patchedDependencies:
  "@clickhouse/client@1.18.3": patches/@clickhouse__client@1.18.3.patch

packages:
  - e2e
  - examples/*
  - types/*
  - webapps/*
  - services/*
  - cli/*
  - libs/*
  - dev-scripts
  - env-preload

catalog:
  tsx: ^4.21.0
  typescript: ^5.6.3
  esbuild: ^0.28.1
  tslib: ^2.6.3
  "@types/node": ^18.15.3
  vitest: ^4.1.12
  "@vitest/ui": ^4.1.12
  lodash: ^4.18.1
  "@types/lodash": ^4.17.24
  ts-node: ^10.9.2
  react: ^18.3.1
  "react-dom": ^18.3.1
  "@types/react": 18.3.0
  "@types/react-dom": 18.3.1
  eslint: ^9.39.4
  "@eslint/js": ^9.39.2
  tailwindcss: ^3.4.14

onlyBuiltDependencies:
  - "@confluentinc/kafka-javascript"
  - "@firebase/util"
  - "@prisma/client"
  - "@prisma/engines"
  - core-js
  - core-js-pure
  - cpu-features
  - esbuild
  - prisma
  - protobufjs
  - sharp
  - ssh2
  - turbo
  - zstd-napi

# Dependency security floors (Dependabot / security-fix.yml maintain these).
# Moved here from package.json's `pnpm.overrides`: pnpm >=10.22 no longer reads
# that field and silently ignores it.
overrides:
  "esbuild@<0.28.1": "^0.28.1"
  "@octokit/request-error@<5.1.1": "^5.1.1"
  "@octokit/plugin-paginate-rest@<9.2.2": "^9.2.2"
  "@octokit/request@<8.4.1": "^8.4.1"
  "@grpc/grpc-js@<1.12.7": "^1.12.7"
  "@grpc/grpc-js@<1.14.5": "^1.14.5"
  "lodash@<4.18.1": "^4.18.1"
  "axios@<1.15.2": "^1.15.2"
  "handlebars@<4.7.10": "^4.7.10"
  "fast-xml-parser@<5.7.0": "^5.7.0"
  "fast-xml-builder@<1.1.7": "^1.1.7"
  "fast-uri@<3.1.9": "^3.1.9"
  "tar-fs@<2.1.4": "^2.1.4"
  "tar@<7.5.19": "^7.5.19"
  "yeoman-environment@<6.0.1": "^6.0.1"
  "serialize-javascript@<7.0.5": "^7.0.5"
  "deepmerge-ts@<8.0.0": "^8.0.0"
  "parse-duration@<2.1.3": "^2.1.3"
  "underscore@<1.13.8": "^1.13.8"
  "sigstore@<4.1.1": "^4.1.1"
  "flatted@<3.4.2": "^3.4.2"
  "minimatch@9.0.1": "^9.0.9"
  "socket.io-parser@<4.2.7": "^4.2.7"
  "form-data@<4.0.6": "^4.0.6"
  "zstd-napi@<0.0.10": "^0.0.10"
  "nth-check@<2.1.1": "2.1.1"
  "nanoid@<3.3.18": "^3.3.18"
  "nanoid@>=4.0.0 <5.1.16": "^5.1.16"
  "postcss@<8.5.18": "^8.5.18"
  "uuid@<14.0.0": "^14.0.0"
  "cross-spawn@<7.0.6": "^7.0.6"
  "path-to-regexp@<0.1.13": "^0.1.13"
  "follow-redirects@<1.16.2": "^1.16.2"
  "webpack-dev-server@<5.2.5": "^5.2.5"
  "@types/react": "18.3.0"
  "@types/react-dom": "18.3.1"
  "glob@>=10.2.0 <10.5.0": "^10.5.0"
  "qs@<6.16.1": "^6.16.1"
  "next@<16.3.6": "^16.3.6"
  "@tootallnate/once@<3.0.1": "^3.0.1"
  "protobufjs@<7.6.5": "^7.6.5"
  "@protobufjs/utf8@<1.1.1": "^1.1.1"
  "lodash-es@<4.18.0": "^4.18.0"
  "yaml@<2.8.3": "^2.8.3"
  "picomatch@<2.3.2": "^2.3.2"
  "js-yaml@<4.3.2": "^4.3.2"
  "undici@<6.29.1": "^6.29.1"
  "undici@>=7.0.0 <7.30.1": "^7.30.1"
  "undici@>=8.0.0 <8.12.2": "^8.12.2"
  "vite@<=6.4.3": "^6.4.4"
  "@babel/runtime@<7.26.10": "^7.26.10"
  "@babel/helpers@<7.26.10": "^7.26.10"
  "@babel/core@<7.29.6": "^7.29.6"
  "body-parser@<1.20.9": "^1.20.9"
  "body-parser@>=2.0.0 <2.4.0": "^2.4.0"
  "tmp@<0.2.6": "^0.2.6"
  "js-cookie@<3.0.7": "^3.0.7"
  "react-router@<7.18.2": "^7.18.2"
  "react-router-dom@<7.18.2": "^7.18.2"
  "ws@<5.2.4": "^5.2.4"
  "ws@>=6 <6.2.3": "^6.2.3"
  "ws@>=7 <7.5.10": "^7.5.10"
  "ws@>=8 <8.20.1": "^8.20.1"
  "brace-expansion@<1.1.21": "^1.1.21"
  "brace-expansion@>=2 <2.1.7": "^2.1.7"
  "brace-expansion@>=3 <3.0.9": "^3.0.9"
  "brace-expansion@>=4 <5.0.12": "^5.0.12"
  "hono@<4.13.11": "^4.13.11"
  "ip-address@<=10.7.3": "^10.7.4"
  "@hono/node-server@<2.1.3": "^2.1.3"
  "@azure/identity@<4.14.1": "^4.14.1"
  "@azure/msal-node@<7.1.0": "^7.1.0"
  # Keep Zod 3 consumers compatible with their schema adapters. CVE-2023-54404
  # was rejected on 2026-10-28: https://www.cve.org/CVERecord?id=CVE-2023-54404
  "@humanfs/node@<0.16.8": "^0.16.8"
  "browserslist@<4.28.7": "^4.28.7"
  "fflate@<0.8.3": "^0.8.3"
  "engine.io@<6.6.10": "^6.6.10"
  "moment@>=2.29.2 <2.31.0": "^2.31.0"
  "sharp@<0.35.5": "^0.35.5"
  "source-map-js@<1.2.2": "^1.2.2"
  "proxy-addr@<2.0.8": "^2.0.8"
  "postcss-selector-parser@<7.1.6": "^7.1.6"
  "@fastify/busboy@<3.2.2": "^3.2.2"
  "probe-image-size@<=7.3.0": "^7.4.0"
  "svgo@<4.1.0": "^4.1.0"
  "baseline-browser-mapping@<2.11.0": "^2.11.0"
  "@vitest/mocker@<4.1.12": "^4.1.12"
  "websocket-driver@<0.7.5": "^0.7.5"