Repository navigation
Expand file tree
/
Copy pathpnpm-workspace.yaml
More file actions
777 lines (763 loc) · 35.1 KB
/
Copy pathpnpm-workspace.yaml
File metadata and controls
777 lines (763 loc) · 35.1 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
# Register .claude/hooks/* as workspace packages so taze (run via
# `pnpm run update`) sees and bumps their package.json manifests
# alongside the root. Keeps hook deps in lockstep with the main tree.
#
# tools/* — developer-only utilities (audit/codemod scripts). Not
# published, not part of the dist tree.
packages:
- .config/fleet/oxlint-plugin
- .config/fleet/oxlint-plugin/fleet/*
- .config/repo/oxlint-plugin/*
- tools/*
- '.claude/hooks/fleet/*'
- '.claude/hooks/repo/*'
enableGlobalVirtualStore: true
# GHSA-vfj7-8cjw-p6xm affects braces 3.0.3. The exact package version is
# patched below to reject brace nesting deeper than 64 before recursive
# traversal. pnpm audit uses package metadata and cannot detect the patch.
audit:
ignore:
- GHSA-vfj7-8cjw-p6xm
# vite 8.1.0 — dev dep (vitest's bundler). 8.1 adds experimental.bundledDev
# (NOT adopted — experimental, and the fleet runs stable-only). Published
# within the 7-day soak; exact-pinned so a future 8.1.1 still soaks.
# taze 19.16.0 — the dep updater itself; forced ahead of the soak by owner
# directive so the regenerated single-registry patch (patchedDependencies)
# tracks the current release. Exact-pinned so a future version re-soaks.
# shadscan 0.2.0 — deterministic UI audits for shadcn apps, used by the
# design skills; forced ahead of the soak by owner directive. Exact-pinned
# so a future version re-soaks.
# verkit — new dev-only transitive of taze 19.16.0 (same owner directive);
# exact-pinned so future versions re-soak.
# js-yaml 5.2.2 — HIGH security fix, GHSA-pm4m-ph32-ghv5: exponential parse
# time in flow collections. The canonical overrides entry forces it past
# markdownlint-cli2 0.23.1's vulnerable 5.2.1 exact-pin. Soak bypassed per
# the high-severity security exception; exact-pinned so a future version
# re-soaks.
catalog:
