packages:
  - apps/*
  - packages/*

overrides:
  '@fastify/static': 10.1.4
  '@esbuild-kit/core-utils>esbuild': 0.25.4
  brace-expansion: 5.0.12
  'fast-uri@>=3.0.0 <4.0.0': 3.1.9
  'fast-uri@>=4.0.0 <5.0.0': 4.2.3
  fastify: 5.12.7
  find-my-way: 9.7.0
  glob: 14.0.3
  js-yaml: 5.4.1
  ini: 1.3.8
  ip-address: 10.7.4
  'nanoid@<3.3.18': 3.3.18
  minimatch: 11.0.3
  node-forge: 1.4.2
  qs: 6.16.1
  tar: 7.5.21
  devalue: 5.9.3
  'source-map-js@<1.2.2': 1.2.2
  'serialize-javascript@<7.1.3': 7.1.3
  'shell-quote@>=1.8.4 <1.11.0': 1.11.0
  '@nuxt/devtools>launch-editor': 2.14.2

allowBuilds:
  '@alicloud/openapi-core': true
  '@nestjs/core': true
  '@parcel/watcher': true
  '@scarf/scarf': false
  esbuild: true
  msgpackr-extract: true
  sharp: true

minimumReleaseAgeExclude:
  - '@nestjs/swagger@11.4.6'
  - bullmq@5.80.6
  - node-forge@1.4.2

peerDependencyRules:
  allowedVersions:
    '@fastify/static': '10'
    # Nest 12 compatibility is confirmed upstream; retain this until the next throttler release.
    # https://github.com/nestjs/throttler/commit/fe3e8a1b5162e03c34cf2c9001612eb438891abb
    '@nestjs/throttler@6.5.0>@nestjs/common': '^12.0.0'
    '@nestjs/throttler@6.5.0>@nestjs/core': '^12.0.0'

# Approved temporary exceptions; expiry is enforced by test:tooling.
# Scope and removal conditions: docs/security-audit-exceptions.md
auditConfig:
  ignoreGhsas:
    - GHSA-gcqx-w48m-w2h4