Lucas Berger
0f101bdd39
- audit-allowlist.json: GHSA-gv7w-rqvm-qjhr waiver (esbuild dev transitive via drizzle-kit/vitest/vite; not in production runtime) - outdated-pins.json: intentional pin reasons for eslint, @eslint/js, zod, @types/node
7 lines
356 B
JSON
7 lines
356 B
JSON
{
|
|
"eslint": "ESLint 10 breaks eslint-plugin-react@7.37.5 (jsx-eslint#3977). Unpin when plugin releases ESLint 10 support.",
|
|
"@eslint/js": "Pinned with eslint — same constraint.",
|
|
"zod": "zod v4 has breaking API changes. Pin at 3.x until migration is planned.",
|
|
"@types/node": "Pinned to Node 22 LTS types to match runtime; Node 25 is not LTS."
|
|
}
|