From 8f017942d9fd4813515bb3a20373aa2a0de4fb32 Mon Sep 17 00:00:00 2001
From: shamoon <4887959+shamoon@users.noreply.github.com>
Date: Sun, 26 Jul 2026 16:25:49 -0700
Subject: [PATCH] Chore: resolve npm provenance issues with chokidar and semver
 (#13323)

---
 src-ui/pnpm-workspace.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src-ui/pnpm-workspace.yaml b/src-ui/pnpm-workspace.yaml
index 0065ff09b..56df810fb 100644
--- a/src-ui/pnpm-workspace.yaml
+++ b/src-ui/pnpm-workspace.yaml
@@ -2,6 +2,9 @@ packages:
   - "."
 minimumReleaseAge: 10080
 trustPolicy: no-downgrade
+trustPolicyExclude:
+  - "chokidar@4.0.3"
+  - "semver@6.3.1 || 5.7.2"
 allowBuilds:
   "@parcel/watcher": true
   canvas: true