packages:
  - '**'
  - '!dist'
  - '!**/dist/**'
allowBuilds:
  '@parcel/watcher': false
  '@prisma/engines': true
  '@swc/core': false
  esbuild: false
  msw: false
  prisma: true
  sharp: false
minimumReleaseAgeExclude:
  - '@umami/react-zen'
  - cn@0.2.6
  - '@umami/api-client@0.81.0'

# Security floors for transitive dependencies whose parents still allow affected versions.
overrides:
  '@babel/core@<7.29.6': 7.29.6
  'brace-expansion@<1.1.18': 1.1.18
  'brace-expansion@>=2.0.0 <2.1.4': 2.1.4
  'browserslist@<4.28.7': 4.28.7
  'd3-color@<3.1.0': 3.1.0
  'deepmerge-ts@<8.0.0': 8.0.2
  'esbuild@>=0.27.3 <0.28.1': 0.28.2
  'fast-uri@>=3.0.0 <3.1.6': 3.1.6
  'fflate@>=0.4.5 <0.4.9': 0.4.9
  'js-yaml@>=4.0.0 <4.3.2': 4.3.2
  'minimatch@<3.1.4': 3.1.4
  'minimatch@>=5.0.0 <5.1.8': 5.1.8
  'minimatch@>=9.0.0 <9.0.7': 9.0.7
  'mysql2@<3.23.1': 3.23.1
  'picomatch@>=4.0.0 <4.0.4': ^4.0.4
  'shell-quote@<1.9.0': 1.9.0
  'svgo@>=3.0.0 <3.3.5': 3.3.5
  'vite@>=8.0.0 <8.0.16': 8.0.16