chore(monorepo): update auto-merge non-major dependencies

.github/.nvmrc

@@ -1 +1 @@
-26.3.0
+26.8.2

.github/workflows/git-guardian.yml

@@ -17,13 +17,13 @@ jobs:
     environment: production
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
         with:
           fetch-depth: 0
           persist-credentials: false
 
       - name: GitGuardian scan
-        uses: GitGuardian/ggshield/actions/secret@aaada885532b9451e5774d063d968e74a238ff44 # v1.52.2
+        uses: GitGuardian/ggshield/actions/secret@efc667f656e64e9587d92da3630b00a3f5f52e6e # v1.54.0
         with:
           args: --exclude pnpm-lock.yaml --exclude tools/config/verdaccio.yml --exclude nx.json
         env:

.github/workflows/release.yml

@@ -68,7 +68,7 @@ jobs:
       - start
     steps:
       - name: Checkout [Pull Request]
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         if: ${{ github.event_name == 'pull_request' }}
         with:
           # By default, PRs will be checked-out based on the Merge Commit, but we want the actual branch HEAD.
@@ -79,7 +79,7 @@ jobs:
           persist-credentials: false
 
       - name: Checkout `main` branch
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         if: ${{ github.event_name != 'pull_request' }}
         with:
           # We need to fetch all branches and commits so that Nx affected has a base to compare against.
@@ -120,7 +120,7 @@ jobs:
           if_false: ${{ steps.bump-version.outputs.next_version }}
 
       - id: create_release
-        uses: shogo82148/actions-create-release@6a396031bc74c57403da1018fec74d24c6aa03cd # v1.9.0
+        uses: shogo82148/actions-create-release@8674c0ecee617c8dfb006526bcc22a362c70b88a # v1.9.1
         if: "steps.tag.outputs.value != ''"
         with:
           github_token: ${{ github.token }}
@@ -133,7 +133,7 @@ jobs:
 
       - name: Upload release artifact
         if: "steps.tag.outputs.value != ''"
-        uses: shogo82148/actions-upload-release-asset@ee2ae851dc5d938b90075b3ef12c540abfd1ee72 # v1.10.1
+        uses: shogo82148/actions-upload-release-asset@aaba0f56bdbc1071f4af234d5cb16055e8a400de # v1.10.4
         with:
           github_token: ${{ github.token }}
           upload_url: ${{ steps.create_release.outputs.upload_url }}
@@ -150,7 +150,7 @@ jobs:
       github.event.pull_request.draft == false
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0

.github/workflows/sync-labels.yml

@@ -25,7 +25,7 @@ jobs:
     environment: production
     steps:
       - name: Checkout Code
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           token: ${{ secrets.STORM_BOT_GITHUB_TOKEN }}
           fetch-depth: 0

.github/workflows/zizmor.yml

@@ -22,7 +22,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           persist-credentials: false
 
@@ -39,7 +39,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2
+        uses: github/codeql-action/upload-sarif@faaca9a8f6edddba5725ffe5adefdab6669a2eca # v3.38.0
         with:
           sarif_file: results.sarif
           category: zizmor

package.json

@@ -65,10 +65,10 @@
     "zx": "catalog:",
     "unrs-resolver": "catalog:"
   },
-  "packageManager": "pnpm@11.1.2",
+  "packageManager": "pnpm@11.27.0",
   "engines": {
-    "node": ">=26.3.0",
-    "pnpm": ">=11.1.2"
+    "node": ">=26.8.2",
+    "pnpm": ">=11.27.0"
   },
   "triggerEmptyDevReleaseByIncrementingThisNumber": 0
 }