'@sigstore/bundle': 5.0.0
'@sigstore/core': 4.0.1
'@sigstore/protobuf-specs': 0.5.2
'@sigstore/verify': 4.1.2
'@mdn/browser-compat-data': 8.1.4
'@modelcontextprotocol/client': 2.3.0
# run-local-ci (bin: local-ci, formerly published as @redwoodjs/agent-ci)
# runs a repo's GitHub Actions workflows locally in Docker so a change can
# be validated before it's pushed (see the `agent-ci` skill). dtu-github-
# actions is its GitHub-Actions parser, pinned explicitly (not left
# transitive) so its version is uniform fleet-wide.
'@ultrathink/acorn.rs.wasm': 0.2.0
'ata-validator': 1.46.0
'brace-expansion': 5.0.12
'dtu-github-actions': 0.18.1
# shadscan — shadcn UI audit CLI for the design skills (missing UI
# fundamentals report). Exact-pinned; the whole package is younger than
# the soak window, so it carries a minimumReleaseAgeExclude entry below.
'@shadscan/cli': 0.17.0
'@sinclair/typebox': 0.34.52
'ecc-agentshield': 1.6.0
'fallow': 3.31.0
'mcp-tada': 0.4.0
'run-local-ci': 0.18.1
# typebox 1.x — the unscoped rewrite of @sinclair/typebox. Both names are
# pinned while the fleet migrates; the 0.x entry is deleted once no member
# imports the scoped name. 1.3.10 is inside the 7-day soak, so it carries a
# dated minimumReleaseAgeExclude entry above.
'typebox': 1.3.34
'@socketregistry/packageurl-js': 1.6.0
# -stable aliases: pnpm `overrides:` can't redirect a package's own
# name when used INSIDE that same package — Node ESM treats it as a
# self-reference and resolves through the local exports map, not
# the override. The 4 Socket-published packages therefore need a
# SECOND name (`<canonical>-stable`) aliased via `npm:` to the
# published version. Build / hook / script / config code uses the
# -stable name so it always resolves to the published catalog
# version regardless of where the importing file lives. src/ +
# test/ code uses the canonical name because vitest aliases that
# to local src/.
'@socketregistry/packageurl-js-stable': 'npm:@socketregistry/packageurl-js@1.6.0'
'@socketsecurity/lib': 7.1.0
'@socketsecurity/lib-stable': 'npm:@socketsecurity/lib@7.1.0'
'@socketsecurity/registry': 2.0.5
'@socketsecurity/registry-stable': 'npm:@socketsecurity/registry@2.0.5'
'@socketsecurity/sdk': 4.2.0
'@socketsecurity/sdk-stable': 'npm:@socketsecurity/sdk@4.2.0'
