pnpm-workspace.yaml

packages:
  - "apps/*"
  - "packages/*"
onlyBuiltDependencies:
  - "@swc/core"
  - "esbuild"
  - "electron"
allowBuilds:
  '@swc/core': true
  # This project packages NSIS installers, not the optional Squirrel target.
  electron-winstaller: false
  esbuild: true
overrides:
  # tsup 8.5.1 still requests the affected 0.27.x line (GHSA-g7r4-m6w7-qqqr).
  'esbuild@>=0.27.3 <0.28.1': 0.28.1
  # Keep security fixes within each installed dependency's release line.
  'brace-expansion@<1.1.18': 1.1.18
  'brace-expansion@>=2.0.0 <2.1.4': 2.1.4
  'brace-expansion@>=5.0.0 <5.0.9': 5.0.9
  'postcss@<8.5.23': 8.5.23
  'undici@>=6.0.0 <6.28.0': 6.28.0
  'undici@>=7.0.0 <7.29.0': 7.29.0
  'fast-uri@>=3.0.0 <3.1.6': 3.1.6
  'js-yaml@>=4.0.0 <4.3.2': 4.3.2
  'nanoid@>=3.0.0 <3.3.18': 3.3.18
  'browserslist@>=4.0.0 <4.28.7': 4.28.7
  '@xmldom/xmldom@>=0.8.0 <0.8.15': 0.8.15
  'baseline-browser-mapping@>=2.0.0 <2.11.0': 2.11.0