chore(deps): lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[osdiab]

@Shinigami92 i think this bumps versions to the highest allowed by the semver tags - that's fine but do you think we should include a minimumReleaseAge + disallow exotic git/http deps config for pnpm in here to avoid supply chain attacks? Scary world right now

[Shinigami92]

@Shinigami92 i think this bumps versions to the highest allowed by the semver tags - that's fine but do you think we should include a minimumReleaseAge + disallow exotic git/http deps config for pnpm in here to avoid supply chain attacks? Scary world right now

This is exactly the plan, however potentially Renovate already comes nowadays with some defaults and pnpm v11 also will be a bit more secure.