'@types/mdast': 4.0.4
'@types/node': 26.6.4
'@types/semver': 7.8.0
'@types/shell-quote': 1.7.5
'compromise': 14.17.0
# fast-check — property-based testing for pure fleet-script logic (pin
# derivation, version compare, config validation). Runs standalone in vitest.
# published: 2026-07-08 (past 7-day soak). See .claude/skills/fleet/property-testing.
'fast-check': 4.10.2
'magic-string': 1.4.2
'markdownlint-cli2': 0.23.3
'mdast-util-from-markdown': 2.0.3
# GFM pair for render-faithful markdown parsing (tables, footnotes,
# strikethrough, autolinks) — mdast-util-from-markdown must always be
# combined with micromark-extension-gfm + mdast-util-gfm.
'mdast-util-gfm': 3.1.0
# The serializer half, for tools that legitimately EMIT markdown; edits to
# existing documents stay position-based (never a whole-doc round-trip).
'mdast-util-to-markdown': 2.1.3
'micromark': 4.0.3
'micromark-extension-gfm': 3.0.0
'minimatch': 10.2.6
'neosanitize': 0.5.0
# nock — HTTP mocking for tests (disableNetConnect() + stubs). Pinned back
# from the @mswjs/interceptors rewrite: npm deprecates 15.0.0 ("released
# accidentally"), so the catalog-drift automation skips it and this pin is
# hand-aligned with the canonical fleet catalog; bump to the stabilized 15.x
# when it ships.
'nock': 14.0.17
# npm-high-impact 1.13.0 — wooorm's high-impact npm package lists
# (npmHighImpact + npmTopDependents + npmTopDownloads); the ecosystem-reach
# input for scripts/fleet/measure-ecosystem-impact.mts, which ranks override
# candidates before simulating what a port actually cuts. Published
# 2026-06-08, past the 7-day soak.
'npm-high-impact': 1.13.0
'oxfmt': 0.72.0
'oxlint': 1.87.0
'oxlint-tsgolint': 7.0.2003
# parse5 — the HTML parser half of the markdown story. mdast hands raw HTML
# back as an opaque `html` node (README `<picture>`/`<img>` blocks), so
# attribute-level edits need parse5's per-attribute source locations to land
# on a real attribute value instead of a string match. Paired with the mdast
# + micromark GFM entries above; see lib/markdown-ast.mts.
'parse5': 8.0.1
# playwright-core — headless Chromium driver for the seeing-rendered-output
# skill (render a page / unpacked MV3 extension popup to PNG). Fleet-canonical
# catalog dep; source of truth is template/pnpm-workspace.fleet.yaml.
'playwright-core': 1.63.0
# portless — stable HTTPS `.localhost` URLs for local page tests and rendered UI checks.
'portless': 0.15.7
# Direct bundler pin for repos that run rolldown as their build
# (socket-packageurl-js, socket-webext, the trusted-publisher
# extension, and the in-progress esbuild→rolldown migrations).
# Single-sourcing the version here stops the per-repo drift
# (was 1.0.0 / 1.0.1 / 1.0.2 across adopters). Matches the
# vite-bundled rolldown (8.0.14 → 1.0.2); the per-platform
# @rolldown/binding-* + @oxc-project/types stay as soak-excluded
# transitives (consumers depend on `rolldown` only).
'regjsparser': 0.13.3
'rolldown': 1.2.12
'semver': 7.8.5
'shell-quote': 1.12.0
'taze': 21.3.0
# vite 8.0.16 swaps esbuild → rolldown natively (bundles rolldown
# 1.0.2) and patches the <=8.0.15 advisories (GHSA-fx2h-pf6j-xcff
# high, GHSA-v6wh-96g9-6wx3 medium). Tracked here so the pnpm
# override below pins every transitive `vite` (vitest, @vitest/*,
# plugin authors) to it.
'typescript': 7.1.0-dev.20261002.1
'vitest': 5.0.3
'@vitest/coverage-v8': 5.0.3
'@bcoe/v8-coverage': 1.0.2
ast-v8-to-istanbul: 1.0.7
'chrome-devtools-mcp': 1.10.1
# Playwright MCP server — agent-driven browsing with the fleet agent-banner
# init script (see .config/fleet/playwright/).
'@playwright/mcp': 0.0.83
'@vitest/ui': 5.0.3
c8: 12.0.0
# Alias to the post-rename artifact at the version this repo already
# installs (dedup: one acorn.rs.wasm major); the pre-rename
# @ultrathink/acorn-wasm name is npm-deprecated.
'@vitiate/core': 0.3.1
'html5parser': 3.0.0
# Source of truth for CI-provider + AI-agent env-var detection. devDep only:
# the build-time codemod inlines its isCI/isAgent boolean expressions into
# dist, so it never enters the runtime dependency tree. Published 2026-04-15,
# well past the 7-day soak — no minimumReleaseAgeExclude needed.
'std-env': 4.3.0
'svgo': 4.1.0
# Test-only tar extraction seam for archives coverage; single-sourced here so
# the devDep and the dedup override below stay on one pin.
'tar-fs': 3.1.3
'vite': 8.3.2
'vitiate': 0.3.1
# Read by scripts/fleet/constants/catalog-holds.mts, cascaded fleet payload.
# No script keys on it, so the devDep is declared via FLEET_REQUIRED_DEVDEPS.
'yaml': 2.9.1
# Repository-specific development dependencies.
'@babel/core': '7.29.7'
'@babel/parser': '7.29.9'
'@babel/traverse': '7.29.8'
'@babel/types': '7.29.8'
'@inquirer/checkbox': '5.2.5'
'@inquirer/confirm': '6.3.2'
'@inquirer/input': '5.1.6'
'@inquirer/password': '5.2.2'
'@inquirer/search': '4.3.3'
'@inquirer/select': '5.2.5'
'@npmcli/arborist': '9.9.2'
'@npmcli/package-json': '7.0.5'
'@npmcli/promise-spawn': '8.0.3'
'@perryts/perry': '0.5.1520'
'@socketregistry/is-unicode-supported': '1.0.5'
'@socketregistry/yocto-spinner': '1.0.25'
'@yarnpkg/extensions': '2.0.7'
'cacache': '20.0.4'
'debug': '4.4.3'
'del': '8.0.1'
'esbuild': '0.28.2'
'fast-glob': '3.3.3'
'fast-sort': '3.4.1'
'fflate': '0.8.3'
'get-east-asian-width': '1.7.0'
'globals': '17.13.0'
'has-flag': '5.0.1'
'libnpmexec': '10.3.3'
'libnpmpack': '9.1.14'
'make-fetch-happen': '15.0.6'
'normalize-package-data': '8.0.0'
'npm-package-arg': '13.0.2'
'p-map': '7.0.8'
'pacote': '21.5.1'
'picomatch': '4.0.7'
'pony-cause': '2.1.11'
'signal-exit': '4.1.0'
'spdx-correct': '3.2.0'
'spdx-expression-parse': '4.0.0'
'streaming-iterables': '8.0.1'
'supports-color': '10.2.2'
'tar-stream': '3.2.2'
'terminal-link': '2.1.1'
'validate-npm-package-name': '6.0.2'
'webpack': '5.111.1'
'which': '5.0.0'
'yargs-parser': '22.0.0'
'yoctocolors-cjs': '2.1.3'
'zod': '4.6.5'
# Native post-install build scripts. These three arrive transitively via
# @redwoodjs/agent-ci's `ssh2` (optional crypto acceleration). agent-ci's
# published CLI (`dist/cli.js`) runs without them — verified `agent-ci --help`
# works with the builds skipped — so we decline to run their post-install
# scripts. Declining is the safe default; running native build scripts from a
# transitive dep is unnecessary attack surface here.
allowBuilds:
