chore(monorepo): update auto-merge non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@storm-software/config (source)	^1.138.10 → ^1.138.72			pnpm.catalog.default	patch
@storm-software/config-tools (source)	^1.190.73 → ^1.190.136			pnpm.catalog.default	patch
@storm-software/cspell (source)	^0.46.141 → ^0.46.203			pnpm.catalog.default	patch
@storm-software/eslint (source)	^0.170.106 → ^0.170.171			pnpm.catalog.default	patch
@storm-software/git-tools (source)	^2.131.81 → ^2.131.144			pnpm.catalog.default	patch
@storm-software/linting-tools (source)	^1.134.3 → ^1.134.66			pnpm.catalog.default	patch
@storm-software/markdownlint (source)	^0.30.229 → ^0.30.291			pnpm.catalog.default	patch
@storm-software/pnpm-tools (source)	^0.7.84 → ^0.7.150			pnpm.catalog.default	patch
@storm-software/prettier (source)	^0.59.126 → ^0.59.189			pnpm.catalog.default	patch
@storm-software/tsconfig (source)	^0.48.140 → ^0.48.202			pnpm.catalog.default	patch
GitGuardian/ggshield	v1.52.2 → v1.54.0			action	minor
actions/checkout	v4.3.1 → v4.4.0			action	minor
actions/checkout	v3.6.0 → v3.7.0			action	minor
eslint (source)	^10.5.0 → ^10.10.0			pnpm.catalog.default	minor
github/codeql-action	v3.36.2 → v3.38.0			action	minor
node (source)	26.3.0 → 26.8.2				minor
node (source)	>=26.3.0 → >=26.8.2			engines	minor
pnpm (source)	11.1.2 → 11.27.0			packageManager	minor
pnpm (source)	>=11.1.2 → >=11.27.0			engines	minor
prettier (source)	^3.8.4 → ^3.9.6			pnpm.catalog.default	minor
shogo82148/actions-create-release	v1.9.0 → v1.9.1			action	patch
shogo82148/actions-upload-release-asset	v1.10.1 → v1.10.4			action	patch

---

Release Notes

storm-software/storm-ops (@​storm-software/config)

v1.138.72

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.288

v1.138.71

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.287

v1.138.70

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.286

v1.138.69

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.285

v1.138.68

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.284

v1.138.67

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.283

v1.138.66

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.282

v1.138.65

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.281

v1.138.64

Compare Source

Miscellaneous

• monorepo: Update workspace package dependencies (23b021d2c)

Updated Dependencies

• Updated testing-tools to v1.119.280

v1.138.63

Compare Source

Bug Fixes

• git-tools: Added prettier-plugin-sh dependency to package (618da22c4)

Updated Dependencies

• Updated testing-tools to v1.119.279

v1.138.62

Compare Source

Bug Fixes

• eslint: Resolve issues with built eslint configuration packages (38a4294c6)

Updated Dependencies

• Updated testing-tools to v1.119.278

v1.138.61

Compare Source

Bug Fixes

• esbuild: Resolve issue with bundled package import paths (b1efcaf7e)

Updated Dependencies

• Updated testing-tools to v1.119.277

v1.138.60

Compare Source

Miscellaneous

• eslint: Update build process to use tsdown package (e714f6822)

Updated Dependencies

• Updated testing-tools to v1.119.276

v1.138.59

Compare Source

Bug Fixes

• eslint: Remove incorrectly bundled dependency (7619f2dfe)

Updated Dependencies

• Updated testing-tools to v1.119.275

v1.138.58

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.274

v1.138.57

Compare Source

Bug Fixes

• monorepo: Resolved issues around duplicate dependency versions (64ab34d45)
• monorepo: Update all repository packages to resolve hoisting issues (8dca67b78)

Updated Dependencies

• Updated testing-tools to v1.119.273

v1.138.56

Compare Source

Bug Fixes

• monorepo: Further updates to resolve inlined dependency issues (53d8e155d)

