Repository navigation
Expand file tree
/
Copy pathpnpm-workspace.yaml
More file actions
142 lines (134 loc) · 7.03 KB
/
Copy pathpnpm-workspace.yaml
File metadata and controls
142 lines (134 loc) · 7.03 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
packages:
- agents-api
- agents-manage-ui
- agents-cli
- agents-ui-demo
- agents-docs
- agents-cookbook
- test-agents
- "packages/*"
catalog:
better-auth: 1.6.11
"@better-auth/sso": 1.6.11
"@better-auth/infra": 0.2.5
"@better-auth/oauth-provider": 1.6.9
"@opentelemetry/api": ^1.9.0
"@opentelemetry/auto-instrumentations-node": ^0.75.0
"@opentelemetry/baggage-span-processor": ^0.5.0
"@opentelemetry/context-async-hooks": ^2.5.1
"@opentelemetry/core": ^2.5.1
"@opentelemetry/exporter-trace-otlp-http": ^0.212.0
"@opentelemetry/resources": ^2.5.1
"@opentelemetry/sdk-node": ^0.217.0
"@opentelemetry/sdk-trace-base": ^2.5.1
"@opentelemetry/semantic-conventions": ^1.39.0
publicHoistPattern:
- "@types/react"
- "@types/react-dom"
# CI, Vercel and Corepack supply the exact packageManager pin. Skip pnpm's own
# bootstrap, which would otherwise prepend an environment document to
# pnpm-lock.yaml that single-document lockfile readers cannot parse.
pmOnFail: ignore
# Bootstrap is explicit; running a script must not trigger an implicit install.
verifyDepsBeforeRun: false
# Supply-chain cooldown (admission-time): refuse versions published less than 3
# days ago. Unit = MINUTES (4320 = 3 days). Own-org (@inkeep/*) exempt. pnpm 12
# also re-checks locked entries on frozen installs.
minimumReleaseAge: 4320
minimumReleaseAgeStrict: true
minimumReleaseAgeExclude:
- '@inkeep/*'
# pnpm 12 fails the install on any dependency build script that is not listed
# here (strictDepBuilds). pnpm 10 ran none of them in this workspace, so each is
# denied to keep that behavior.
allowBuilds:
'@nestjs/core': false
'@sentry/cli': false
'@swc/core': false
bun: false
cbor-extract: false
core-js: false
cypress: false
esbuild: false
keytar: false
protobufjs: false
sharp: false
patchedDependencies:
"@changesets/assemble-release-plan@6.0.9": patches/@changesets__assemble-release-plan.patch
fumadocs-core: patches/fumadocs-core.patch
# pnpm 12 applies patches without fuzz, and in 1.0.0 these lines moved and
# their context changed, so each compiler version carries its own copy: the
# experimental build agents-manage-ui pins, and 1.0.0, which next pulls in as
# an optional peer for agents-docs.
babel-plugin-react-compiler@0.0.0-experimental-a8e64ef-20260402: patches/babel-plugin-react-compiler.patch
babel-plugin-react-compiler@1.0.0: patches/babel-plugin-react-compiler@1.0.0.patch
# Adds ZIP-based document (docx/xlsx/pptx/odt/ods/odp/pages/numbers/key) passthrough for
# Chat and Responses APIs. Patch authored against
# @ai-sdk/openai@3.0.7 (dist/index.mjs). Remove once upstream Vercel AI SDK supports office MIME types natively.
"@ai-sdk/openai@3.0.7": patches/@ai-sdk__openai@3.0.7.patch
overrides:
