Repository navigation
Expand file tree
/
Copy pathpnpm-workspace.yaml
More file actions
120 lines (114 loc) · 4.4 KB
/
Copy pathpnpm-workspace.yaml
File metadata and controls
120 lines (114 loc) · 4.4 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
packages:
- 'packages/**/*'
- 'packages/astro/test/units/_temp-fixtures'
- 'examples/**/*'
- 'triage/*'
- 'smoke/**/*'
- 'temp/*'
- 'scripts'
- 'benchmark'
- 'benchmark/packages/*'
- 'benchmark/static-projects/*'
# Below excludes are only for Turbo because it doesn't respect gitignore like pnpm does
- '!packages/astro/test/units/_temp-fixtures/*'
- '!**/.vercel/**'
# Important! Never install `astro` even when new version is in registry
preferWorkspacePackages: true
linkWorkspacePackages: true
saveWorkspaceProtocol: false # This prevents the examples to have the `workspace:` prefix
autoInstallPeers: false
dedupePeers: true
overrides:
# If a dependency has a peer dependency on `@types/node` and the version range accepts `22`,
# we force it to resolve to `^22.19.0`. This helps reduce the number of duplicate packages
# in `node_modules/`.
#
# For example, `vite@7.3.2` has a peer dependency `"@types/node": "^20.19.0 || >=22.12.0"`.
# pnpm could install the same `vite@7.3.2` multiple times, one with `@types/node@20`, one
# with `@types/node@22`, one with `@types/node@25`, etc.. By adding this override, we force
# pnpm to only keep one installation of `vite@7.3.2` with `@types/node@22`.
'@types/node@22': '^22.19.0'
# `@volar/vscode` declares `vscode-languageclient@^9`, but only imports the type. Forcing it to
# the version used by `astro-vscode` avoids a duplicate copy whose `BaseLanguageClient` type is
# incompatible with the one the extension passes to the `activate*` helpers.
'@volar/vscode>vscode-languageclient': '^11.0.0'
'docs>@lunariajs/core': 'https://pkg.pr.new/lunariajs/lunaria/@lunariajs/core@502ada46073a7f0b003949d78870cefb9290a54f'
# Wait until three days after release to install new versions of packages
minimumReleaseAge: 4320
minimumReleaseAgeExclude:
- '@biomejs/*'
- 'sharp@0.35.4'
- '@img/sharp-*'
# 'fake-data-pkg' is a local package used for testing
- 'fake-data-pkg@1.0.0'
# TODO: remove once more stable
- '@flue/*'
- '@astrojs/*'
- '@cloudflare/*'
- rolldown
- '@rolldown/*'
- '@oxc-project/types'
# Docs smoke test (smoke/docs) installs @lunariajs/core from withastro/docs
- '@lunariajs/*'
- workerd
- miniflare
- wrangler
- 'satteri'
- '@bruits/*'
# Renovate security update: undici@8.12.2
- undici@8.12.2
peerDependencyRules:
allowAny:
- 'astro'
- 'vite'
# Prevent installation of packages where trust level decreases
trustPolicy: 'no-downgrade'
trustPolicyExclude:
# Netlify dependency they need to update: https://github.com/netlify/primitives/pull/585
- 'chokidar@4.0.3'
# Netlify packages that do not have trusted publishing enabled on npm
# TODO: Remove once trusted publishing is enabled. Netlify are working on it.
- '@netlify/serverless-functions-api@2.18.0 || 2.23.0'
# Vercel packages that do not have trusted publishing enabled on npm
# TODO: Remove once trusted publishing is enabled.
- '@vercel/functions@3.11.0'
- '@vercel/routing-utils@6.6.1'
# Transitive dependencies of '@vercel/functions'
- '@vercel/oidc@4.0.7'
- '@vercel/cli-exec@1.0.1'
- '@vercel/cli-config@0.3.7'
# Outdated dependencies of @vitejs/plugin-react@^5 and @vscode/vsce
# TODO: Update the Vite plugin to ^6 in Astro v7 and remove this
- 'semver@6.3.1 || 5.7.2'
# Old dependency of @types/node@22
# TODO: Remove when dropping support for Node 22
- undici-types@6.21.0
# 'fake-data-pkg' is a local package used for testing
- 'fake-data-pkg@1.0.0'
# Dependencies in the docs repo that gets cloned for smoke tests
- 'undici@5.29.0'
- 'algoliasearch@4.27.0'
- '@algolia/client-analytics@4.27.0'
- '@algolia/recommend@4.27.0'
- '@algolia/client-search@4.27.0'
- '@algolia/requester-browser-xhr@4.27.0'
- '@algolia/requester-node-http@4.27.0'
- '@algolia/client-common@4.27.0'
- '@algolia/logger-console@4.27.0'
- '@algolia/client-personalization@4.27.0'
# Control whether packages can run postinstall scripts. We disallow this to avoid the security risk
# of running third-party code on install.
allowBuilds:
'@google/genai': false
'@mongodb-js/zstd': false
'@parcel/watcher': false
'@vscode/vsce-sign': false
esbuild: false
keytar: false
node-liblzma: false
protobufjs: false
sharp: false
workerd: false
patchedDependencies:
'@volar/language-service@2.4.30': patches/@volar__language-service@2.4.30.patch
'@volar/typescript@2.4.30': patches/@volar__typescript@2.4.30.patch