Chore/deps update August 2026

[kamdubiel]

• Added mise config (mise.toml, mise.lock)
• Bumped all catalog deps (Next 16.2.12, eslint 10, TS 6, Storybook 10.5.4)
• Rebuilt lockfile from fresh resolution
• Fixed 8 audit vulns → 0 via overrides
• Overrode postcss, sharp, fast-uri, @hono/node-server, brace-expansion
• Suppressed unfixable elliptic advisory (dev-only, low)
• Pruned stale minimumReleaseAgeExclude list
• Dropped dead sharp allowBuilds entry
• Added eslint 10 peer rule for eslint-plugin-react

[github-actions]

Coverage diff

Metric	PR	main	Δ
Statements	28.18%	N/A	N/A
Branches	44.07%	N/A	N/A
Functions	46.03%	N/A	N/A
Lines	26.87%	N/A	N/A

Base coverage artifact missing; only PR coverage is shown.

🧮 Per-package delta

Package	Metric	PR	main	Δ
frontend	Statements	20.33%	N/A	N/A
	Branches	35.41%	N/A	N/A
	Functions	21.62%	N/A	N/A
	Lines	20.33%	N/A	N/A
ui	Statements	80.00%	N/A	N/A
	Branches	81.81%	N/A	N/A
	Functions	80.76%	N/A	N/A
	Lines	82.47%	N/A	N/A

[Copilot]

Pull request overview

This PR updates the monorepo’s dependency/tooling baseline (pnpm catalog bumps, Node/pnpm engine declarations, security overrides) and introduces mise for tool version management.

Changes:

• Updates pnpm-workspace.yaml catalog versions, audit configuration, peer dependency rules, and vulnerability overrides.
• Pins Node/pnpm versions in root package.json and adds mise configuration/lockfiles.
• Updates a frontend dependency and tweaks formatting ignore rules.

Reviewed changes

Copilot reviewed 6 out of 8 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
pnpm-workspace.yaml	Catalog/version bumps, security/audit config changes, build-script allowlist and overrides adjustments.
packages/ui/tsconfig.json	TS compiler option change for module path aliasing/root directory.
package.json	Updates Node engine, adds pnpm engine + packageManager/devEngines metadata.
mise.toml	Enables mise lockfile behavior and tool discovery settings.
mise.lock	Adds mise-generated tool lock (currently pins pnpm).
apps/frontend/package.json	Bumps next-public-env version.
.prettierignore	Ignores mise files in Prettier runs.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.