# The CLI's postinstall is its own installer bootstrap; unneeded as a dep.
'@anthropic-ai/claude-code': false
# Optional native addon for ssh2 crypto acceleration; JS fallback is fine.
cpu-features: false
# Ships prebuilt dist; its postinstall codegen isn't needed as a dependency.
protobufjs: false
# Fleet browser automation is playwright-core (page + extension-popup PNG) and
# chrome-devtools-mcp; puppeteer itself is unused. Kept as a guard — no dep
# pulls puppeteer today, but if a transitive ever does, its Chrome-download
# postinstall stays declined (playwright-core already supplies the browser).
puppeteer: false
# Native bindings are optional (cpu-features above); pure-JS paths suffice.
ssh2: false
# The published sdk leaks fleet repo scripts including a preinstall
# (bootstrap-zero-dep-packages.mjs) meant for the sdk repo itself, not
# consumers. Explicitly deny it.
'@socketsecurity/sdk': false
'@swc/core': true
esbuild: true
rolldown: true
# Soak time for external-tools updates: minutes a release must have
# existed before scripts/fleet/external-tools/update.mts will consider it
# (mirrors pnpm's `minimumReleaseAge` for npm catalog entries). 10080
# minutes = 7 days. Same value fleet repos use.
minimumReleaseAge: 10080
minimumReleaseAgeExclude:
- '@socketoverride/*'
- '@socketregistry/*'
- '@socketsecurity/*'
- sfw
- socket
- '@stuie/*'
- '@ultrathink/*'
- '@sdxgen/*'
- sdxgen
- '@abitious/*'
- '@decmpfs/*'
- '@node-smol/*'
- sockeye
- 'sfw'
- 'socket'
- 'sdxgen'
- 'sockeye'
# published: 2026-10-06 | removable: 2026-10-13
- '@ata-validator/native-darwin-arm64@1.46.0'
# published: 2026-10-06 | removable: 2026-10-13
- '@ata-validator/native-darwin-x64@1.46.0'
# published: 2026-10-06 | removable: 2026-10-13
- '@ata-validator/native-linux-arm64-gnu@1.46.0'
# published: 2026-10-06 | removable: 2026-10-13
- '@ata-validator/native-linux-arm64-musl@1.46.0'
# published: 2026-10-06 | removable: 2026-10-13
- '@ata-validator/native-linux-x64-gnu@1.46.0'
# published: 2026-10-06 | removable: 2026-10-13
- '@ata-validator/native-linux-x64-musl@1.46.0'
# published: 2026-10-06 | removable: 2026-10-13
- '@ata-validator/native-win32-x64@1.46.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxc-project/types@0.153.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-android-arm-eabi@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-android-arm64@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-darwin-arm64@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-darwin-x64@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-freebsd-x64@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-arm-gnueabihf@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-arm-musleabihf@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-arm64-gnu@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-arm64-musl@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-ppc64-gnu@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-riscv64-gnu@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-riscv64-musl@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-s390x-gnu@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-x64-gnu@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-linux-x64-musl@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-openharmony-arm64@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-win32-arm64-msvc@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-win32-ia32-msvc@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxfmt/binding-win32-x64-msvc@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-android-arm-eabi@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-android-arm64@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-darwin-arm64@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-darwin-x64@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-freebsd-x64@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-arm-gnueabihf@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-arm-musleabihf@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-arm64-gnu@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-arm64-musl@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-ppc64-gnu@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-riscv64-gnu@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-riscv64-musl@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-s390x-gnu@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-x64-gnu@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-linux-x64-musl@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-openharmony-arm64@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-win32-arm64-msvc@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-win32-ia32-msvc@1.87.0'
# published: 2026-10-05 | removable: 2026-10-12
- '@oxlint/binding-win32-x64-msvc@1.87.0'
# published: 2026-10-06 | removable: 2026-10-13
- 'ata-validator@1.46.0'
# published: 2026-10-05 | removable: 2026-10-12
- 'oxfmt@0.72.0'
# published: 2026-10-05 | removable: 2026-10-12
- 'oxlint@1.87.0'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.android-arm64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.android-x64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.darwin-arm64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.darwin-x64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.freebsd-x64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.linux-arm64-musl@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.linux-arm64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.linux-ppc64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.linux-riscv64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.linux-s390x@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.linux-x64-musl@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.linux-x64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.win32-arm64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- '@pnpm/exe.win32-x64@12.10.1'
# published: 2026-10-06 | removable: 2026-10-13
- 'pnpm@12.10.1'
# Security fix GHSA-ch52-4w7c-c8xp; exact pin until the seven-day soak clears.
# published: 2026-10-04 | removable: 2026-10-11
- 'http-cache-semantics@4.3.0'
# Refuse transitive (sub-) deps declared via git/tarball/local-tarball
# specs. Direct git deps in this repo are still allowed; this only
# affects what nested dependencies are permitted. Defends against a
# package listing a git URL in its own dependencies — a supply-chain
# vector that bypasses npm registry validation. pnpm's current
# default is `false`; declared explicitly so a future default flip
# can't silently widen the trust boundary.
blockExoticSubdeps: true
# pnpm `overrides` block — two purposes:
#
# 1. Force every transitive `vite` resolution to the catalog'd 8.0.13.
# Vitest 4.1.6 advertises support for `vite: ^6.0.0 || ^7.0.0 || ^8.0.0`,
# so the bump is compatible. The override is what actually removes
# esbuild from the install tree — without it, vitest would still
# resolve vite ^6.x.
#
# 2. Force every consumer of Socket's own packages to resolve through
# the catalog-pinned published versions. The `catalog:` form rewrites
# `workspace:*`, `^x.y.z`, and bare-version specs alike to the version
# in the default `catalog:` block above. This is the safety property
# that prevents accidental local-checkout resolution when a sibling
# repo is on disk: even if a downstream package declares
# `"@socketsecurity/lib": "workspace:*"`, pnpm rewrites it to the
# pinned npm version instead of a sibling working tree.
overrides:
# Fleet-canonical overrides (managed by socket-wheelhouse sync; do not edit).
'@polka/url': '1.0.0-next.29'
'@sinclair/typebox': 'catalog:'
'@socketregistry/packageurl-js': 'catalog:'
'@socketsecurity/lib': 'catalog:'
'@socketsecurity/registry': 'catalog:'
'@socketsecurity/sdk': 'catalog:'
'@swc/core': '1.16.1'
'brace-expansion@>=4': '5.0.12'
'chalk@>=5': '5.6.2'
'es-define-property': 'npm:@socketregistry/es-define-property@1.0.7'
'es-set-tostringtag': 'npm:@socketregistry/es-set-tostringtag@1.0.10'
'function-bind': 'npm:@socketregistry/function-bind@1.0.7'
'glob': '13.0.6'
'gopd': 'npm:@socketregistry/gopd@1.0.7'
'has-symbols': 'npm:@socketregistry/has-symbols@1.0.7'
'has-tostringtag': 'npm:@socketregistry/has-tostringtag@1.0.7'
'hasown': 'npm:@socketregistry/hasown@1.0.7'
'iconv-lite': '0.7.3'
'isexe@>=3': '4.0.0'
'js-yaml@>=5.0.0 <5.2.2': '5.4.2'
'lru-cache@>=10': '11.5.3'
'magic-string': '1.4.2'
'mime-db': '1.54.0'
'mime-types@>=3': '3.0.2'
'minimatch@>=3': '10.2.6'
'minipass@>=4': '7.1.3'
'postcss@>=8': '8.5.28'
'safe-buffer': 'npm:@socketregistry/safe-buffer@1.0.9'
'safer-buffer': 'npm:@socketregistry/safer-buffer@1.0.10'
'semver@>=5.0.0 <7.6.0': '7.8.5'
'side-channel': 'npm:@socketregistry/side-channel@1.0.10'
'ssri@>=12': '13.0.1'
'string-width@>=5': '8.3.0'
'tinyexec': '1.3.1'
'typebox': 'catalog:'
'undici@<6': '6.28.0'
'update-notifier@>=4.0.0': '7.3.1'
'uuid': '11.1.1'
'which': '7.0.0'
'wrap-ansi@>=8': '9.0.2'
'yaml@2': '2.9.1'
# Repo-specific overrides below.
'@anthropic-ai/sdk': '0.91.1'
'@grpc/grpc-js': '1.14.5'
# Dedup: @grpc/proto-loader 0.7 (dockerode) + 0.8 (@grpc/grpc-js) → 0.8.1.
# Both CJS with a stable load/loadSync surface.
'@grpc/proto-loader': '0.8.1'
# GHSA-frvp-7c67-39w9 - path traversal in serve-static on Windows via an
# encoded backslash. Reached transitively through the agent SDK's MCP SDK,
# which still resolves a vulnerable range on its own.
'@hono/node-server@<1.19.15': '1.19.17'
'@inquirer/ansi': '2.0.8'
'@inquirer/core': '11.2.1'
'@inquirer/figures': '2.0.9'
'@modelcontextprotocol/sdk': '1.32.0'
'@npmcli/arborist': '9.9.2'
'@npmcli/git': '6.0.3'
'@npmcli/installed-package-contents': '4.0.0'
'@npmcli/name-from-folder': '4.0.0'
'@npmcli/promise-spawn': '9.0.1'
'@npmcli/redact': '4.0.0'
'@npmcli/run-script': '10.0.4'
'@sigstore/core@<4': '3.2.1'
'@sigstore/sign': '4.1.1'
'@types/unist': '3.0.3'
# Vitiate 0.3.1's wasm instrumenter requires the SWC 1.15 host format.
'@vitiate/core>@swc/core': '1.15.43'
'ajv-formats': '3.0.1'
'ansi-regex': '6.4.0'
# Dedup: ansi-styles 4 (CJS) + 6 (ESM-only) → 6.2.3. chalk@4 was the only
# CJS require()r of the external ansi-styles; collapsing chalk up to 5 (which
# vendors its own ansi-styles) leaves only ESM importers (wrap-ansi), so no
# compat patch is needed here.
'ansi-styles': '6.2.3'
'baseline-browser-mapping': '2.11.27'
