pnpm-workspace.yaml

packages:
  - 'ghost/*'
  - 'apps/*'
  - 'e2e'

strictDepBuilds: true
catalogMode: strict

minimumReleaseAge: 4320 # 3 days in minutes; matches Renovate's minimumReleaseAge
blockExoticSubdeps: true

allowBuilds:
  '@swc/core': true
  core-js: true
  cpu-features: true
  dtrace-provider: true
  esbuild: true
  fsevents: true
  msw: true
  nx: true
  protobufjs: true
  re2: true
  sharp: true
  sqlite3: true
  ssh2: true

catalog:
  '@ebay/nice-modal-react': 1.2.13
  '@eslint/js': 8.57.1
  '@faker-js/faker': 10.4.0
  '@playwright/test': 1.60.0
  '@radix-ui/react-avatar': 1.1.12
  '@radix-ui/react-checkbox': 1.3.4
  '@radix-ui/react-context-menu': 2.3.0
  '@radix-ui/react-form': 0.1.9
  '@radix-ui/react-popover': 1.1.16
  '@radix-ui/react-separator': 1.1.9
  '@radix-ui/react-switch': 1.3.0
  '@radix-ui/react-tabs': 1.1.14
  '@radix-ui/react-tooltip': 1.2.9
  '@sentry/react': 7.120.4
  '@storybook/addon-docs': 10.3.5
  '@storybook/addon-links': 10.3.5
  '@storybook/react-vite': 10.3.5
  '@tailwindcss/postcss': 4.2.2
  '@tailwindcss/vite': 4.2.2
  '@tanstack/react-query': 4.44.0
  '@testing-library/jest-dom': 6.9.1
  '@testing-library/react': 14.3.1
  '@tryghost/api-framework': 3.2.4
  '@tryghost/color-utils': 0.2.19
  '@tryghost/custom-fonts': 1.0.11
  '@tryghost/debug': 2.2.3
  '@tryghost/domain-events': 3.2.5
  '@tryghost/helpers': 1.1.106
  '@tryghost/kg-clean-basic-html': 4.3.2
  '@tryghost/kg-converters': 1.2.2
  '@tryghost/koenig-lexical': 1.8.2
  '@tryghost/limit-service': 1.5.6
  '@tryghost/logging': 4.2.1
  '@tryghost/nql': 0.13.0
  '@tryghost/nql-lang': 0.6.5
  '@tryghost/string': 0.3.5
  '@tryghost/timezone-data': 1.0.0
  '@types/express': 4.17.25
  '@types/html-minifier': ^4.0.6
  '@types/jest': 29.5.14
  '@types/node': 22.19.20
  '@types/react': 18.3.31
  '@types/react-dom': 18.3.7
  '@types/sanitize-html': 2.16.1
  '@types/validator': 13.15.10
  '@typescript-eslint/eslint-plugin': 8.49.0
  '@typescript-eslint/parser': 8.49.0
  '@vitejs/plugin-react': 4.7.0
  '@vitest/coverage-v8': 4.1.8
  bson-objectid: 2.0.4
  c8: 11.0.0
  chai: 4.5.0
  chalk: 4.1.2
  clsx: 2.1.1
  concurrently: 10.0.3
  cross-fetch: 4.1.0
  dequal: 2.0.3
  dompurify: 3.4.9
  dotenv: 17.4.2
  eslint: 8.57.1
  eslint-plugin-react-hooks: 5.2.0
  eslint-plugin-react-refresh: 0.5.2
  eslint-plugin-tailwindcss: 4.0.0-beta.0
  fs-extra: 11.3.5
  glob: 13.0.6
  jsdom: 29.1.1
  jsonc-parser: 3.3.1
  lodash: 4.18.1
  lucide-react: 1.17.0
  mingo: 2.5.3
  mocha: 11.7.6
  msw: 2.14.6
  node-html-markdown: 2.0.0
  postcss: 8.5.15
  preact: ^10.29.2
  react: 18.3.1
  react-dom: 18.3.1
  react-hot-toast: 2.6.0
  react-router: 7.14.0
  sinon: 22.0.0
  sonner: 2.0.7
  storybook: 10.3.5
  supertest: 7.2.2
  tailwindcss: 4.2.2
  tsx: 4.21.0
  tw-animate-css: 1.4.0
  type-fest: 5.6.0
  typescript: 5.9.3
  validator: 13.12.0
  vite: 7.3.2
  vite-plugin-svgr: 4.5.0
  vitest: 4.1.8
  zod: 4.1.12

