[yevheniyJ]

Summary

Bumps dev dependencies and resolves the bulk of pnpm audit findings. Reduces audit findings from 36 → 2.

package.json

• Tightened devDependency caret ranges to the patched minimums (pnpm audit --fix=update).
• Major-version pins the project intentionally holds are preserved: jest 27, typedoc 0.26, eslint 9, @types/node 12, typescript 4 (es2019 target + dependabot "ignore majors" policy).
• lint-staged >=8 → ^17.6.0 (its open range already permitted this; inert in practice — the pre-commit hook runs lint-ci && test, not lint-staged).

pnpm-workspace.yaml (new)

pnpm 11.20 no longer reads pnpm.overrides from package.json, so overrides live here. Forces patched transitive deps:

overrides:
  js-yaml@>=3.0.0 <3.15.2: 3.15.2
  browserslist@<=4.28.6: ^4.28.7
  '@tootallnate/once@<2.0.1': ^2.0.1

Remaining 2 (unfixable for now)

braces (high) and sprintf-js (moderate) advisory fixes (3.0.4 / 1.1.4) are not yet published to npm. Both are dev-only transitive DoS/ReDoS issues buried in jest 27's tree with no runtime exposure in the published package (ships only out/** + axios). They'll clear once upstream patches land.

Verification

• pnpm run build ✅
• pnpm run lint-ci ✅ (0 errors)
• pnpm test ✅ (606 passed, 42 suites)
• E2E smoke test against the real API ✅ (getAuthenticatedUser, listSupportedLanguages, listProjects)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.92%. Comparing base (a1bbb1c) to head (5023b61).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #737   +/-   ##
=======================================
  Coverage   88.92%   88.92%           
=======================================
  Files          47       47           
  Lines        2563     2563           
  Branches      350      350           
=======================================
  Hits         2279     2279           
  Misses         85       85           
  Partials      199      199           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.