mirror of
https://github.com/stablyai/orca.git
synced 2026-11-14 01:47:24 +00:00
Neil
9c7fe9793e
Backport upstream matching and abort fixes plus safe deepmerge property handling across the independent workspaces. Includes installed-package regression tests and audit-tool fixture repair. Agent-reviewed at 83ca381d519e6247d7c1b3f0a52ce2907a9f9a19; CI aggregate passed. Version-based scanner alerts remain open pending documented disposition or compatible upstream releases.
36 lines
1.5 KiB
YAML
36 lines
1.5 KiB
YAML
allowBuilds:
|
|
esbuild: true
|
|
# Its postinstall unpacks the prebuilt libsodium the native builds link.
|
|
react-native-libsodium: true
|
|
|
|
minimumReleaseAge: 4320
|
|
|
|
overrides:
|
|
# Expo still requires Zod 3; pin the version with our security backport.
|
|
zod@>=3 <4: 3.25.76
|
|
dompurify@<3.4.17: 3.4.17
|
|
sprintf-js@<1.1.3: 1.1.3
|
|
markdown-it@>=14.0.0 <14.3.3: 14.3.3
|
|
# Mermaid 11 still requests KaTeX 0.16; the security fix starts at 0.18.2.
|
|
katex@>=0.11.0 <0.18.2: 0.18.10
|
|
# xcode still requests uuid 7; buffer bounds checks were fixed in 11.1.1.
|
|
xcode>uuid: 11.1.1
|
|
# Expo Router still requests query-string 7 and its vulnerable URI decoder.
|
|
query-string: 9.5.1
|
|
|
|
patchedDependencies:
|
|
zod@3.25.76: patches/zod@3.25.76.patch
|
|
sprintf-js@1.1.3: patches/sprintf-js@1.1.3.patch
|
|
'@xterm/addon-webgl@0.20.0-beta.329': patches/@xterm__addon-webgl@0.20.0-beta.329.patch
|
|
expo-notifications@55.0.27: patches/expo-notifications@55.0.27.patch
|
|
query-string@9.5.1: patches/query-string@9.5.1.patch
|
|
react-native-webview@13.16.2: patches/react-native-webview@13.16.2.patch
|
|
react-native@0.83.10: patches/react-native@0.83.10.patch
|
|
braces@3.0.3: patches/braces@3.0.3.patch
|
|
'@expo/cli@55.0.36': patches/@expo__cli@55.0.36.patch
|
|
expo-router@55.0.18: patches/expo-router@55.0.18.patch
|
|
expo-constants@55.0.17: patches/expo-constants@55.0.17.patch
|
|
deepmerge@4.3.1: patches/deepmerge@4.3.1.patch
|
|
glob@13.0.6: patches/glob@13.0.6.patch
|
|
minimatch@10.2.5: patches/minimatch@10.2.5.patch
|