  style-to-object: 0.4.4
  typescript-react-function-component-props-handler: 1.1.1
  use-popper: 1.1.6
  warning: 4.0.3
  yaml: ^2.8.3

catalogs:
  build:
    # Babel
    '@babel/core': 7.29.7
    '@babel/runtime': ^7.20.13
    '@babel/runtime-corejs3': ^7.20.13

    # Emotion (CSS-in-JS)
    '@emotion/css': ^11.10.5
    '@emotion/is-prop-valid': 1.4.0
    '@emotion/react': ^11.10.5
    '@emotion/styled': ^11.10.5
    '@swc/plugin-emotion': ^14.3.0

    # SVGR (icon pipeline)
    '@svgr/babel-plugin-svg-dynamic-title': ^8.0.0
    '@svgr/cli': 8.1.0
    '@svgr/core': 8.1.0
    '@svgr/plugin-jsx': 8.1.0
    '@svgr/plugin-svgo': 8.1.0

    # Vite
    '@modyfi/vite-plugin-yaml': ^1.1.0
    '@vitejs/plugin-react': 5.2.0
    '@vitejs/plugin-react-swc': ^4.2.2
    vite: 6.4.3

    # PostCSS
    postcss: 8.5.15
    postcss-styled-syntax: ^0.7.0
    postcss-syntax: ^0.36.2
    postcss-value-parser: 4.2.0

    # TypeScript
    ts-node: 10.9.2
    tsc-files: 1.1.4
    typescript: 5.9.3

    # Output / bundling
    '@preconstruct/cli': 2.8.13
    browserslist: 4.28.2
    bundlewatch: ^0.4.1

  lint:
    # ESLint
    eslint: ^9.0.0
    eslint-formatter-pretty: 7.1.0

    # typescript-eslint
    '@typescript-eslint/eslint-plugin': 8.46.0
    '@typescript-eslint/parser': 8.46.0

    # Stylelint
    stylelint: 16.26.1
    stylelint-config-standard: 36.0.1
    stylelint-order: 5.0.0

    # Formatter
    prettier: 2.8.8

  peer:
    # React stack
    react: '19.x'
    react-dom: '19.x'
    react-intl: '7.x'
    react-router-dom: '5.x'

    # Toolchain
    prettier: '2.x'
    typescript: '5.x'

    # Domain libraries
    moment: '2.x'
    moment-timezone: '0.6.x'

  react:
    # React core
    react: 19.2.6
    react-dom: 19.2.6
    react-is: 19.2.6

    # @types (must match runtime major)
    '@types/react': ^19.0.7
    '@types/react-dom': ^19.0.3
    '@types/react-is': 19.2.0

    # React Router (5.x)
    react-router: 5.3.4
    react-router-dom: 5.3.4
    '@types/react-router-dom': ^5.3.3

    # i18n (formatjs)
    '@formatjs/cli': 6.16.0
    '@formatjs/intl-relativetimeformat': 11.4.13
    babel-plugin-formatjs: ^10.0.0
    intl-pluralrules: 2.0.1
    react-intl: ^7.1.4

    # React-bound utilities
    '@hello-pangea/dnd': ^18.0.0
    '@radix-ui/react-popover': ^1.1.4
    downshift: 9.3.3
    formik: ^2.4.6
    prop-types: ^15.8.1
    react-docgen: 5.4.3
    react-from-dom: 0.7.5
    react-select: 5.10.2
    react-textarea-autosize: 8.5.9
    react-value: 0.2.0

  repo:
    # Versioning / release
    '@changesets/cli': 2.31.0
    '@changesets/changelog-github': 0.5.2
    conventional-changelog-cli: 5.0.0

    # Monorepo tooling
    '@manypkg/cli': 0.25.1
    '@manypkg/find-root': 1.1.0
    '@manypkg/get-packages': 1.1.3

    # Git hooks / commit lint
    husky: 9.1.7
    lint-staged: 16.2.4
    '@commitlint/cli': 20.1.0
    '@commitlint/config-conventional': 20.0.0

    # Shared commercetools configs
    '@commercetools-frontend/babel-preset-mc-app': 27.6.2
    '@commercetools-frontend/eslint-config-mc-app': 27.6.2

  rich-text:
    # Slate (editor core)
    slate: 0.75.0
    slate-history: 0.113.1
    slate-hyperscript: 0.100.0
    slate-react: 0.75.0

    # remark / mdx (markdown parsing)
    remark-gfm: ^4.0.0
    remark-gfm-v1: 'npm:remark-gfm@1.0.0'
    remark-mdx: 1.6.22
    remark-parse: 9.0.0
    remark-stringify: 9.0.1

    # unified / vfile (processor pipeline)
    unified: 9.2.2
    to-vfile: 6.1.0
    vfile: 4.2.1
    vfile-reporter: 6.0.2

    # @types
    '@types/mdast': 4.0.4
    '@types/unist': 3.0.3
    '@types/vfile': 4.0.0

  storybook:
    # Core
    storybook: 9.1.20
    '@storybook/react-vite': 9.1.20

    # Addons
    '@storybook/addon-a11y': 9.1.20
    '@storybook/addon-docs': 9.1.20
    '@storybook/addon-links': 9.1.20

    # Lint integration
    eslint-plugin-storybook: 9.1.20

  test:
    # Jest core
    jest: 30.4.2
    jest-environment-jsdom: 30.4.1
    jest-validate: 30.4.1
    babel-jest: 30.4.1
    '@types/jest': ^30.0.0

    # Jest plugins / runners
    jest-localstorage-mock: 2.4.26
    jest-puppeteer: 11.0.0
    jest-runner-eslint: 2.3.0
    jest-runner-stylelint: 2.3.7
    jest-silent-reporter: 0.6.0
    jest-watch-typeahead: 3.0.1

    # Jest support
    identity-obj-proxy: 3.0.0
    jsdom: ^26.1.0

    # Testing Library
    '@testing-library/dom': ^10.4.0
    '@testing-library/jest-dom': 6.9.1
    '@testing-library/react': ^16.2.0

    # Visual regression / Puppeteer
    '@percy/cli': 1.31.13
    '@percy/puppeteer': 2.0.2
    puppeteer: 22.15.0
    pptr-testing-library: 0.8.0