chore(deps): lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am on tuesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
liam-app	Ready	Preview	Aug 14, 2026 10:19pm
liam-assets	Ready	Preview	Aug 14, 2026 10:19pm
liam-docs	Ready	Preview	Aug 14, 2026 10:19pm
liam-erd-sample	Ready	Preview	Aug 14, 2026 10:19pm
liam-storybook	Ready	Preview	Aug 14, 2026 10:19pm

[giselles-ai]

Finished running flow.

Step 1
🟢	On Pull Request Opened Status: Success Updated: Nov 11, 2025 2:09am
Step 2
🟢	gpt-5 Status: Success Updated: Nov 11, 2025 2:11am
Step 3
🟢	Create Pull Request Comment Status: Success Updated: Nov 11, 2025 2:11am

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[giselles-ai]

Check changeset necessity

Status: NOT REQUIRED

Reason:

• Only pnpm-lock.yaml was updated by Renovate; there are no source, API, or behavior changes.
• No changes to the targeted packages: @liam-hq/cli, @liam-hq/erd-core, @liam-hq/schema, @liam-hq/ui (no package.json or code modifications).
• This is lockfile/dependency maintenance, which is explicitly non-user-facing per the guide.
• No new features, bug fixes, or performance/behavioral changes that would require a version bump.

Changeset (copy & paste):

<!-- No changeset required: lockfile-only maintenance with no user-facing changes. -->

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 14 packages with OpenSSF Scorecard issues.

View full job summary