fix: pin Prisma config to patched deepmerge-ts

[jbeckwith-oai]

Summary

Fixes Dependabot alert 437 by updating the memory example's transitive deepmerge-ts dependency from 7.1.5 to 8.0.2. A version-scoped pnpm override targets @prisma/config@7.10.0; remove it when Prisma adopts a patched release. Only the workspace configuration and lockfile change.

The update addresses the published GHSA-ggr8-5vv4-36mx advisory. Prisma continues to use the supported deepmerge export for its existing plain-object configuration. Please include maintainer security review of the dependency override.

Test plan

• Frozen install, build, all workspace type checks, distribution checks, lint, and formatting passed using the verification skill's complete command sequence, run sequentially.
• All 6,931 repository tests passed, including Docker coverage against local Colima.
• All 15 Prisma tests passed; configuration loading, schema validation, client generation, and SQLite behavior were verified.
• Two consecutive adversarial review rounds, each with two fresh independent reviewers, found no blocking issues. Commit hooks preserved the reviewed files; the secret scan found no secrets.
• Verification used a mounted temporary directory, RUST_LOG=debug, and suppression of the environment-injected UNDICI-EHPA warning. No tests were skipped to obtain these results.

Issue number

Dependabot alert 437

Checks

• Existing focused tests cover the affected behavior; no runtime code or new API is introduced.
• pnpm test and workspace example/type checks passed.
• All code-change-verification steps passed on the final reviewed content.
• Independent review and secret scanning completed.
• Changeset and documentation updates are not applicable to this workspace-only transitive dependency fix.

[changeset-bot]

⚠️ No Changeset found

Latest commit: fdc625f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-14T19:19:20.482312Z	fdc625f	PR opened
🔒 Security Review	✅ Completed 2026-09-14T19:19:46.604422Z	fdc625f	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.