packages:
  - packages/*
  - examples/*
  - docker

onlyBuiltDependencies: ["better-sqlite3", "esbuild", "workerd"]

# pnpm holds new releases for 24h before installing them. These two arrived
# with @changesets/cli on 2026-07-31 and block every install until 2026-08-01
# 17:48 UTC, CI included. They are backports on js-yaml's active DoS advisory
# line (CVE-2026-53550 and siblings), where 3.15.0 and 4.2.0 were the fixes.
#
# Pinned to these exact versions on purpose: any later js-yaml still waits out
# the full window. Delete this once the versions have aged past it.
minimumReleaseAgeExclude:
  - 'js-yaml@3.15.1 || 4.3.1'