misskey/pnpm-workspace.yaml
renovate[bot] 260dbd150b
fix(deps): update dependency systeminformation to v5.27.14 [security] [ci skip] (#17003)
* fix(deps): update dependency systeminformation to v5.27.14 [security]

* update whitelist to force update systeminformation package

* bump other dependencies to fix dep error

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com>
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
2025-12-17 09:36:15 +09:00

39 lines
886 B
YAML

packages:
- packages/backend
- packages/frontend-shared
- packages/frontend
- packages/frontend-builder
- packages/frontend-embed
- packages/i18n
- packages/icons-subsetter
- packages/sw
- packages/misskey-js
- packages/misskey-js/generator
- packages/misskey-reversi
- packages/misskey-bubble-game
onlyBuiltDependencies:
- '@nestjs/core'
- '@parcel/watcher'
- '@sentry/profiling-node'
- '@sentry-internal/node-cpu-profiler'
- '@swc/core'
- '@tensorflow/tfjs-node'
- bufferutil
- canvas
- core-js
- cypress
- esbuild
- msgpackr-extract
- msw
- nice-napi
- re2
- sharp
- utf-8-validate
- v-code-diff
- vue-demi
ignorePatchFailures: false
minimumReleaseAge: 10080 # delay 7days to mitigate supply-chain attack
minimumReleaseAgeExclude:
- '@syuilo/aiscript'
- systeminformation # 脆弱性対応。そのうち消すこと