catalogs:
  eslint9:
    '@eslint/js': 9.37.0
    eslint: 9.37.0
  react17:
    react: 17.0.2
    react-dom: 17.0.2
    '@testing-library/react': 12.1.5
  tailwind3:
    tailwindcss: 3.4.19
    eslint-plugin-tailwindcss: 3.18.3

overrides:
  '@tryghost/errors': ^1.3.7
  '@tryghost/logging': 'catalog:'
  jackspeak: 4.2.3
  moment: 2.30.1
  moment-timezone: 0.5.45
  nwsapi: 2.2.24
  broccoli-persistent-filter: ^2.3.1
  juice: 9.1.0
  ember-basic-dropdown: 6.0.2
  ember-in-viewport: 4.1.0
  'eslint-plugin-ghost>@typescript-eslint/eslint-plugin': 8.49.0
  'eslint-plugin-ghost>@typescript-eslint/utils': 8.49.0
  'ember-svg-jar>cheerio': 1.2.0
  'juice>cheerio': 0.22.0
  '@babel/runtime@<7.26.10': ^7.26.10
  '@tootallnate/once@<3.0.1': ^3.0.1
  'ansi-html@<0.0.8': ^0.0.9
  'axios@<1.15.2': ^1.15.2
  'braces@<3.0.3': ^3.0.3
  'clean-css@<4.1.11': ^4.1.11
  'codemirror@<5.58.2': ^5.58.2
  'debug@>=4.0.0 <4.3.1': ^4.3.1
  'debug@<2.6.9': ^2.6.9
  'diff@<3.5.1': ^3.5.1
  'diff@>=6.0.0 <8.0.3': ^8.0.3
  'fast-xml-parser@<5.7.0': ^5.7.0
  'follow-redirects@<1.16.0': ^1.16.0
  'form-data@<2.5.4': ^2.5.4
  'growl@<1.10.0': ^1.10.0
  'handlebars@>=4.0.0 <=4.7.8': ^4.7.9
  'ip-address@<=10.1.0': ^10.2.0
  'js-yaml@>=4.0.0 <4.1.1': ^4.1.1
  'json5@<1.0.2': ^1.0.2
  'lodash@<4.18.0': ^4.18.0
  'lodash-es@<4.18.0': ^4.18.0
  'merge@<2.1.1': ^2.1.1
  'micromatch@<4.0.8': ^4.0.8
  'minimatch@<3.1.4': ^3.1.4
  'minimatch@>=9.0.0 <9.0.7': ^9.0.7
  'minimist@<0.2.4': ^0.2.4
  'nth-check@<2.0.1': ^2.0.1
  'path-to-regexp@<0.1.13': ^0.1.13
  'protobufjs@<7.5.5': ^7.5.5
  'qs@<6.14.1': ^6.14.2
  'tar@<7.5.11': ^7.5.11
  'tmp@<=0.2.3': ^0.2.4
  'tough-cookie@<4.1.3': ^4.1.3
  'trim@<0.0.3': ^0.0.3
  'undici@<6.24.0': ^6.24.0
  'underscore@>=1.3.2 <1.12.1': ^1.12.1
  '@xmldom/xmldom@<0.8.13': ^0.9.0
  # liquid-wormhole 3.0.1 pins this to a personal-fork git URL; redirect to the
  # upstream-maintained npm release so blockExoticSubdeps doesn't trip on it.
  perf-primitives: ^0.0.6

packageExtensions:
  '@doist/react-interpolate@2.2.1':
    dependencies:
      '@babel/runtime': ^7.26.10
minimumReleaseAgeExclude:
  # Our own packages are published by us, so the release-age delay doesn't apply
  - "@tryghost/*"
  # TryGhost-published packages that live outside the @tryghost/ npm scope.
  # Deliberately NOT listed: sqlite3 — TryGhost stewards it, but legacy
  # (Mapbox-era) npm maintainer accounts can still publish, so the soak
  # retains value there.
  - "bookshelf-relations"
  - "eslint-plugin-ghost"
  - "express-hbs"
  - "ghost-storage-base"
  - "gscan"
  - "knex-migrator"
  # Renovate security update: file-type@21.3.1 || 21.3.2
  - file-type@21.3.1 || 21.3.2