packages:
  - packages/*

onlyBuiltDependencies:
  - esbuild
  - workerd

ignoredBuiltDependencies:
  - bufferutil
  - msw
  - utf-8-validate

overrides:
  rollup@>=4: '>=4.59.0'
  postcss@<8.5.10: ^8.5.10
  vite@>=6.0.0 <6.4.5: ^6.4.5
  lodash@<4.18.0: ^4.18.0
  brace-expansion@<1.1.21: ^1.1.21
  brace-expansion@>=2.0.0 <2.1.7: ^2.1.7
  brace-expansion@>=3.0.0 <3.0.9: ^3.0.9
  brace-expansion@>=4.0.0 <5.0.12: ^5.0.12
  underscore@<1.13.8: ^1.13.8
  js-yaml@<3.15.2: ^3.15.2
  js-yaml@>=4.0.0 <4.3.2: ^4.3.2
  js-yaml@>=5.0.0 <=5.2.1: ^5.4.1
  '@babel/core@<7.29.6': ^7.29.6
  picomatch@<2.3.2: ^2.3.2
  picomatch@>=4.0.0 <4.0.4: ^4.0.4
  smol-toml@<1.7.1: ^1.7.1
  minimatch@<3.1.3: ^3.1.3
  minimatch@>=5.0.0 <5.1.8: ^5.1.8
  minimatch@>=7.0.0 <11.0.1: ^11.0.1
  glob@>=9.0.0 <14.0.2: ^14.0.2
  undici@>=7.0.0 <7.30.1: ^7.30.1
  ws@>=8.0.0 <8.20.1: ^8.20.1
  shell-quote@<1.9.0: ^1.9.0
  sharp@<0.35.5: ^0.35.5
  browserslist@<4.28.7: ^4.28.7
  tar@<7.5.19: ^7.5.19
  zod@>=4.0.0 <4.6.6: ^4.6.6

catalog:
  '@types/node': ^22.20.5
  '@typescript/native': npm:typescript@^7.0.2
  '@vitest/browser': ^4.1.12
  '@vitest/browser-playwright': ^4.1.12
  '@vitest/coverage-v8': ^4.1.12
  tsdown: ^0.22.14
  typescript: npm:@typescript/typescript6@^6.0.2
  vitest: ^4.1.12

# Delay installing freshly published versions by 3 days (value is in minutes) so a
# compromised release has time to be caught and unpublished before it reaches us.
minimumReleaseAge: 4320