Updated Dependencies

• Updated testing-tools to v1.119.272

v1.138.55

Compare Source

Bug Fixes

• eslint: Resolve issue with invalid mdast-util-to-string version (9eed4dff9)

Updated Dependencies

• Updated testing-tools to v1.119.271

v1.138.54

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.270

v1.138.53

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.269

v1.138.52

Compare Source

Bug Fixes

• monorepo: Resolve issue with multiple ajv versions (8b585981b)
• eslint: Resolve issue with invalid ajv dependency version (123da824b)

Updated Dependencies

• Updated testing-tools to v1.119.268

v1.138.51

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.267

v1.138.50

Compare Source

Miscellaneous

• monorepo: Update workspace's lockfile (8d9825be1)

Bug Fixes

• eslint: Resolve issue with invalid dependency versions (9813a20e4)

Updated Dependencies

• Updated testing-tools to v1.119.266

v1.138.49

Compare Source

Miscellaneous

• monorepo: Update workspace packages' peer dependencies (8826d672f)

Updated Dependencies

• Updated testing-tools to v1.119.265

v1.138.48

Compare Source

Bug Fixes

• workspace-tools: Resolve issue with missing package dependencies (8183837f8)

Updated Dependencies

• Updated testing-tools to v1.119.264

v1.138.47

Compare Source

Bug Fixes

• prettier: Resolve issue causing exclude files from being part of release (137627bfa)

Updated Dependencies

• Updated testing-tools to v1.119.263

v1.138.46

Compare Source

Bug Fixes

• package-constants: Resolve issue with incorrect package prefix (24eb88022)

Updated Dependencies

• Updated testing-tools to v1.119.262

v1.138.45

Compare Source

Miscellaneous

• monorepo: Update workspace packages' dependencies (c5d409dab)

Updated Dependencies

• Updated testing-tools to v1.119.261

v1.138.44

Compare Source

Miscellaneous

• monorepo: Added back the missing bin property from package.json files (338c62167)

Updated Dependencies

• Updated testing-tools to v1.119.260

v1.138.43

Compare Source

Miscellaneous

• monorepo: Update workspace packages' README.md files (85e8622c2)
• workspace-tools: Ensure exec command is run via package manager (7e2a93628)

Updated Dependencies

• Updated testing-tools to v1.119.259

v1.138.42

Compare Source

Miscellaneous

• workspace-tools: Ensure exec command is run via package manager (7e2a93628)

Updated Dependencies

• Updated testing-tools to v1.119.258

v1.138.41

Compare Source

Bug Fixes

• workspace-tools: Resolve issue importing pnpm-tools and bun-tools in release executor (86856d0bd)

Updated Dependencies

• Updated testing-tools to v1.119.257

v1.138.38

Compare Source

Miscellaneous

• git-tools: Added nested bun and pnpm modules for lefthook (1a543f7f5)

Updated Dependencies

• Updated testing-tools to v1.119.254

v1.138.36

Compare Source

Miscellaneous

• bun-tools: Display full error details during update (f1c4902a7)

Updated Dependencies

• Updated testing-tools to v1.119.252

v1.138.35

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.251

v1.138.29

Compare Source

Miscellaneous

• monorepo: Update workspace's lockfiles (cf18a1819)
• workspace-tools: Rename prod profile to release for consistency (7c676ed98)

Updated Dependencies

• Updated testing-tools to v1.119.245

v1.138.28

Compare Source

Miscellaneous

• monorepo: Update workspace packages' README.md files (07018210f)

Updated Dependencies

• Updated testing-tools to v1.119.244

v1.138.27

Compare Source

Miscellaneous

• monorepo: Update workspace packages' dependencies (e3ad71111)

Updated Dependencies

• Updated testing-tools to v1.119.243

v1.138.26

Compare Source

Bug Fixes

• monorepo: Set NX_PREFER_NODE_STRIP_TYPES to false to resolve release issue (6d8d78727)

