pnpm-workspace.yaml

shellEmulator: true

trustPolicy: no-downgrade

# semver 5.7.2/6.3.1 (2023 maintenance-line republishes, pulled in transitively
# via @babel/core) predate provenance; the later 7.x line has it, so pnpm's
# no-downgrade check flags them. Not a takeover — scoped exception, not a
# blanket policy relaxation.
trustPolicyExclude:
  - semver@5.7.2
  - semver@6.3.1

packages:
  - apps/*
  - packages/*

# Single source of truth for third-party versions (pnpm catalogs).
# Packages reference these as "catalog:"; bump versions here only.
catalog:
  '@antfu/eslint-config': ^9.1.0
  '@axe-core/playwright': ^4.11.3
  '@eslint-react/eslint-plugin': ^5.14.10
  '@hono/node-server': ^2.0.9
  '@hookform/resolvers': ^5.2.2
  '@orpc/client': ^1.14.8
  '@orpc/contract': ^1.14.8
  '@orpc/server': ^1.14.8
  '@orpc/tanstack-query': ^1.14.8
  '@playwright/test': ^1.57.0
  '@semantic-release-plus/docker': ^3.1.3
  '@semantic-release/changelog': ^7.0.0
  '@semantic-release/exec': ^7.1.0
  '@semantic-release/git': ^11.0.0
  '@t3-oss/env-core': ^0.13.11
  '@tailwindcss/vite': ^4.1.18
  '@tanstack/react-query': ^5.101.2
  '@tanstack/react-router': ^1.170.18
  '@testing-library/jest-dom': ^7.0.0
  '@testing-library/react': ^16.3.2
  '@testing-library/user-event': ^14.6.1
  '@types/node': ^26.1.1
  '@types/react': ^19.2.17
  '@types/react-dom': ^19.2.3
  '@vitejs/plugin-react': ^6.0.3
  class-variance-authority: ^0.7.1
  clsx: ^2.1.1
  cmdk: ^1.1.1
  # Held at 9.x. v10 moved to the conventional-changelog-writer 9 preset shape
  # (`writer.template` instead of `writer.mainTemplate`); semantic-release 25
  # still bundles writer 8, which ignores the unknown key and renders the header
  # with no commit sections. Release 2.1.5 shipped with empty notes that way —
  # nothing errors, the body just comes out blank. Bump only once
  # semantic-release ships writer 9.
  conventional-changelog-conventionalcommits: ^9.3.1
  dayjs: ^1.11.19
  eslint: ^10.7.0
  eslint-plugin-react-hooks: ^7.1.1
  eslint-plugin-react-refresh: ^0.5.3
  happy-dom: ^20.11.1
  hls.js: ^1.6.15
  hono: ^4.12.30
  lucide-react: ^1.0.0
  msw: ^2.15.0
  node-cron: ^4.2.1
  pino: ^10.2.1
  radix-ui: ^1.4.3
  react: ^19.2.7
  react-dom: ^19.2.7
  react-hook-form: ^7.71.1
  semantic-release: ^25.0.2
  sonner: ^2.0.7
  tailwind-merge: ^3.4.0
  tailwindcss: ^4.1.18
  tsdown: ^0.22.7
  tsx: ^4.23.1
  turbo: ^2.10.5
  tw-animate-css: ^1.4.0
  # Held at 6.0 — the final JS-based line and the bridge to the native 7.0
  # compiler: it errors on anything 7.0 drops. 7.0 ships no programmatic API,
  # so typescript-eslint (peer <6.1.0) crashes under it; the API arrives in 7.1.
  # Bump to ^7 once typescript-eslint ships support. All three packages are
  # verified to typecheck clean under 7.0.2 already, so it should be this line
  # alone. If the wait ever gets painful, `@typescript/typescript6` (bin `tsc6`,
  # re-exports the 6.0 API) is the supported side-by-side path — but it means
  # linting and typechecking against two different type systems.
  typescript: ^6.0.3
  use-intl: ^4.11.1
  vite: ^8.1.4
  vitest: ^4.1.10
  zod: ^4.4.3

allowBuilds:
  esbuild: true
  msw: false