# Must match the `brace-expansion@>=4` override, the catalog pin, the soak
# exclude and the patch key above — all four say 5.0.9. This bare key is more
# specific, so at 5.0.8 it won and pinned resolution there, which orphaned
# `patches/brace-expansion@5.0.9.patch` and made every install fail with
# ERR_PNPM_UNUSED_PATCH.
'brace-expansion': '5.0.12'
'browserslist': '4.29.3'
# Dedup: chalk 4 (CJS; @yarnpkg/*, type-coverage) + chalk 5 (ESM-only;
# ecc-agentshield) → 5.6.2. chalk 5 ships no `require` export condition, so a
# CJS require() lands on the ESM namespace rather than the callable default;
# the paired patch adds source/index.cjs restoring the chalk@4 require shape.
'chalk': '5.6.2'
'chownr': '3.0.0'
# Dedup: commander 2/8/11/13 → 13.1.0. Only the CLI bins of terser/katex/svgo
# reference commander (their library entry points don't); all four are CJS.
'commander': '13.1.0'
# Dedup: content-type 1 (express/body-parser) + 2 (type-is) → 2.1.0. Both
# CJS; the paired patch restores content-type@1's req/res-object input that
# body-parser@2.2.2 still calls parse() with.
'content-type': '2.1.0'
# Dedup: css-tree 2 (csso) + 3 (svgo) → 3.2.1. Both dual CJS/ESM.
'css-tree': '3.2.1'
'debug': '4.4.3'
'diff': '9.0.0'
'estraverse': '5.3.0'
'fast-uri': '3.1.8'
'globby': '16.2.4'
'has-flag': '5.0.1'
# 4.12.25+ clears GHSA-88fw-hqm2-52qc (hono CORS wildcard+credentials reflect),
# pulled transitively via @anthropic-ai/claude-agent-sdk.
'hono': '4.13.12'
'hosted-git-info': '8.1.0'
'http-cache-semantics': '4.3.0'
'ip-address': '10.7.3'
'isexe': '3.1.5'
# Dedup: js-tokens 4 (@babel/code-frame, CJS require) + 10 (ast-v8-to-istanbul,
# ESM import) → 10.0.0. The two majors have incompatible APIs (v4 regex vs v10
# generator); the paired patch serves js-tokens@4's regex+matchToToken on the
# `require` condition and keeps the v10 generator on `import`.
'js-tokens': '10.0.0'
# 4.2.0 clears GHSA-h67p-54hq-rp68 (js-yaml quadratic merge-key DoS, <=4.1.1),
# pulled transitively via @yarnpkg/core.
'js-yaml': '4.3.2'
'json-parse-even-better-errors': '5.0.0'
'katex': '0.18.10'
'lru-cache': '11.5.3'
'make-fetch-happen': '15.0.6'
# Dedup: mimic-response 1 (clone-response) + 3 (decompress-response) → 3.1.0.
# Both CJS with the same mimicResponse(from, to) surface.
'mimic-response': '3.1.0'
# Dedup: lifted from 9.0.9 to the newest line the fleet carries. 9's ESM
# build ships named exports only, so the CI cache action's default import
# throws "does not provide an export named 'default'" and kills the job at
# setup before a check runs. 10 does not fix that on its own — it drops the
# default too — so the paired patch restores it on BOTH builds, the same
# treatment brace-expansion needs above.
'minimatch': '10.2.6'
'minipass': '7.1.3'
'minipass-fetch': '4.0.1'
'minipass-flush': '1.0.7'
'minipass-sized': '1.0.3'
'minipass@7': '7.1.3'
'minizlib': '3.1.0'
'npm-bundled': '5.0.0'
'npm-normalize-package-bin': '5.0.0'
'npm-package-arg': '12.0.2'
'npm-pick-manifest': '10.0.0'
'p-map': '7.0.8'
'pacote': '21.5.1'
'picomatch': '4.0.7'
'postcss': '8.5.28'
'postcss-selector-parser': '7.1.6'
'protobufjs': '7.6.6'
'proxy-addr': '2.0.8'
'proc-log': '6.1.0'
'qs': '6.16.0'
# Unify every rolldown resolution to the catalog pin (1.1.0). vite 8.0.14
# bundles its own rolldown (1.0.2) transitively; without this override the
# tree would carry two rolldown versions + two sets of platform bindings.
'rolldown': 'catalog:'
'semver': '7.8.5'
'signal-exit': '4.1.0'
'spdx-expression-parse': '4.0.0'
'ssri': '12.0.0'
'smol-toml': '1.9.0'
'source-map-js': '1.2.2'
'string-width': '8.3.0'
'strip-ansi': '7.2.0'
'supports-color': '10.2.2'
# 7.5.16+ clears GHSA (node-tar PAX size-override parser differential, <=7.5.15).
'tar': '7.5.22'
