packages:
  - 'apps/*'
  - 'packages/*'

# pnpm 11 blocks dependency install scripts unless they are allowed here.
# These native modules (and esbuild's binary) need them.
allowBuilds:
  argon2: true
  better-sqlite3: true
  esbuild: true

# Security: lodash-es 4.17.23 and older (GHSA-f23m-r3pf-42rh, code injection via `_.template`;
# and a prototype pollution) arrive only through mermaid's parser, in the Mermaid example plugin.
overrides:
  lodash-es: 4.18.1