misskey/pnpm-workspace.yaml
renovate[bot] 08c6efb044
fix(deps): update dependency sanitize-html to v2.17.4 [security] [ci skip] (#17402)
* fix(deps): update dependency sanitize-html to v2.17.4 [security]

* fix minimumReleaseAgeExclude

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com>
2026-05-15 09:44:57 +09:00

67 lines
1.6 KiB
YAML

packages:
- packages/backend
- packages/frontend-shared
- packages/frontend
- packages/frontend-builder
- packages/frontend-embed
- packages/i18n
- packages/icons-subsetter
- packages/sw
- packages/misskey-js
- packages/misskey-js/generator
- packages/misskey-reversi
- packages/misskey-bubble-game
allowBuilds:
'@nestjs/core': true
'@parcel/watcher': true
'@sentry/profiling-node': true
'@sentry-internal/node-cpu-profiler': true
'@tensorflow/tfjs-node': true
bufferutil: true
canvas: true
core-js: true
cypress: true
esbuild: true
msgpackr-extract: true
msw: true
nice-napi: true
re2: true
sharp: true
utf-8-validate: true
v-code-diff: true
vue-demi: true
exifreader: false
minimumReleaseAge: 10080 # delay 7days to mitigate supply-chain attack
minimumReleaseAgeExclude:
- '@misskey-dev/*'
- '@syuilo/aiscript'
- buraha
- mfm-js
- slacc
- slacc-android-arm-eabi
- slacc-android-arm64
- slacc-darwin-arm64
- slacc-darwin-universal
- slacc-darwin-x64
- slacc-freebsd-x64
- slacc-linux-arm-gnueabihf
- slacc-linux-arm64-gnu
- slacc-linux-arm64-musl
- slacc-linux-x64-gnu
- slacc-linux-x64-musl
- slacc-win32-arm64-msvc
- slacc-win32-x64-msvc
- '@typescript/native-preview*'
- pnpm
- re2 # そのうち消す
- nan # そのうち消す
- systeminformation # 脆弱性対応。そのうち消す
- sanitize-html # 脆弱性対応。そのうち消す
- launder # 脆弱性対応。そのうち消す
overrides:
'@aiscript-dev/aiscript-languageserver': '-'
chokidar: 5.0.0
lodash: 4.18.1
engineStrict: true
saveExact: true
shellEmulator: true