fusion-framework/pnpm-workspace.yaml at b7aae88df161fe0b9f445e08abe7e03bd6f8825d · equinor/fusion-framework · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
packages:
  - packages/**
  - cookbooks/*
  - vue-press

# @changesets/cli and @changesets/write were published <24h ago (still inside pnpm 11's
# default minimumReleaseAge window) but are already-vetted devDependency-only build tooling
# from the changesets v2->v3 migration (PR #5337) — exempt them so installs aren't blocked.
minimumReleaseAgeExclude:
  - '@changesets/cli'
  - '@changesets/write'

patchedDependencies:
  vscode-jsonrpc@8.2.1: patches/vscode-jsonrpc@8.2.1.patch

overrides:
  form-data@>=4.0.0 <4.0.6: 4.0.6
  immutable@>=5.0.0 <5.1.5: 5.1.5
  markdown-it@>=13.0.0 <14.2.0: 14.2.0
  linkify-it@<5.0.1: 5.0.1
  js-yaml@>=3.0.0 <3.15.1: 3.15.1
  js-yaml@>=4.0.0 <4.3.1: 4.3.1
  qs@<=6.15.1: 6.15.2
  undici@>=7.0.0 <7.29.0: 7.29.0
  undici@>=8.0.0 <8.5.0: 8.5.0
  ws@>=7.0.0 <7.5.11: 7.5.11
  brace-expansion@>=2.0.0 <2.1.4: 2.1.4
  brace-expansion@>=3.0.0 <=5.0.7: 5.0.8
  dompurify@>=3.1.3 <=3.4.12: 3.4.13
  follow-redirects@<=1.15.11: 1.16.0
  handlebars@>=4.0.0 <=4.7.8: 4.7.9
  langsmith@>=0.4.0 <0.6.0: 0.8.3
  lodash@>=4.0.0 <=4.17.23: 4.18.1
  lodash-es@>=4.0.0 <=4.17.23: 4.18.1
  minimatch@>=5.0.0 <5.1.8: 5.1.8
  minimatch@>=9.0.0 <9.0.7: 9.0.7
  minimatch@<3.1.3: 3.1.5
  path-to-regexp@>=8.0.0 <8.4.0: 8.4.0
  serialize-javascript@<=7.0.4: 7.0.5
  yaml@>=2.0.0 <2.8.3: 2.8.3
  postcss@>=8.0.0 <=8.5.22: 8.5.23
  valibot@<=1.4.1: 1.4.2
  fast-uri@>=3.0.0 <=3.1.4: 3.1.5
  '@babel/core@<=7.29.0': 7.29.6
  esbuild@>=0.27.3 <0.28.1: 0.28.1
  uuid@<11.1.1: 11.1.1
  zod: 4.4.3

allowBuilds:
  # only used by AuthProviderInteractiveBrowser's OS-level token cache, a
  # dynamic import with its own error message when unavailable — not hit by
  # any CI workflow (they authenticate via OIDC, not interactive browser auth).
  '@azure/msal-node-extensions': false
  # only needed for `pnpm build:docs` (sass-embedded's file watcher); vuepress
  # falls back to its default watcher without it.
  '@parcel/watcher': false
  # only needed to sign/package the fusion-lint vscode extension (rare, manual).
  '@vscode/vsce-sign': false
  # postinstall downloads a native binary from GitHub on every install; only the
  # copilot cli-plugin needs it, so its own prepack rebuilds it explicitly instead.
  agent-browser: false
  # vite/vitest/tsc all build correctly without esbuild's own install script;
  # the platform-specific @esbuild/* optional package supplies the binary.
  esbuild: false
  # native credential-cache addon for interactive local auth; not needed in CI
  # or by default. Run `pnpm rebuild keytar` if you need it locally.
  keytar: false
  # native install script (@github/copilot-sdk's only dependent); rebuilt in that
  # plugin's prepack instead of on every install.
  koffi: false
  # pouchdb/leveldown's native binding is already unavailable on macOS arm64
  # regardless of this setting; not worth building on every install elsewhere.
  leveldown: false
  msw: false
  # fusion-lint works fine without these; it doesn't require the native binding.
  tree-sitter: false
  tree-sitter-javascript: false
  tree-sitter-typescript: false