docusaurus/pnpm-workspace.yaml at main · facebook/docusaurus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
nodeLinker: 'isolated'

# Link init templates (which can't use workspace:*) to local packages
linkWorkspacePackages: true

packages:
  - 'packages/*'
  - 'argos'
  - 'website'
  - 'test-website-in-workspace'
  - 'packages/create-docusaurus/templates/*'
  - 'admin/scripts'
  - 'admin/test-bad-package'
  - 'admin/new.docusaurus.io'

overrides:
  axios: 1.16.1 # Fix CVEs https://github.com/axios/axios/security/advisories
  tar: ^7.5.16 # Fix CVEs https://github.com/isaacs/node-tar/security/advisories
  # Monorepo deduplicate sharp (force Argos > Sharp upgrade)
  # This version doesn't use a postinstall script
  # See https://sharp.pixelplumbing.com/changelog/v0.35.0/
  sharp: ^0.35.1

minimumReleaseAge: 10080 # 7 days in minutes
minimumReleaseAgeStrict: true
minimumReleaseAgeIgnoreMissingTime: false
minimumReleaseAgeExclude:
  - image-size@2.0.4
  - webpack@5.111.0
  - enhanced-resolve@5.25.0
  - schema-utils@4.5.0
  - react@19.3.0
  - react-dom@19.3.0
  - scheduler@0.28.0
  - '@types/react@19.3.0'
  - '@types/react-dom@19.3.0'
  - tar@7.5.16
  - pnpm
  - typescript
  - '@rspack/*'
  - '@crowdin/*'

trustPolicy: no-downgrade
trustPolicyIgnoreAfter: 525600 # ignore packages published 1+ year ago
trustPolicyExclude:
  - 'tinyexec@1.2.2'
  - '@trickfilm400/rollup-plugin-off-main-thread@3.0.0-pre1'
  - 'browserslist-load-config@1.0.2'
  - '@vercel/detect-agent@1.2.5' # See https://github.com/vercel/vercel/issues/17408

trustLockfile: false
blockExoticSubdeps: true
verifyDepsBeforeRun: error

strictDepBuilds: true
dangerouslyAllowAllBuilds: false
allowBuilds:
  '@parcel/watcher': false
  '@swc/core': false
  fast-folder-size: false
  nx: false
  sharp: false