pnpm-workspace.yaml

packages:
  - benchmarks/*
  - integration/*
  - packages/@sanity/*
  - playground/*
  - css-playground/*
  - packages/@sanity/tsdown-config/test/fixtures/**

ignoreWorkspaceCycles: true

# Deduplicate compatible dependency versions during installation (pnpm >= 12.6.0).
autoDedupe: true

catalog:
  '@sanity/client': ^8.9.0
  '@sanity/icons': ^5.2.3
  '@sanity/logos': ^2.2.6
  '@tsdown/css': ^0.23.0
  '@types/node': ^24.19.0
  lightningcss: ^1.33.0
  oxc-transform-react: ^0.151.0
  publint: ^0.3.24
  tsdown: ^0.23.0
  typescript: 7.0.2
  vitest: ^5.0.2

# When running `pnpm add`, reuse a dependency's catalog version automatically if
# it already exists in a catalog, so shared deps stay aligned on a single version.
catalogMode: prefer

# Lifecycle scripts that must run for native/binary packages (pnpm v11 defaults
# strictDepBuilds to true, so unlisted packages fail the install).
allowBuilds:
  '@parcel/watcher': true
  '@swc/core': true
  esbuild: true
  lmdb: true
  msgpackr-extract: true
  unrs-resolver: true

# The pnpm v11 default (1 day)
minimumReleaseAge: 1440

# Exact-version exemptions for the locked versions that pnpm otherwise rejects against the
# release-age gate during resolution. Each entry expires naturally (and can be removed) once
# the version is older than minimumReleaseAge; add new ones only when a dependency bump needs
# a release fresher than the gate.
minimumReleaseAgeExclude:
  - '@sanity/sdk-react@3.6.0'
  - '@sanity/sdk@3.6.0'
  - '@sanity/validation@6.17.0'
  - '@sanity/util@6.17.0'
  - '@sanity/types@6.17.0'
  - '@sanity/schema@6.17.0'
  - '@sanity/mutator@6.17.0'
  - '@sanity/diff@6.17.0'
  - '@sanity/access-ui@6.17.0'
  - 'sanity@6.17.0'
  - '@next/*'
  - 'next@16.3.7'
  - '@sanity/client@8.9.0'
  - '@astrojs/react@7.0.0'
  - '@yuku-parser/*'
  - '@oxc-transform-react/*'
  - '@rolldown/*'
  - oxc-transform-react
  - '@oxlint-tsgolint/*'
  - '@oxlint/*'
  - oxlint@1.86.0
  - rolldown
  # @microsoft/api-extractor@7.59.2 exact-pins these same-day sibling releases
  - '@microsoft/api-extractor@7.59.2'
  - '@microsoft/api-extractor-model@7.33.13'
  - '@rushstack/node-core-library@5.24.2'
  - '@rushstack/terminal@0.24.5'
  - '@rushstack/ts-command-line@5.3.15'
  - '@astrojs/markdown-satteri@0.4.2'
minimumReleaseAgeExcludePrune: true

overrides:
  '@sanity/pkg-utils': workspace:*

# This is needed for prettier to be able to use the plugin specified by the `@sanity/prettier-config` preset
publicHoistPattern:
  - '*prettier*'

trustPolicy: no-downgrade

trustPolicyExclude:
  - chokidar@4.0.3
  - rxjs@7.8.2
  - semver@5.7.2 || 6.3.1
  - webpack-dev-middleware@7.4.6
  # 3.2.1 was published with provenance and 3.2.2 without, which reads as a trust
  # downgrade. Same maintainer, and the diff is only the WeakRef leak fix.
  - why-is-node-running@3.2.2

trustPolicyExcludePrune: true