# Dedup: tar-fs 2 (dockerode) + 3 (bundled into src/archives) → the catalog
# pin, and its tar-stream 2/3 dep along with it → 3.2.0. Both are CJS;
# dockerode is the only tar-fs@2 consumer (latent devtool).
'tar-fs': 'catalog:'
'tar-stream': '3.2.2'
'terminal-link': '2.1.1'
'tslib': '2.8.1'
'undici': '6.29.0'
# Force EVERY transitive vite (via vitest, plugins) to the rolldown-native
# 8.x catalog pin so esbuild never resolves into the tree.
'vite': 'catalog:'
'which@>=4': '7.0.0'
'wrap-ansi': '9.0.2'
'yaml': '2.9.1'
# Dedup: yargs-parser 21 (yargs@17, CJS require) + 22 (bundled into
# src/exe/argv/parse) → 21.1.1. 22 is ESM-only (no `require` export) and would
# break yargs@17; 21.1.1 is dual CJS/ESM with the same parse surface and is
# the version rolldown bundles for src.
'yargs-parser': '21.1.1'
'yoctocolors-cjs': '2.1.3'
# Dedup: zod 3 (ecc-agentshield, dtu-github-actions) + 4 (claude-agent-sdk peer
# ^4.0.0, mcp-sdk) → 4.1.12. claude-agent-sdk requires v4; the v3 consumers use
# only the v4-compatible core surface (z.object/string/array/number/coerce/parse).
'zod': '4.6.5'
patchedDependencies:
