saveExact: true blockExoticSubdeps: true lockfileIncludeTarballUrl: true verifyDepsBeforeRun: prompt verifyStoreIntegrity: true packages: - 'packages/*' - 'sticker-creator' publicHoistPattern: - '*eslint-*' minimumReleaseAge: 4320 minimumReleaseAgeIgnoreMissingTime: false minimumReleaseAgeStrict: true minimumReleaseAgeExclude: - '@signalapp/*' - 'electron' trustPolicy: no-downgrade trustPolicyExclude: - '@octokit/endpoint@9.0.6' - '@swc/core@1.10.16' - 'chokidar@4.0.3' - 'react-redux@9.2.0' - 'reselect@5.1.1' - 'rollup@3.30.0' - 'semver@5.7.2 || 6.3.1' - 'undici-types@6.21.0' - 'vite@4.5.14' auditConfig: ignoreGhsas: - GHSA-3xgq-45jj-v275 # react-devtools > cross-spawn - GHSA-hfvx-25r5-qc3w # fabric (toSVG) - GHSA-5c6j-r48x-rmvq # @storybook/addon-webpack5-compiler-swc > serialize-javascript - GHSA-532v-xpq5-8h95 # react-devtools > electron - GHSA-8337-3p73-46f4 # react-devtools > electron - GHSA-jjp3-mq3x-295m # react-devtools > electron - GHSA-9wfr-w7mm-pc7f # react-devtools > electron - GHSA-c27g-q93r-2cwf # sticker-creator > vite - GHSA-2w69-qvjg-hvjx # sticker-creator > @remix-run/router - GHSA-23hp-3jrh-7fpw # node-tar, only used at dev-time - GHSA-3jxr-9vmj-r5cp # brace-expansion, only used at dev-time - GHSA-52cp-r559-cp3m # js-yaml, only used at dev-time - GHSA-8x88-c5mf-7j5w # tar, only used at dev-time - GHSA-395f-4hp3-45gv # shell-quote, only used at dev-time - GHSA-gcfj-64vw-6mp9 # axios, only used at dev-time - GHSA-v56q-mh7h-f735 # used by sass, only used at dev-time - GHSA-xvcm-6775-5m9r # used by sass, only used at dev-time - GHSA-2p49-hgcm-8545 # svgo, only used at dev-time - GHSA-v2hh-gcrm-f6hx # fast-uri, only used at dev-time - GHSA-4c8g-83qw-93j6 # fast-uri, only used at dev-time - GHSA-7g7r-gx96-252g # electron-builder > app-builder-lib - GHSA-jmr9-qjv8-65gv # react-devtools > electron > extract-zip overrides: '@electron/rebuild>node-gyp': '12.4.0' 'brace-expansion@5': '^5.0.9' 'brace-expansion@2': '^2.1.4' 'brace-expansion@1': '^1.1.18' 'builder-util-runtime': '9.7.0' 'canvas': '-' 'danger@13.0.10>undici': '6.27.0' 'jsdom': '-' 'react-popper@2.3.0>react-dom': '19.2.4' 'react-popper@2.3.0>react': '19.2.4' 'thenify-all>thenify': '3.3.1' electron@<39.8.10: ^39.8.10 electron@<39.8.9: ^39.8.9 ip-address@<=10.3.0: ^10.3.1 nanoid@<3.3.17: 3.3.18 allowUnusedPatches: false ignorePatchFailures: false patchedDependencies: # Note: Prefer adding without version so that pnpm attempts to re-apply the patch after an upgrade '@electron/universal': 'patches/@electron__universal.patch' '@napi-rs/canvas@0.1.61': 'patches/@napi-rs__canvas@0.1.61.patch' '@types/chai': 'patches/@types__chai.patch' '@types/fabric@4.5.3': 'patches/@types+fabric+4.5.3.patch' '@vitest/expect@2.0.5': 'patches/@vitest+expect+2.0.5.patch' 'app-builder-lib': 'patches/app-builder-lib.patch' 'casual@1.6.2': 'patches/casual+1.6.2.patch' 'dmg-builder': 'patches/dmg-builder.patch' 'fabric@4.6.0': 'patches/fabric+4.6.0.patch' 'fs-xattr': 'patches/fs-xattr.patch' 'growing-file@0.1.3': 'patches/growing-file+0.1.3.patch' 'node-fetch@3.3.2': 'patches/node-fetch@3.3.2.patch' 'playwright-core': 'patches/playwright-core.patch' 'qrcode-generator': 'patches/qrcode-generator.patch' 'react-popper@2.3.0': 'patches/react-popper@2.3.0.patch' 'zod@4.3.6': 'patches/zod@4.3.6.patch' strictDepBuilds: true allowBuilds: # Enabled Builds: Use specific version # ex: 'package@0.0.0': true '@indutny/mac-screen-share@1.0.13': true '@indutny/simple-windows-notifications@2.0.16': true '@parcel/watcher@2.5.6': true '@signalapp/libsignal-client@0.92.2': true # duplicate package '@signalapp/libsignal-client@0.99.3': true '@signalapp/ringrtc@2.69.4': true '@signalapp/sqlcipher@4.0.3': true '@signalapp/windows-ucv@1.0.1': true '@swc/core@1.10.16': true '@tailwindcss/oxide@4.3.0': true 'electron@23.3.13': false # duplicate package 'electron@39.8.10': true # duplicate package through react-devtools 'electron@43.0.0': true 'fs-xattr@0.4.0': true # Disabled Builds: Use wildcard version # ex: 'package': false 'bufferutil': false 'core-js': false 'electron-winstaller': false 'es5-ext': false 'esbuild': false 'utf-8-validate': false '@signalapp/ringrtc': true dedupePeers: true dedupePeerDependents: true strictPeerDependencies: true peerDependencyRules: allowedVersions: '@storybook/instrumenter@8.6.14>storybook': '8.4.4' '@storybook/instrumenter@8.6.15>storybook': '8.4.4' '@storybook/test@8.6.15>storybook': '8.4.4' '@storybook/test@8.6.14>storybook': '8.4.4' '@storybook/addon-interactions@8.6.14>storybook': '8.4.4' '@formatjs/intl@4.1.4>typescript': '6.0.3' 'react-intl@10.1.0>typescript': '6.0.3' '@storybook/react@8.4.4>@storybook/test': '8.6.15' 'stylelint-use-logical-spec@5.0.1>stylelint': '17.11.1' 'react-popper@2.3.0>react': '18.3.1' 'react-popper@2.3.0>react-dom': '18.3.1' allowedDeprecatedVersions: '@humanwhocodes/config-array': '0.11.14' '@humanwhocodes/object-schema': '2.0.3' '@xmldom/xmldom': '0.8.13 || 0.9.10' 'boolean': '3.2.0' 'deep-diff': '0.3.8' 'eslint': '8.38.0' 'expect-playwright': '0.8.0' 'glob': '10.5.0 || 7.2.3' 'inflight': '1.0.6' 'jest-playwright-preset': '4.0.0' 'jest-process-manager': '0.4.0' 'lodash.isequal': '4.5.0' 'node-domexception': '1.0.0' 'rimraf': '2.6.3 || 3.0.2' 'uuid': '8.3.2 || 9.0.1' 'whatwg-encoding': '2.0.0' 'yaeti': '0.0.6'