Files
vercel__workflow/pnpm-workspace.yaml
Elliot Dauber 72efc90f28 Use runtime deadline for inline execution limit (#3360)
* Use runtime deadline for inline execution limit

* up

* lazy import

* Update packages/world/src/interfaces.ts

Co-authored-by: Peter Wielander <mittgfu@gmail.com>
Signed-off-by: Elliot Dauber <67391073+elliotdauber@users.noreply.github.com>

---------

Signed-off-by: Elliot Dauber <67391073+elliotdauber@users.noreply.github.com>
Co-authored-by: Peter Wielander <mittgfu@gmail.com>
2026-08-05 14:32:13 -07:00

59 lines
1.4 KiB
YAML

packages:
- workbench/*
- "!workbench/nitro"
- packages/*
- docs
- tarballs
catalog:
"@biomejs/biome": ^2.4.4
"@swc/core": 1.15.3
"@types/json-schema": ^7.0.15
"@types/node": 22.19.0
"@vercel/functions": ^3.8.0
"@vercel/oidc": 3.2.0
"@vercel/queue": 0.4.0
"@vitest/coverage-v8": ^4.1.10
ai: 6.0.116
enhanced-resolve: 5.19.0
esbuild: ^0.28.1
nitro: ^3.0.260610-beta
semver: 7.7.4
typescript: ^6.0.3
ulid: ~3.0.1
undici: 7.29.0
vitest: ^4.1.10
zod: ~4.3.6
onlyBuiltDependencies:
- esbuild
overrides:
# Single @opentelemetry/api instance workspace-wide: with two resolved
# copies (1.9.0 + 1.9.1), the copy that registers the tracer provider and
# the copy a package imports can differ, and the API's global-registration
# version check then hands the importer a noop tracer — world-vercel's
# spans were silently dropped this way while core's flowed (#2900).
'@opentelemetry/api': 1.9.1
rfc6902: 5.1.2
devalue: 5.9.0
'@sveltejs/acorn-typescript': 1.0.10
# postcss < 8.5.18 is vulnerable to CVE-2026-45623 and GHSA-r28c-9q8g-f849
# (arbitrary file read / .map disclosure via attacker-controlled
# sourceMappingURL). Forces transitive pins (e.g. next.js's postcss@8.4.31)
# onto a patched version.
'postcss@<8.5.18': 8.5.22
savePrefix: ""
minimumReleaseAge: 2880
minimumReleaseAgeExclude:
- '@turbo/*'
- 'turbo'
- '@vercel/*'
- '@workflow/*'
- 'esbuild'
- '@esbuild/*'
- 'quickjs-wasi'