2026-09-03 15:18:03 +02:00
|
|
|
supportedArchitectures:
|
|
|
|
|
os: [current, linux]
|
|
|
|
|
cpu: [current, arm64]
|
|
|
|
|
libc: [current, glibc]
|
2026-07-13 17:00:02 +02:00
|
|
|
minimumReleaseAgeExclude:
|
|
|
|
|
- "@vector-im/compound-design-tokens"
|
|
|
|
|
- "@vector-im/compound-web"
|
|
|
|
|
- matrix-js-sdk
|
|
|
|
|
- matrix-widget-api
|
2026-06-15 12:29:20 +02:00
|
|
|
allowBuilds:
|
|
|
|
|
"@parcel/watcher": true
|
|
|
|
|
"@sentry/cli": true
|
|
|
|
|
"@swc/core": true
|
|
|
|
|
"core-js": true
|
|
|
|
|
"esbuild": true
|
2026-08-10 13:13:58 +02:00
|
|
|
"matrix-js-sdk@git+https://github.com/matrix-org/matrix-js-sdk.git": true
|
2026-06-15 12:29:20 +02:00
|
|
|
"protobufjs": true
|
|
|
|
|
overrides:
|
2026-06-17 15:27:59 +02:00
|
|
|
# We need compatible versions of RxJS in our dependencies and LiveKit's dependencies, but
|
|
|
|
|
# LiveKit has pinned it to a very specific version which is now holding us back from updating.
|
|
|
|
|
# See livekit/components-js#1101 for a request for a proper solution.
|
2026-06-15 12:29:20 +02:00
|
|
|
"@livekit/components-core>rxjs": "^7.8.1"
|
2026-06-17 15:27:59 +02:00
|
|
|
# Dedupe Mediapipe dependencies.
|
2026-06-15 12:29:20 +02:00
|
|
|
"@livekit/track-processors>@mediapipe/tasks-vision": "^0.10.18"
|
2026-06-17 15:27:59 +02:00
|
|
|
# Security fix: https://security-tracker.debian.org/tracker/CVE-2026-31802
|
2026-06-15 12:29:20 +02:00
|
|
|
"tar": "^7.5.11"
|
2026-06-17 15:27:59 +02:00
|
|
|
# Security fixes:
|
|
|
|
|
# - https://github.com/advisories/GHSA-7r86-cg39-jmmj
|
|
|
|
|
# - https://github.com/advisories/GHSA-23c5-xmqv-rm74
|
|
|
|
|
"minimatch": "^10.2.3"
|
2026-10-25 23:50:09 -04:00
|
|
|
# Security fixes for transitive build/test tooling (none of these ship in the
|
|
|
|
|
# embedded call bundle; checked against the npm advisory database 2026-10-25).
|
|
|
|
|
"tinypool": "^2.1.2"
|
|
|
|
|
"@vitest/mocker": "^4.1.12"
|
|
|
|
|
"brace-expansion@>=4": "^5.0.12"
|
|
|
|
|
"browserslist": "^4.28.7"
|
|
|
|
|
"smol-toml": "^1.8.1"
|
|
|
|
|
"source-map-js": "^1.2.2"
|
|
|
|
|
"postcss-selector-parser@>=7": "^7.1.6"
|
|
|
|
|
"baseline-browser-mapping": "^2.11.0"
|
|
|
|
|
"fflate@<0.5": "^0.4.9"
|
|
|
|
|
"fflate@>=0.8": "^0.8.3"
|
|
|
|
|
"pbkdf2": "^3.1.7"
|
|
|
|
|
"zod@>=4": "^4.6.6"
|
2026-06-17 15:27:59 +02:00
|
|
|
# Security fix: https://github.com/element-hq/element-call/security/dependabot/109
|
2026-06-15 12:29:20 +02:00
|
|
|
"glob": "^10.5.0"
|
2026-06-17 15:27:59 +02:00
|
|
|
# Security fixes:
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/110
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/122
|
2026-07-15 18:05:06 +02:00
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/179
|
2026-10-25 23:50:09 -04:00
|
|
|
"qs": "^6.16.0"
|
2026-07-15 18:05:06 +02:00
|
|
|
# Security fixes:
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/106
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/203
|
2026-10-25 23:50:09 -04:00
|
|
|
"js-yaml": "^4.3.2"
|
2026-06-17 15:27:59 +02:00
|
|
|
# Storybook declares support for 0.27.0 only but empirically works fine with 0.28.0.
|
2026-06-15 12:29:20 +02:00
|
|
|
"esbuild": "^0.28.0"
|
2026-07-15 18:05:06 +02:00
|
|
|
# Security fixes:
|
|
|
|
|
# - https://github.com/nodejs/undici/releases/tag/v6.24.0
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/201
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/199
|
2026-10-25 23:50:09 -04:00
|
|
|
"undici": "^6.29.1"
|
2026-06-17 15:27:59 +02:00
|
|
|
# Security fix: https://github.com/advisories/GHSA-rf6f-7fwh-wjgh
|
2026-06-17 15:35:47 +02:00
|
|
|
"flatted": "^3.4.2"
|
2026-07-15 18:05:06 +02:00
|
|
|
# Security fix: https://github.com/element-hq/element-call/security/dependabot/184
|
|
|
|
|
"ws": "^8.21.0"
|
|
|
|
|
# Security fixes:
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/191
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/190
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/192
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/194
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/198
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/196
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/195
|
|
|
|
|
# - https://github.com/element-hq/element-call/security/dependabot/193
|
2026-10-25 23:50:09 -04:00
|
|
|
"dompurify": "^3.4.17"
|
