allowBuilds:
  esbuild: true
  sharp: true
  unrs-resolver: true
# Force any vulnerable transitive postcss (pulled in by next) up to a patched
# release — fixes GHSA-qx2v-qp2m-jg93 / CVE-2026-41305 (vulnerable < 8.5.10).
overrides:
  'postcss@<8.5.10': '^8.5.15'
  'sharp@<0.35.0': '^0.35.3'
minimumReleaseAgeExclude:
  - '@mermaid-js/parser@1.2.1'
  - mermaid@11.17.0
  - lucide-react@1.33.0
  - postcss@8.5.26
  - fumadocs-mdx@15.3.0