bunfig.toml

[install]
linker = "isolated" # Prevent hoisting from resolving `path-scurry@2` to `lru-cache@6` (missing `LRUCache`), which breaks the `@superset/desktop` postinstall native rebuild.
exact = true
minimumReleaseAge = 259200
# @xterm beta.288/289 (published 2026-07-13) ships the shared-atlas page-merge
# garble fix (xtermjs/xterm.js#6042); versions are pinned exact. Safe to remove
# this exclusion after 2026-07-16. (addon-ligatures stays on beta.220: its
# beta.289 bundle imports node:diagnostics_channel, which breaks the vite
# renderer build.)
# next 16.2.11 (published 2026-07-21) is a security release fixing the SSRF,
# cache-confusion, and middleware-bypass advisories flagged by Dependabot;
# versions are pinned exact. Safe to remove this exclusion after 2026-07-24.
# hono 4.12.34 (published 2026-08-03) is a security release fixing a ReDoS
# in the CORS middleware (GHSA-8j4g-w8fx-2239); version is pinned exact.
# Safe to remove this exclusion after 2026-08-06.
minimumReleaseAgeExcludes = [
	"next",
	"hono",
	"@next/env",
	"@next/swc-darwin-arm64",
	"@next/swc-darwin-x64",
	"@next/swc-linux-arm64-gnu",
	"@next/swc-linux-arm64-musl",
	"@next/swc-linux-x64-gnu",
	"@next/swc-linux-x64-musl",
	"@next/swc-win32-arm64-msvc",
	"@next/swc-win32-x64-msvc",
	"@xterm/xterm",
	"@xterm/headless",
	"@xterm/addon-clipboard",
	"@xterm/addon-fit",
	"@xterm/addon-image",
	"@xterm/addon-progress",
	"@xterm/addon-search",
	"@xterm/addon-serialize",
	"@xterm/addon-unicode11",
	"@xterm/addon-webgl",
]