packages:
  - protocol
  - adapters/*
  - gateway
  - web
engineStrict: true
allowBuilds:
  esbuild: true

# Minimum age a version must have before a fresh resolution will consider it: 7 days
# (10080 minutes). Avoids installing a package published hours ago, which is exactly the
# window in which malicious publishes get caught. Deliberately aligned with
# `cooldown: default-days: 7` in .github/dependabot.yml.
# It does not affect --frozen-lockfile, so CI stays deterministic.
minimumReleaseAge: 10080

# fast-uri and ip-address arrive through @anthropic-ai/claude-agent-sdk >
# @modelcontextprotocol/sdk (ajv, express-rate-limit), whose ranges already accept the
# patched releases; the floors only stop the lockfile from holding the vulnerable ones.
#
# @modelcontextprotocol/sdk is a peer of @anthropic-ai/claude-agent-sdk (^1.29.0); 1.30 lets an
# MCP server steer the OAuth client's credentials to an authorization server of its choosing
# (GHSA-6qxp-vccf-f47h). proxy-addr arrives through its express and is spoofable via an
# IPv4-mapped IPv6 trust subnet below 2.0.8. Both floors sit inside the parents' ranges.
overrides:
  fast-uri: '^3.1.9'
  ip-address: '^10.7.4'
  '@modelcontextprotocol/sdk': '^1.32.0'
  # @hono/node-server (MCP SDK) still accepts hono releases before 4.13.11.
  hono: '^4.13.11'
  # The MCP SDK accepts @hono/node-server ^2.0.5, which includes releases whose serveStatic decodes
  # the path twice and skips middleware on static paths (GHSA-rmxm-3fg6-px4f).
  '@hono/node-server': '^2.1.3'
  proxy-addr: '^2.0.8'
  # express 5.2.1 (MCP SDK) still accepts body-parser 2.3 (GHSA-27r3-jxmh-p828) and qs 6.16.0
  # (GHSA-6pq8-jhm2-2vcw).
  body-parser: '^2.4.0'
  qs: '^6.16.1'
  # Dev only: postcss (vite, vitest) still accepts source-map-js 1.2.1, whose indexed
  # source-map sections can stall the event loop (GHSA-68fv-2mgg-jv7q).
  source-map-js: '^1.2.2'