mirror of
https://github.com/tiennm99/bsk.git
synced 2026-10-03 07:12:12 +00:00
tiennm99
a44c9a9745
Replace pnpm-lock.yaml with package-lock.json. Four of the five overrides move across unchanged, ranges intact. postcss needed a different shape: npm rejects an override that disagrees with a direct dependency (EOVERRIDE), and postcss was a devDependency at ^8.5.15 while the override floored it at >=8.5.18. The devDependency now sits at the advisory floor and the override references it as $postcss, so transitive copies follow the same resolution the pnpm override produced. brace-expansion is still deliberately not overridden. It resolves to 1.1.18 for eslint's minimatch 3.x chain and 5.0.9 elsewhere; 1.1.18 is a patched 1.x, which did not exist when the exception was written, so eslint runs clean and the advisory is gone. .npmrc held only pnpm-specific settings (verify-deps-before-run, ignored-build-scripts-status-warn-only) and is removed. db:push, the Playwright webServer command, and the secret-leak pathspec all referenced pnpm and would have broken.
17 lines
423 B
Plaintext
17 lines
423 B
Plaintext
# Normalize line endings so Prettier's `endOfLine: "lf"` check agrees between
|
|
# Windows working copies and Linux CI. Without this (and with core.autocrlf),
|
|
# `npm run format:check` reports different file counts locally vs in CI.
|
|
* text=auto eol=lf
|
|
|
|
# Binary assets — never touch these.
|
|
*.ttf binary
|
|
*.woff binary
|
|
*.woff2 binary
|
|
*.png binary
|
|
*.jpg binary
|
|
*.jpeg binary
|
|
*.gif binary
|
|
*.ico binary
|
|
*.pdf binary
|
|
*.xlsx binary
|