packages:
  - 'website'
  - 'packages/*'
# Keep non-interactive checks from downloading tooling or reinstalling dependencies implicitly.
pmOnFail: warn
verifyDepsBeforeRun: warn
allowBuilds:
  fallow: true
minimumReleaseAgeExclude:
  - '@chenglou/freerange@0.0.4'
# @limrun/api pins undici to an exact vulnerable version (7.24.7) even in its
# latest release, so a direct bump can't clear the Dependabot alerts. Override
# the transitive resolution instead; scoped to major 7 so any future undici 8
# elsewhere in the tree is untouched.
overrides:
  undici@7: '^7.29.0'
  brace-expansion@5: '^5.0.9'
  fast-uri: 3.1.6
  postcss: 8.5.23
  qs: 6.15.2
  react-router: 7.18.2
  react-router-dom: 7.18.2