docusaurus/pnpm-workspace.yaml at main · Akul2010/docusaurus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# TODO change later to "isolated" ?
nodeLinker: 'hoisted'

# For now we use this setting instead of the workspace:* protocol
# To use workspace:* we probably need to adopt pnpm for publishing
# See https://pnpm.io/workspaces#publishing-workspace-packages
linkWorkspacePackages: true

packages:
  - 'packages/*'
  - 'argos'
  - 'website'
  - 'test-website-in-workspace'
  - 'packages/create-docusaurus/templates/*'
  - 'admin/test-bad-package'
  - 'admin/new.docusaurus.io'

overrides:
  axios: 1.16.1 # Fix CVEs https://github.com/axios/axios/security/advisories
  tar: ^7.5.16 # Fix CVEs https://github.com/isaacs/node-tar/security/advisories
  # Monorepo deduplicate sharp (force Argos > Sharp upgrade)
  # This version doesn't use a postinstall script
  # See https://sharp.pixelplumbing.com/changelog/v0.35.0/
  sharp: ^0.35.1

minimumReleaseAge: 10080
minimumReleaseAgeStrict: true
minimumReleaseAgeIgnoreMissingTime: false
minimumReleaseAgeExclude:
  - tar@7.5.16

trustPolicy: no-downgrade
trustPolicyIgnoreAfter: 525600 # ignore packages published 1+ year ago
trustPolicyExclude:
  - 'tinyexec@1.2.2'
  - '@trickfilm400/rollup-plugin-off-main-thread@3.0.0-pre1'
  - 'browserslist-load-config@1.0.2'

trustLockfile: false
blockExoticSubdeps: true
verifyDepsBeforeRun: error

strictDepBuilds: true
dangerouslyAllowAllBuilds: false
allowBuilds:
  '@parcel/watcher': false
  '@swc/core': false
  core-js: false
  fast-folder-size: false
  nx: false
  sharp: false