Updated Dependencies

• Updated testing-tools to v1.119.242

v1.138.23

Compare Source

Miscellaneous

• monorepo: Update workspace packages' dependencies (8cfa3011d)

Updated Dependencies

• Updated testing-tools to v1.119.239

v1.138.22

Compare Source

Miscellaneous

• monorepo: Disable treefmt to prevent build issues (0d2e21f3f)

Updated Dependencies

• Updated testing-tools to v1.119.238

v1.138.21

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.237

v1.138.20

Compare Source

Miscellaneous

• monorepo: Update workspace packages' dependencies (94184a932)
• monorepo: Update workspace packages' dependencies (5580e18dc)

Updated Dependencies

• Updated testing-tools to v1.119.236

v1.138.19

Compare Source

Miscellaneous

• monorepo: Update repository packages' dependencies (6f81fb5b5)

Updated Dependencies

• Updated testing-tools to v1.119.235

v1.138.18

Compare Source

Bug Fixes

• workspace-tools: Resolve issue applying the cargo project name parameter (f927214be)

Updated Dependencies

• Updated testing-tools to v1.119.234

v1.138.17

Compare Source

Miscellaneous

• monorepo: Upgrade workspace packages' dependencies (fcc009e9d)

Updated Dependencies

• Updated testing-tools to v1.119.233

v1.138.16

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.232

v1.138.15

Compare Source

Miscellaneous

• monorepo: Update workspace packages' dependencies (5b4faf445)

Features

• npm-tools: Updated getVersion function to allow retries and timeout options (c1ebc0184)

Updated Dependencies

• Updated testing-tools to v1.119.231

v1.138.14

Compare Source

Bug Fixes

• pnpm-tools: Resolve issue with replace statement when formatting semver (f9e233720)

Updated Dependencies

• Updated testing-tools to v1.119.230

v1.138.13

Compare Source

Miscellaneous

• monorepo: Update workspace packages' dependencies (ab5da025e)

Updated Dependencies

• Updated testing-tools to v1.119.229

v1.138.12

Compare Source

Updated Dependencies

• Updated testing-tools to v1.119.228

v1.138.11

Compare Source

Miscellaneous

• monorepo: Regenerate workspace packages' README.md files (1090c1b70)

Updated Dependencies

• Updated testing-tools to v1.119.227

storm-software/storm-ops (@​storm-software/config-tools)

v1.190.136

Compare Source

Updated Dependencies

• Updated config to v1.138.72
• Updated testing-tools to v1.119.288

v1.190.135

Compare Source

Updated Dependencies

• Updated config to v1.138.71
• Updated testing-tools to v1.119.287

v1.190.134

Compare Source

Updated Dependencies

• Updated config to v1.138.70
• Updated testing-tools to v1.119.286

v1.190.133

Compare Source

Updated Dependencies

• Updated config to v1.138.69
• Updated testing-tools to v1.119.285

v1.190.132

Compare Source

Updated Dependencies

• Updated config to v1.138.68
• Updated testing-tools to v1.119.284

v1.190.131

Compare Source

Updated Dependencies

• Updated config to v1.138.67
• Updated testing-tools to v1.119.283

v1.190.130

Compare Source

Updated Dependencies

• Updated config to v1.138.66
• Updated testing-tools to v1.119.282

v1.190.129

Compare Source

Miscellaneous

• bun-tools: Update storm-bun to include improved error logging (97d65d1d3)

v1.190.128

Compare Source

Updated Dependencies

• Updated config to v1.138.65
• Updated testing-tools to v1.119.281

v1.190.127

Compare Source

Miscellaneous

• monorepo: Update workspace package dependencies (23b021d2c)

Updated Dependencies

• Updated config to v1.138.64
• Updated testing-tools to v1.119.280

v1.190.126

Compare Source

Bug Fixes

• git-tools: Added prettier-plugin-sh dependency to package (618da22c4)