# dedup compat shim: @polka/url@1 replaced the @polka/url@0.5 default-callable
# export (`require('@polka/url')` itself was the parse function, returning
# `{query: <raw string>, search, href, path, pathname, _raw}`) with a named
# `parse` export returning `{pathname, search, query: <parsed object>, hash, raw}`.
# polka@0.5.2 (pulled by run-local-ci -> dtu-github-actions) needs the old
# default-callable shape; the patch ports it verbatim as the default export
# while leaving the modern named `parse` export (used by sirv) untouched —
# letting the override collapse @polka/url to one version.
'@polka/url@1.0.0-next.29': patches/fleet/@polka__url@1.0.0-next.29.patch
# default-export interop (managed by socket-wheelhouse sync; do not edit):
# v10's ESM build ships named exports only, so `import minimatch from
# 'minimatch'` throws "does not provide an export named default". That is
# the shape `@actions/cache` resolves through, so an unpatched member dies
# in the CI cache step at setup, before a single check runs. The patch adds
# the default to BOTH builds; patching one leaves the other broken.
# It also makes the `minimatch@>=3` hoist safe: a v3 consumer
# (`@actions/glob@0.6.1` pulls 3.1.5) default-imports a callable, and the
# patched v10 answers that same shape.
# On a bump, regenerate via `pnpm patch minimatch` + `pnpm patch-commit`.
minimatch@10.2.6: patches/fleet/minimatch@10.2.6.patch
# dedup: workflow variable presence (managed by socket-wheelhouse sync):
# Local CI must accept explicitly supplied empty workflow variables.
# The fleet payload client ID defaults to empty when no app is configured.
# Check own-property presence in run preflight and job validation;
# absent variables remain errors.
# Intercepted fetch records local HEAD in FETCH_HEAD so inline detached
# checkout preserves the pre-populated Local CI workspace.
run-local-ci@0.18.1: patches/fleet/run-local-ci@0.18.1.patch
# Indirects the `node-gyp/bin/node-gyp.js` require.resolve so the rolldown
# bundle doesn't statically inline node-gyp; consumer: pacote → run-script
# in the bundled dist tree.
'@npmcli/run-script@10.0.4': patches/repo/@npmcli__run-script@10.0.4.patch
# Replaces the node:http2 constants import with inline lowercase header
# literals so the browser bundle (which stubs http2 to false) can load the
# sigstore signer; consumer: packages/provenance via the browser field.
'@sigstore/sign@4.1.1': patches/repo/@sigstore__sign@4.1.1.patch
# Telemetry lockdown: removes TelemetryManager's Datadog ingest endpoint so
# the dev-only @yarnpkg/core (reached via @yarnpkg/extensions, the
# packageExtensions data pkg-ext/data.ts bundles) can never upload metrics;
# the telemetry-deps-are-reviewed payload scan gates the shape.
# On a bump, regenerate via `pnpm patch @yarnpkg/core` + `pnpm patch-commit`.
'@yarnpkg/core@4.9.1': patches/repo/@yarnpkg__core@4.9.1.patch
# Dedup compat: adds a `require` export condition + source/index.cjs so the
# ESM-only chalk@5 stays require()-able by chalk@4's CJS consumers (@yarnpkg,
# type-coverage) after the chalk 4/5 collapse.
chalk@5.6.2: patches/repo/chalk@5.6.2.patch
# Dedup compat: serves js-tokens@4's regex + matchToToken on the `require`
# condition (for @babel/code-frame) while keeping js-tokens@10's generator on
# `import`, after the js-tokens 4/10 collapse.
js-tokens@10.0.0: patches/repo/js-tokens@10.0.0.patch
# minipass 7 ships a named export ({ Minipass }) where 3.x was a default;
# these three re-pin the import shape + peer range so the deduped minipass 7
# tree works; consumer: cacache/make-fetch-happen in src/external.
minipass-flush@1.0.7: patches/repo/minipass-flush@1.0.7.patch
# Same minipass 7 named-export fix, plus buffer.length → bufferLength for
# minipass 7's accessor rename; consumer: make-fetch-happen pipelines.
minipass-pipeline@1.2.4: patches/repo/minipass-pipeline@1.2.4.patch
# Same minipass 7 named-export + peer-range fix; consumer: cacache writes.
minipass-sized@1.0.3: patches/repo/minipass-sized@1.0.3.patch
# Drops the unused Find-VisualStudio.cs C# helper so the packed tree carries
# no compiled-language source a scanner would flag; consumer: optional gyp
# builds under allowBuilds.
node-gyp@12.4.0: patches/repo/node-gyp@12.4.0.patch
# Swaps `instanceof Error` for the cross-realm Error.isError (with shim) so
# cause chains survive vm/worker realms; consumer: errors/predicates parity
# with src's own isError semantics.
pony-cause@2.1.11: patches/repo/pony-cause@2.1.11.patch
# Dedup compat: restores content-type@1's req/res-object input to parse()
# that body-parser@2.2.2 still relies on, after the content-type 1/2
# collapse. Carried up from the 2.0.0 entry this replaced.
content-type@2.1.0: patches/repo/content-type@2.1.0.patch
# default-export interop (managed by socket-wheelhouse sync; do not edit):
# 5.0.7 dropped the default export from BOTH builds. The CJS half breaks
# minimatch@9's compiled `__importDefault`, which reads `.default` and
# skips the namespace fallback once `__esModule` is set. The ESM half
# breaks any `import x from 'brace-expansion'`, the shape the fleet CI
# cache action resolves through, so an unpatched member throws "does not
# provide an export named default" and dies at setup before a test runs.
# The patch restores `expand` as the default on each build separately;
# patching one build leaves the other broken.
# On a bump, regenerate via `pnpm patch brace-expansion` + `pnpm patch-commit`.
brace-expansion@5.0.12: patches/fleet/brace-expansion@5.0.12.patch
# dedup: coverage matcher allocation (managed by socket-wheelhouse sync):
# Coverage checks exclusions before matching includes.
# Compile exclusions once instead of once per include pattern.
# This preserves membership and bounds matcher memory for fleet coverage.
# CPU-profiled forks use the configured teardown deadline to flush profiles.
# Ordinary forks retain the upstream 500 ms termination grace.
vitest@5.0.3: patches/fleet/vitest@5.0.3.patch
braces@3.0.3: patches/braces@3.0.3.patch
# pnpm 11's packageManager-version-check failure policy. `warn` lets the
# install proceed with a mismatched pnpm (emitting a warning) rather than
# hard-failing. `error` is the default when the field is absent — socket-lib
# had `error` while the wheelhouse lacked the field, which blocked commits
# under a dev pnpm that differed from the `packageManager` pin. `warn` keeps
# the pin informational without blocking CI or local dev.
pmOnFail: warn
autoDedupe: true
savePrefix: ''
saveTypes: true
progress: false
trustPolicy: no-downgrade
trustPolicyExclude:
- '@yarnpkg/libzip@3.2.2'
# Auto-install missing peer deps (pnpm default). Declared explicitly
# so a future default flip can't silently change install behavior.
autoInstallPeers: true
# Never install esbuild. vite 8 declares it as an OPTIONAL peer
# (peerDependenciesMeta.esbuild) but the fleet bundler is rolldown, which vite
# 8 bundles natively — esbuild is dead weight here and only surfaces as noisy,
# non-reachable Dependabot advisories (the vuln is in esbuild's Deno module;
# this repo runs Node). Suppressing the optional dep keeps it out of the tree.
ignoredOptionalDependencies:
- esbuild
# Pin pnpm's default of running root pre/post lifecycle scripts.
enablePrePostScripts: true
# Pin exact versions on `pnpm add`. Catalog and overrides should
# also be exact pins (5.24.0, not ^5.24.0).
saveExact: true
includeWorkspaceRoot: true
pipelines:
fleet-prepare:
- build:oxlint-bundle
tasks:
build:oxlint-bundle:
cache: false
dependsOn: []
trustPolicyExcludePrune: true
peerDependencyRules:
allowedVersions:
'@socketsecurity/lib>typescript': 7.0.2
'@socketsecurity/registry>typescript': 7.0.2
mcp-tada>typescript: 7.0.2