catalogMode: prefer
cleanupUnusedCatalogs: true
shellEmulator: true
# Keep in sync with the npm cooldown in .github/dependabot.yml: a fresher bump fails CI's lockfile verification.
minimumReleaseAge: 4320
minimumReleaseAgeExclude:
  - kysely@0.29.8
  - motion-panels@0.7.0
packages:
  - packages/*
  - apps/*
catalog:
  '@paper-design/shaders-react': ^0.0.82
  '@ai-sdk/react': ^4.0.167
  '@base-ui/react': ^1.9.0
  '@blobatar/react': ^2.7.0
  '@better-auth/core': ^1.7.18
  '@better-auth/drizzle-adapter': ^1.7.18
  # Pinned: a newer patch than @better-auth/core pulls a second core copy and splits the API's auth types.
  '@better-auth/passkey': 1.7.18
  '@simplewebauthn/browser': ^13.3.0
  '@simplewebauthn/server': ^13.3.3
  '@clack/prompts': ^1.8.1
  '@clickhouse/client': ^1.25.0
  '@duckdb/node-api': 2.0.0-r.1
  '@libsql/client': ^0.18.0
  '@manypkg/get-packages': ^3.1.0
  '@dagrejs/dagre': 3.1.3
  '@date-fns/tz': ^1.5.0
  '@exalabs/ai-sdk': ^2.1.0
  '@faker-js/faker': ^10.6.0
  '@hackylabs/deep-redact': ^4.1.0
  '@hugeicons/core-free-icons': ^4.4.0
  '@hugeicons/react': ^1.1.10
  '@ip-location-db/dbip-city-mmdb': ^2.3.2026060513
  '@mistralai/mistralai': ^3.5.0
  '@modelcontextprotocol/sdk': ^1.32.2
  '@mongodb-js/mongodb-constants': ^0.34.15
  '@mongodb-js/shell-bson-parser': ^1.6.3
  '@mongodb-js/socksv5': ^0.0.11
  '@napi-rs/keyring': 2.1.2
  '@noble/hashes': ^2.4.0
  '@number-flow/react': ^0.6.2
  '@octokit/rest': ^22.0.1
  '@openrouter/ai-sdk-provider': ^3.1.0
  '@orpc/client': 2.0.0-beta.48
  '@orpc/contract': 2.0.0-beta.48
  '@orpc/publisher': 2.0.0-beta.48
  '@orpc/ratelimit': 2.0.0-beta.48
  '@orpc/server': 2.0.0-beta.48
  '@orpc/tanstack-query': 2.0.0-beta.48
  '@playwright/test': ^1.65.0
  '@posthog/rollup-plugin': ^1.6.3
  '@react-email/components': ^1.0.10
  '@rolldown/plugin-babel': ^0.2.4
  '@shadcn/react': ^0.3.1
  '@standard-schema/spec': ^1.1.0
  '@streamdown/code': ^2.0.0
  '@tailwindcss/typography': ^0.5.20
  '@tailwindcss/vite': ^4.3.4
  '@tanstack/browser-db-sqlite-persistence': 0.2.37
  '@tanstack/db-sqlite-persistence-core': 0.4.12
  '@tanstack/offline-transactions': 1.1.4
  '@tanstack/react-db': 0.5.12
  '@tanstack/react-devtools': ^0.10.14
  '@tanstack/react-form': ^1.33.5
  '@tanstack/react-hotkeys': ^0.22.0
  '@tanstack/react-query': ^5.106.1
  '@tanstack/react-query-devtools': ^5.106.1
  '@tanstack/react-router': ^1.170.46
  '@tanstack/react-router-devtools': ^1.167.2
  '@tanstack/react-start': ^1.169.4
  '@tanstack/react-virtual': ^3.14.26
  '@tanstack/router-plugin': ^1.168.48
  '@tanstack/virtual-file-routes': ^1.162.0
  '@todesktop/cli': ^1.28.8
  '@todesktop/runtime': ^2.1.4
  '@types/bun': ^1.4.4
  '@types/d3-dsv': ^3.0.7
  '@types/mssql': ^12.3.0
  '@types/oracledb': ^26.0.1
  '@types/pg': ^8.23.1
  '@types/react': ^19.3.0
  '@types/react-dom': ^19.3.0
  'typescript': ^7.0.2
  '@upstash/context7-tools-ai-sdk': ^1.0.3
  '@vitejs/plugin-react': ^6.2.1
