BGforge-MLS/pnpm-workspace.yaml at master · BGforgeNet/BGforge-MLS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
packages:
    - binary
    - client
    - format
    - server
    - grammars/*
    - plugins/*
    - transpilers
    - transpilers/common
    - transpilers/tssl
    - transpilers/tbaf
    - transpilers/td
# Grammars compile to WASM via tree-sitter-cli and load through web-tree-sitter at
# runtime, so the native `tree-sitter` binding is denied. `keytar` is a transitive
# `@vscode/vsce` dep no longer used since vsce 3. `@vscode/vsce-sign` only matters
# when signing the VSIX, which is not done in this build.
allowBuilds:
    esbuild: true
    tree-sitter-cli: true
    "@vscode/vsce-sign": false
    keytar: false
    tree-sitter: false

# Transitive pins addressing security advisories in mocha's bundled dependencies,
# msal-node's uuid (GHSA-w5hq-g745-h8pq), ajv's fast-uri (GHSA-q3j6-qgpj-74h6,
# GHSA-v39h-62p7-jpjc), and minimatch's brace-expansion 5.0.x (GHSA-jxxr-4gwj-5jf2:
# numeric-range expansion ignored the `max` guard, allowing DoS via large ranges;
# fixed in 5.0.6).
overrides:
    mocha>diff: ">=8.0.3"
    mocha>serialize-javascript: ">=7.0.5"
    uuid: ">=14"
    fast-uri: ">=3.1.2"
    brace-expansion@>=5.0.0 <5.0.6: "^5.0.6"