Updated Dependencies

• Updated config to v1.138.63
• Updated testing-tools to v1.119.279

v1.190.125

Compare Source

Bug Fixes

• eslint: Resolve issues with built eslint configuration packages (38a4294c6)

Updated Dependencies

• Updated config to v1.138.62
• Updated testing-tools to v1.119.278

v1.190.124

Compare Source

Bug Fixes

• esbuild: Resolve issue with bundled package import paths (b1efcaf7e)

Updated Dependencies

• Updated config to v1.138.61
• Updated testing-tools to v1.119.277

v1.190.123

Compare Source

Miscellaneous

• eslint: Update build process to use tsdown package (e714f6822)

Updated Dependencies

• Updated config to v1.138.60
• Updated testing-tools to v1.119.276

v1.190.122

Compare Source

Bug Fixes

• eslint: Remove incorrectly bundled dependency (7619f2dfe)

Updated Dependencies

• Updated config to v1.138.59
• Updated testing-tools to v1.119.275

v1.190.121

Compare Source

Miscellaneous

• config-tools: Update workspace package distribution files (b67c6aec6)

Bug Fixes

• monorepo: Resolve issue with invalid dependency versions (e4206a676)

Updated Dependencies

• Updated config to v1.138.58
• Updated testing-tools to v1.119.274

v1.190.120

Compare Source

Bug Fixes

• monorepo: Resolved issues around duplicate dependency versions (64ab34d45)
• monorepo: Update all repository packages to resolve hoisting issues (8dca67b78)

Updated Dependencies

• Updated config to v1.138.57
• Updated testing-tools to v1.119.273

v1.190.119

Compare Source

Bug Fixes

• monorepo: Further updates to resolve inlined dependency issues (53d8e155d)

Updated Dependencies

• Updated config to v1.138.56
• Updated testing-tools to v1.119.272

v1.190.118

Compare Source

Bug Fixes

• eslint: Resolve issue with invalid mdast-util-to-string version (9eed4dff9)

Updated Dependencies

• Updated config to v1.138.55
• Updated testing-tools to v1.119.271

v1.190.117

Compare Source

Bug Fixes

• eslint: Resolve issue with invalid ajv dependency version (bac188714)

Updated Dependencies

• Updated config to v1.138.54
• Updated testing-tools to v1.119.270

v1.190.116

Compare Source

Updated Dependencies

• Updated config to v1.138.53
• Updated testing-tools to v1.119.269

v1.190.115

Compare Source

Miscellaneous

• monorepo: Update workspace's devenv modules (15dc34c13)

Bug Fixes

• monorepo: Resolve issue with multiple ajv versions (8b585981b)

Updated Dependencies

• Updated config to v1.138.52
• Updated testing-tools to v1.119.268

v1.190.114

Compare Source

Miscellaneous

• monorepo: Update pnpm-lock.yaml file (e351f3d97)

Bug Fixes

• git-tools: Resolve issue with overriden mdast-util-to-string dependency (3d577cc7f)

Updated Dependencies

• Updated config to v1.138.51
• Updated testing-tools to v1.119.267

v1.190.113

Compare Source

Miscellaneous

• monorepo: Update workspace's lockfile (8d9825be1)

Bug Fixes

• build-tools: Resolve issue with deprecated Nx package APIs (897964540)
• eslint: Resolve issue with invalid dependency versions (9813a20e4)

Updated Dependencies

• Updated config to v1.138.50
• Updated testing-tools to v1.119.266

v1.190.112

Compare Source

Miscellaneous

• monorepo: Update workspace packages' peer dependencies (8826d672f)

Updated Dependencies

• Updated config to v1.138.49
• Updated testing-tools to v1.119.265

v1.190.111

Compare Source

Bug Fixes

• workspace-tools: Resolve issue with missing package dependencies (8183837f8)

