From 8f58db587a65833278117e2014d6ea823b699efe Mon Sep 17 00:00:00 2001 From: Luke Bennett Date: Sat, 11 Jul 2026 09:58:02 +1000 Subject: [PATCH] Update packages and harden security --- apps/docs/package.json | 2 +- pnpm-lock.yaml | 4 +-- pnpm-workspace.yaml | 80 +++++++++++++++++++++++------------------- turbo.json | 3 ++ 4 files changed, 50 insertions(+), 39 deletions(-) diff --git a/apps/docs/package.json b/apps/docs/package.json index 30359e68..bff795bc 100644 --- a/apps/docs/package.json +++ b/apps/docs/package.json @@ -60,7 +60,7 @@ "@vitejs/plugin-react": "catalog:", "@vitest/browser-playwright": "catalog:", "nitro": "catalog:", - "playwright": "*", + "playwright": "catalog:", "serve": "catalog:", "tailwindcss": "catalog:", "typescript": "catalog:", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 59d88d50..d5a0b8ba 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -148,7 +148,7 @@ catalogs: specifier: ^8.0.4 version: 8.0.4 playwright: - specifier: ^1.61.1 + specifier: '*' version: 1.61.1 publint: specifier: ^0.3.21 @@ -338,7 +338,7 @@ importers: specifier: 'catalog:' version: nitro-nightly@3.0.1-20260128-211656-ae83c97e(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)(@voidzero-dev/vite-plus-core@0.2.2(@arethetypeswrong/core@0.18.4)(@types/node@26.0.1)(esbuild@0.28.1)(jiti@2.7.0)(publint@0.3.21)(tsx@4.22.4)(typescript@6.0.3)(unrun@0.2.37)(yaml@2.9.0))(chokidar@5.0.0)(lru-cache@11.5.1)(rolldown@1.1.3)(rollup@4.59.0) playwright: - specifier: '*' + specifier: 'catalog:' version: 1.61.1 serve: specifier: 'catalog:' diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 187a7d06..87cd48c5 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -7,12 +7,50 @@ packages: - packages/* - packages/@luke-ui/* +catalogMode: prefer + +peerDependencyRules: + allowedVersions: + '@joshwooding/vite-plugin-react-docgen-typescript>vite': ^8.0.0 + '@tailwindcss/vite>vite': ^8.0.0 + vite: '*' + vitest: '*' + + allowAny: + - vite + - vitest + +minimumReleaseAge: 7200 # 5 days, in minutes + +minimumReleaseAgeExclude: + - '@babel/core@7.29.1' + - '@tanstack/start-server-core@1.167.30' + - brace-expansion@1.1.13 || 5.0.5 || 5.0.6 + - esbuild@0.28.1 + - fast-uri@3.1.1 || 3.1.2 + - h3@2.0.1-rc.15 || 2.0.1-rc.18 || 2.0.1 + - js-yaml@3.15.0 || 4.1.2 + - path-to-regexp@8.4.0 + - picomatch@2.3.2 + - srvx@0.11.13 + - vite@7.3.2 || 7.3.5 || 8.0.16 + - ws@8.20.1 || 8.21.0 + +overrides: + vite: 'catalog:' + vitest: 'catalog:' + +trustLockfile: true + +trustPolicy: no-downgrade + catalog: '@arethetypeswrong/core': ^0.18.4 '@capsizecss/metrics': ^4.1.0 '@capsizecss/vanilla-extract': ^2.0.4 '@catppuccin/palette': ^1.8.0 '@changesets/cli': ^2.31.0 + '@monaco-editor/react': ^4.7.0 '@orama/orama': ^3.1.18 '@react-aria/utils': ^3.34.1 '@rollup/plugin-babel': ^7.1.0 @@ -36,7 +74,6 @@ catalog: '@vanilla-extract/rollup-plugin': ^1.5.3 '@vanilla-extract/vite-plugin': ^5.2.3 '@vitejs/plugin-react': ^6.0.3 - zod: ^4.4.3 '@vitest/browser-playwright': 4.1.9 '@vitest/coverage-v8': 4.1.9 '@vitest/ui': 4.1.9 @@ -46,22 +83,22 @@ catalog: eslint-plugin-react-hooks: ^7.1.1 fumadocs-core: ^16.10.7 fumadocs-mdx: ^15.0.13 - fumadocs-ui: ^16.10.7 fumadocs-typescript: ^5.2.7 + fumadocs-ui: ^16.10.7 knip: ^6.23.0 lucide-react: ^1.22.0 lz-string: ^1.5.0 - '@monaco-editor/react': ^4.7.0 monaco-editor: ^0.55.1 next-themes: ^0.4.6 nitro: npm:nitro-nightly@3.0.1-20260128-211656-ae83c97e node-html-parser: ^8.0.4 - playwright: ^1.61.1 + playwright: '*' publint: ^0.3.21 react: ^19.2.7 react-aria-components: ^1.19.0 react-dom: ^19.2.7 react-error-boundary: ^6.1.0 + react-resizable-panels: ^4.12.1 serve: ^14.2.6 spin-doctor: ^0.0.1 storybook: ^10.4.6 @@ -70,37 +107,8 @@ catalog: tsx: ^4.22.4 turbo: ^2.10.1 typescript: ^6.0.3 + unist-util-visit: ^5.1.0 vite: npm:@voidzero-dev/vite-plus-core@0.2.2 - vitest: 4.1.9 vite-plus: 0.2.2 - unist-util-visit: ^5.1.0 - react-resizable-panels: ^4.12.1 - -catalogMode: prefer - -peerDependencyRules: - allowedVersions: - '@joshwooding/vite-plugin-react-docgen-typescript>vite': ^8.0.0 - '@tailwindcss/vite>vite': ^8.0.0 - vite: '*' - vitest: '*' - allowAny: - - vite - - vitest - -minimumReleaseAgeExclude: - - '@babel/core@7.29.1' - - '@tanstack/start-server-core@1.167.30' - - brace-expansion@1.1.13 || 5.0.5 || 5.0.6 - - esbuild@0.28.1 - - fast-uri@3.1.1 || 3.1.2 - - h3@2.0.1-rc.15 || 2.0.1-rc.18 || 2.0.1 - - js-yaml@3.15.0 || 4.1.2 - - path-to-regexp@8.4.0 - - picomatch@2.3.2 - - srvx@0.11.13 - - vite@7.3.2 || 7.3.5 || 8.0.16 - - ws@8.20.1 || 8.21.0 -overrides: - vite: 'catalog:' - vitest: 'catalog:' + vitest: 4.1.9 + zod: ^4.4.3 diff --git a/turbo.json b/turbo.json index c7c5bfd0..65fdc576 100644 --- a/turbo.json +++ b/turbo.json @@ -7,6 +7,9 @@ "@luke-ui/react#check:types": { "dependsOn": ["build", "^build"] }, + "@luke-ui/react#fix:lint": { + "dependsOn": ["build", "generate"] + }, "//#check:format-root": { "cache": true }, -- 2.51.2