  '@xyflow/react': ^12.12.1
  acorn: ^8.19.0
  ai: ^7.0.163
  ai-resumable-stream: ^3.2.1
  ai-retry: ^2.8.0
  arktype: ^2.2.9
  babel-plugin-react-compiler: ^1.0.0
  better-auth: ^1.7.18
  better-auth-harmony: ^1.3.2
  better-result: ^3.0.1
  blobatar: ^2.7.0
  bson: ^7.3.4
  change-case: ^5.4.4
  citty: ^0.2.2
  class-variance-authority: ^0.7.1
  cmdk: ^1.1.1
  cn: ^0.5.2
  cross-env: ^10.1.0
  d3-dsv: ^3.0.2
  date-fns: ^4.4.0
  drizzle-kit: ^1.0.0-rc.5
  drizzle-orm: ^1.0.0-rc.5
  electron: 45.2.3
  electron-store: ^12.0.0
  hono: ^4.13.16
  hookable: ^6.1.2
  husky: ^9.1.7
  input-otp: ^1.5.0
  js-confetti: ^0.13.1
  kysely: ^0.29.7
  lru-cache: ^11.5.3
  memoza: ^1.4.0
  mmdb-lib: ^3.0.4
  monaco-editor: ^0.57.0
  mongodb: ^7.8.0
  motion: ^14.10.0
  motion-panels: ^0.7.0
  mssql: ^12.7.14
  mysql2: ^3.24.6
  nanoid: ^6.0.2
  nitro: 3.0.260903-beta
  npm-run-all2: ^9.0.4
  oracledb: ^26.0.0
  permix: ^4.4.1
  pg: ^8.23.1
  playwright: ^1.65.0
  portless: ^0.16.0
  posthog-js: ^1.447.3
  posthog-node: ^5.63.1
  react: ^19.3.1
  react-day-picker: ^10.0.2
  react-dom: ^19.3.1
  react-qr-code: ^2.2.0
  redis: ^6.3.1
  resend: ^6.37.0
  seitu: ^1.4.0
  shadcn: ^4.23.0
  sonner: ^2.0.8
  sql-formatter: ^15.9.0
  streamdown: ^2.7.1
  stripe: ^23.1.0
  tailwind-scrollbar: ^4.0.2
  tailwindcss: ^4.3.4
  taze: ^21.3.0
  turbo: ^2.11.10
  tw-animate-css: ^1.4.0
  ua-parser-js: ^2.0.10
  use-stick-to-bottom: ^1.1.6
  uuid: ^14.0.3
  vite: ^8.3.6
  oxfmt: '^0.77.0'
  oxlint: '^1.92.0'
  vite-plugin-electron: ^1.2.0
  zod: ^4.6.7
  oxlint-tailwindcss: ^1.17.1
  '@fontsource-variable/geist': ^5.3.0
  '@fontsource-variable/geist-mono': ^5.3.0
  ultracite: ^8.1.1
  sf-symbols-typescript: ^2.2.0
  '@shadcn/lint': 0.2.5
  socks: ^2.8.10
  shell-quote: ^1.12.0
  json5: ^2.2.3
  '@types/ssh2': ^1.15.6
  ssh2: ^1.17.0
  ssh-config: ^5.3.0
  '@tanstack/react-router-ssr-query': 1.167.3
  ini: ^7.0.0
  fast-xml-parser: ^5.12.0
  fumadocs-core: ^16.18.0
  fumadocs-mdx: ^15.5.0
  '@types/ini': ^4.1.1
  '@types/mdx': ^2.0.14
  sharp: ^0.35.5
  schema-dts: ^2.1.0
  takumi-js: ^2.19.0
  mermaid: ^12.3.0
allowBuilds:
  '@firebase/util': false
  '@google/genai': false
  '@journeyapps/wa-sqlite': true
  '@posthog/cli': true
  core-js: false
  cpu-features: false
  dtrace-provider: false
  electron: true
  esbuild: true
  msgpackr-extract: false
  oracledb: false
  protobufjs: false
  ssh2: false
# @types/ssh2 pins Node 18 types, which clash with Electron's in any workspace compiling the SSH tunnel.
overrides:
  '@tailwindcss/typography>postcss-selector-parser': 6.1.5
  dompurify: ^3.4.17
  '@types/ssh2>@types/node': ^24.13.3
  # Collapse esbuild to one version (drizzle-kit asks for ^0.25): it is an optional peer of better-auth, so a second copy splits better-auth/@better-auth/core into two peer variations whose types stop unifying in @tamery/api. It must stay in vite's required ^0.27.0 || ^0.28.0.
  esbuild: ^0.28.2