packages: - "desktop" - "web" - "admin-web" allowBuilds: esbuild: true overrides: # Force a single copy of the dismissable-layer. Radix packages otherwise # resolve different versions (react-menu pulled 1.1.11, react-dialog 1.1.15), # and each copy keeps its own module-level saved pointer-events style — # so a modal menu opening a modal dialog left `pointer-events: none` stuck on # when the dialog closed, freezing the app (#1482, reminder dialog). # Removable once every @radix-ui dep converges on one version naturally. "@radix-ui/react-dismissable-layer": 1.1.19 # linkify-it 5.0.0 (pulled in via markdown-it / tiptap-markdown) is affected # by GHSA-22p9-wv53-3rq4 and GHSA-v245-v573-v5vm: crafted link/mailto-heavy # text drives quadratic parsing and can freeze the renderer thread. Fixed in # 5.0.1 / 5.0.2 respectively; pin >=5.0.2 to cover both. Removable once # markdown-it resolves linkify-it >=5.0.2 on its own. linkify-it: "^5.0.2" patchedDependencies: isomorphic-git: patches/isomorphic-git.patch virtua@0.49.3: patches/virtua@0.49.3.patch