mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
a1a4572303
# Which Problems Are Solved Several dependencies across the workspace had fallen behind their latest patch releases, and the override list in pnpm-workspace.yaml had drifted: many of the 28 entries were no longer needed because the dependency tree had already moved past them, while a few enforced outdated version floors. # How the Problems Are Solved Direct dependencies were updated where newer patch releases were available: `@angular/*` → ^21.2.19, `next` → 16.2.11 (docs and login, incl. `@next/eslint-plugin-next`), `nx` → 22.7.7, and `js-yaml` → ^4.3.1 / `postcss` → ^8.5.23 in docs. The lockfile was regenerated from scratch so all transitive dependencies resolve to the newest versions within their allowed ranges. With that in place, the override list was rebuilt down to the 8 entries that are still required because a parent package pins an older version (axios and brace-expansion via nx, postcss and sharp via next, esbuild via tsx, uuid via testcontainers, and the two OpenTelemetry packages); the other 20 overrides were removed. A verification pass confirmed the resolved versions stay at or above the floors the removed overrides used to enforce, and `pnpm audit` comes back clean. --------- Co-authored-by: Livio Spring <[email protected]>
20 lines
454 B
YAML
20 lines
454 B
YAML
packages:
|
|
- console
|
|
- tests/*
|
|
- packages/*
|
|
- apps/*
|
|
- deploy/compose
|
|
|
|
exclude:
|
|
- benchmark # because of the node 18 or 20 dependency
|
|
|
|
overrides:
|
|
"axios@<1.18.0": "^1.18.0"
|
|
"brace-expansion@>=4.0.0 <5.0.9": "^5.0.9"
|
|
"esbuild@>=0.27.3 <0.28.1": "^0.28.1"
|
|
"postcss@<8.5.23": "^8.5.23"
|
|
"sharp@<0.35.0": "^0.35.0"
|
|
"uuid@<11.1.1": "^11.1.1"
|
|
"@opentelemetry/core@<2.8.0": "^2.8.0"
|
|
"@opentelemetry/propagator-jaeger@<2.9.0": "^2.9.0"
|