Updated Dependencies

• Updated config to v1.138.48
• Updated testing-tools to v1.119.264

v1.190.110

Compare Source

Bug Fixes

• prettier: Resolve issue causing exclude files from being part of release (137627bfa)

Updated Dependencies

• Updated config to v1.138.47
• Updated testing-tools to v1.119.263

v1.190.109

Compare Source

Bug Fixes

• package-constants: Resolve issue with incorrect package prefix (24eb88022)

Updated Dependencies

• Updated config to v1.138.46
• Updated testing-tools to v1.119.262

v1.190.108

Compare Source

Miscellaneous

• monorepo: Update workspace packages' dependencies (c5d409dab)

Continuous Integration

• monorepo: Update SHA hashes for workflow versions (76f60f359)

Updated Dependencies

• Updated config to v1.138.45
• Updated testing-tools to v1.119.261

v1.190.107

Compare Source

Miscellaneous

• monorepo: Added back the missing bin property from package.json files (338c62167)

Updated Dependencies

• Updated config to v1.138.44
• Updated testing-tools to v1.119.260

v1.190.106

Compare Source

Miscellaneous

• monorepo: Update workspace packages' README.md files (85e8622c2)
• workspace-tools: Ensure exec command is run via package manager (7e2a93628)

Updated Dependencies

• Updated config to v1.138.43
• Updated testing-tools to v1.119.259

v1.190.105

Compare Source

Miscellaneous

• workspace-tools: Ensure exec command is run via package manager (7e2a93628)

Updated Dependencies

• Updated config to v1.138.42
• Updated testing-tools to v1.119.258

v1.190.104

Compare Source

Bug Fixes

• workspace-tools: Resolve issue importing pnpm-tools and bun-tools in release executor (86856d0bd)

Updated Dependencies

• Updated config to v1.138.41
• Updated testing-tools to v1.119.257

v1.190.101

Compare Source

Miscellaneous

• git-tools: Added nested bun and pnpm modules for lefthook (1a543f7f5)

Updated Dependencies

• Updated config to v1.138.38
• Updated testing-tools to v1.119.254

v1.190.99

Compare Source

Miscellaneous

• devenv-modules: Update devenv modules inputs (d71083ab0)
• bun-tools: Display full error details during update (f1c4902a7)

Updated Dependencies

• Updated config to v1.138.36
• Updated testing-tools to v1.119.252

v1.190.98

[Compare Source](https://redirec

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "after 2am and before 3am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​storm-software/​git-tools@​2.131.81 ⏵ 2.131.144	+8
	@​storm-software/​pnpm-tools@​0.7.84 ⏵ 0.7.150	+1		+1
	@​storm-software/​config-tools@​1.190.73 ⏵ 1.190.136	+9
	@​storm-software/​tsconfig@​0.48.140 ⏵ 0.48.202	+1		-1
	@​storm-software/​eslint@​0.170.106 ⏵ 0.170.171	+7
	@​storm-software/​cspell@​0.46.141 ⏵ 0.46.203
	@​storm-software/​markdownlint@​0.30.229 ⏵ 0.30.291	+1
	@​storm-software/​prettier@​0.59.126 ⏵ 0.59.189	+3
	@​storm-software/​linting-tools@​1.134.3 ⏵ 1.134.66	+9
	@​storm-software/​config@​1.138.10 ⏵ 1.138.72	-11		+2
	prettier@​3.8.4 ⏵ 3.9.6			+1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @pnpm/network.ca-file is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/@storm-software/linting-tools@1.134.66 → npm/@pnpm/network.ca-file@1.0.2 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@pnpm/network.ca-file@1.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm formatly is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/@storm-software/linting-tools@1.134.66 → npm/formatly@0.3.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/formatly@0.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm string-width is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/@storm-software/eslint@0.170.171 → npm/string-width@8.1.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/string-width@8.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm underscore is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/@storm-software/git-tools@2.131.144 → npm/underscore@1.13.8 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/underscore@1.13.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report