# pnpm 11+ no longer reads package.json#pnpm, so this block is the only source
# of overrides for public/agents and for the inkeep/agents mirror. The root
# pnpm-workspace.yaml must declare every entry here with the same value
# (pnpm check:overrides).
next: ^16.4.3 # https://github.com/advisories/GHSA-2464-fhr4-w9xw + GHSA-673q-mjm6-r5xr (unauthenticated RCE, fixed in 16.4.1)
# Security overrides — upstream packages haven't released fixes
devalue: ">=5.6.3" # @workflow/core pins 5.6.0; DoS + prototype pollution
rollup: ">=4.59.0" # vite lockfile pins 4.54.0; arbitrary file write
undici: ">=6.24.0" # @workflow/web pins 6.22.0; unbounded decompression DoS
fast-xml-parser: ">=5.7.0" # XML comment/CDATA injection
qs: ">=6.14.2" # body-parser/cypress resolve stale versions; arrayLimit bypass DoS
axios: ">=1.15.2" # prototype pollution + CRLF + NO_PROXY bypass
protobufjs: ">=7.5.6 <8 || >=8.0.2" # arbitrary code execution (CRITICAL) + toObject codegen
"@xmldom/xmldom": ">=0.8.13" # XML injection via CDATA/DocumentType/PI/comment serialization
flatted: ">=3.4.2" # prototype pollution via parse()
kysely: ">=0.28.17 <0.29.0"
"kysely@>=0.29.0": "0.28.17" # SQL injection via JSON path keys + JSON-path traversal
tar: ">=7.5.11" # symlink/hardlink path traversal
"@xhmikosr/decompress": ">=10.2.2 <11" # path traversal via symlink chain + extraction outside target dir
node-forge: ">=1.4.0" # signature forgery + DoS
defu: ">=6.1.5" # prototype pollution via __proto__
"@hono/node-server": ">=2.0.10" # middleware bypass via repeated slashes
dompurify: ">=3.4.0" # FORBID_TAGS bypass via ADD_TAGS
serialize-javascript: ">=7.0.5" # CPU exhaustion DoS
"@babel/plugin-transform-modules-systemjs": ">=7.29.4" # arbitrary code gen from malicious input
"@opentelemetry/auto-instrumentations-node": ">=0.75.0" # Prometheus exporter crash
"@opentelemetry/sdk-node": ">=0.217.0" # Prometheus exporter crash
"@opentelemetry/exporter-prometheus": ">=0.217.0" # Prometheus exporter crash
systeminformation: ">=5.31.6" # Linux command injection in networkInterfaces()
fast-uri: ">=3.1.2" # host confusion via percent-encoded authority delimiters
fast-xml-builder: ">=1.1.7" # attribute injection bypass
mermaid: ">=11.15.0" # CSS injection via improper config sanitization
uuid: ">=13.0.1" # buffer bounds check in v3/v5/v6
file-type: 21.3.2 # ZIP decompression bomb DoS
nodemailer: 8.0.5 # SMTP command injection via CRLF
"@protobufjs/utf8": ">=1.1.1" # overlong UTF-8 decoding
ip-address: ">=10.1.1" # XSS in Address6 HTML-emitting methods
postcss: ">=8.5.10" # XSS via unescaped </style>
follow-redirects: ">=1.16.0" # leaks custom auth headers
# A caret, not a >= floor: an open floor resolves @nestjs/core 12 beside the
# @nestjs/common 11 that workflow's peer brings.
"@nestjs/core": "^11.1.18" # improper special-element neutralization
yaml: ">=2.8.3" # stack overflow via deeply nested collections
brace-expansion: ">=5.0.5" # zero-step sequence process hang
"ajv@>=6 <6.14.0": ">=6.14.0 <7" # eslint resolves 6.12.6; ReDoS with $data option
"ajv@>=8 <8.18.0": ">=8.18.0" # direct dep resolves 8.17.1; ReDoS with $data option
"minimatch@<3.1.3": ">=3.1.3" # @eslint/config-array resolves 3.1.2; ReDoS via wildcards
"minimatch@>=9 <9.0.6": ">=9.0.6" # @hono/vite-dev-server resolves 9.0.5; ReDoS via wildcards
"minimatch@>=10 <10.2.1": ">=10.2.1" # glob@13 lockfile pins 10.1.1; ReDoS via wildcards
"undici@>=7 <7.24.0": ">=7.24.0" # WebSocket parser overflow + permessage-deflate DoS
"path-to-regexp@<0.1.13": "0.1.13" # ReDoS via multiple route parameters
"path-to-regexp@>=4 <6.3.0": "6.3.0" # backtracking regex
"path-to-regexp@>=8 <8.4.0": "8.4.2" # ReDoS via sequential optional groups
"picomatch@<2.3.2": ">=2.3.2" # ReDoS via extglob quantifiers + POSIX injection
"picomatch@>=4 <4.0.4": ">=4.0.4" # ReDoS via extglob quantifiers
better-auth: 1.6.11 # OAuth refresh-token replay on oidc-provider/mcp plugins (CRITICAL)
"@better-auth/sso": 1.6.11 # SSRF via unvalidated OIDC endpoints in provider registration (CRITICAL)
"@modelcontextprotocol/sdk": ">=1.26.0"
svgo: ">=3.3.3"
minimatch: ">=5.1.8"
lodash: ">=4.18.0"
lodash-es: ">=4.18.0"
express-rate-limit: ">=8.2.2"
"samlify>uuid": ^11.1.1
ws: ">=8.20.1" # https://github.com/advisories/GHSA-2cgr-x39w-9j6w