packages: - packages/* blockExoticSubdeps: true minimumReleaseAge: 4320 # vite is a dev-only transitive of vitest (optionalDependency of @vitest/mocker) # that pnpm overrides cannot pin; exclude it from the maturity gate so test # tooling can resolve. The gate still applies to every other package. minimumReleaseAgeExclude: - vite trustPolicy: no-downgrade patchedDependencies: '@typespec/http': patches/@typespec__http.patch '@typespec/compiler': patches/@typespec__compiler.patch '@typespec/openapi': patches/@typespec__openapi.patch '@typespec/http-client': patches/@typespec__http-client.patch '@typespec/http-client-python': patches/@typespec__http-client-python.patch '@typespec/emitter-framework@0.17.0': patches/@typespec__emitter-framework@0.17.0.patch '@typespec/openapi3@1.11.0': patches/@typespec__openapi3@1.11.0.patch overrides: 'semver@<7.7.4': '>=7.7.4' # pnpm 11 replaces onlyBuiltDependencies with an explicit allow/deny map. # Preserve the prior allowlist: only @typespec/http-client-python may run its # build script; core-js/esbuild/protobufjs were never allowed and stay denied # so an install does not silently start running their postinstall scripts. allowBuilds: '@typespec/http-client-python': true esbuild: true core-js: false protobufjs: false