[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 of the month, every 12 months (* * 1 */12 *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

---

Note

Low Risk
Lockfile-only dev dependency resolution with no application source changes; the large oxlint bump may alter lint results in CI.

Overview
Refreshes pnpm-lock.yaml only (Renovate lock file maintenance); package.json semver ranges are unchanged.

Resolved dev-tool versions move forward within existing ranges, notably oxlint 1.51 → 1.89, @changesets/cli 2.29.8 → 2.31.1, @sanity/tsconfig 2.2.1, and typedoc 0.28.20. The lockfile also picks up transitive updates for the build/lint stack (rolldown / rolldown-plugin-dts, publint, ast-kit 3.0.0, minimatch 10, Babel 8.0.8, and related native bindings).

^{Reviewed by Cursor Bugbot for commit b7c21e2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: b7c21e2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​sanity/​tsconfig@​2.1.0 ⏵ 2.2.1	+1		+1	+8
	typedoc@​0.28.17 ⏵ 0.28.20
	oxlint@​1.51.0 ⏵ 1.89.0	+1
	@​changesets/​cli@​2.29.8 ⏵ 2.31.1			+1	+1

View full report

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit b7c21e2. Configure here.}

[cursor]

Incompatible oxlint and tsgolint versions

High Severity

The lockfile now resolves oxlint to 1.89.0 while leaving oxlint-tsgolint at 0.16.0. That oxlint release requires oxlint-tsgolint >=7.0.2003 for type-aware analysis, so pnpm lint (which passes --type-aware and --type-check) can fail or skip type-aware rules.

Additional Locations (1)

• pnpm-lock.yaml#L992-L994

 

^{Reviewed by Cursor Bugbot for commit b7c21e2. Configure here.}