mirror of
https://github.com/callstack/agent-device.git
synced 2026-09-14 20:06:34 +08:00
Michał Pierzchała
20 lines
851 B
YAML
20 lines
851 B
YAML
# This file exists so examples/test-app is treated as its own pnpm workspace
|
|
# root. pnpm only honors `overrides` from a workspace root, and because this
|
|
# app is nested under the repo-root pnpm-workspace.yaml (without being a member)
|
|
# its overrides were silently ignored when declared in package.json, letting the
|
|
# lockfile drift back to vulnerable transitive versions (see PR #649). Keeping
|
|
# them here ensures they actually apply. These pin transitive deps to versions
|
|
# that clear Dependabot security alerts; ws/brace-expansion/js-yaml/@babel/core
|
|
# are scoped to the vulnerable major so unrelated majors elsewhere in the tree
|
|
# stay untouched.
|
|
overrides:
|
|
'@xmldom/xmldom': 0.8.13
|
|
postcss: 8.5.23
|
|
uuid: 14.0.0
|
|
ws@8: ^8.20.1
|
|
ws@7: ^7.5.11
|
|
brace-expansion@5: ^5.0.9
|
|
shell-quote: ^1.9.0
|
|
js-yaml@4: ^4.3.0
|
|
'@babel/core@7': ^7.29.6
|