Bump dependencies and upgrade TypeScript to 6.0

[valuecodes]

What

• Add pnpm minimumReleaseAge: 20160 (14 days) so the lockfile cannot pull a freshly published version. Mitigates the typical npm supply-chain attack window.
• Bump 17 non-major dependencies, including jsdom 28 → 29. Held: eslint, @eslint/js, @vitejs/plugin-react, vite (plugin/peer compat work) and previously typescript.
• Upgrade TypeScript 5.9 → 6.0 across all 8 workspaces. Existing tsconfig already aligned with TS 6 defaults (target: es2023, module: ESNext, moduleResolution: Bundler, explicit types); typescript-eslint 8.58 supports TS 6.

How to test

pnpm install
pnpm typecheck
pnpm lint
pnpm test
pnpm build
pnpm format:check

Security review

• Dependencies: Broad upgrade. Supply chain hardened via 14-day release-age gate. pnpm audit --prod shows two open advisories whose patches are blocked by the new gate (hono < 4.12.14, fast-xml-parser < 5.7.0); both are <14 days old and exploit paths (hono/jsx SSR with attacker-controlled attribute names; fast-xml-parser XMLBuilder) are not used in this codebase.

[Copilot]

Pull request overview

This PR updates the monorepo’s tooling and application dependencies, including a TypeScript upgrade to v6, and adds a pnpm configuration intended to reduce exposure to newly published packages.

Changes:

• Upgrade TypeScript from 5.9.3 to 6.0.2 across workspaces and related tooling.
• Bump a set of dependencies (notably Vitest, Playwright, jsdom, Hono, Drizzle, Prettier, and @types/node) and regenerate pnpm-lock.yaml.
• Add minimumReleaseAge: 20160 to the pnpm workspace configuration.

Reviewed changes

Copilot reviewed 10 out of 11 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
tooling/prettier/package.json	Updates Prettier/tooling TypeScript and Node type versions used by the shared Prettier config workspace.
tooling/eslint/package.json	Updates eslint tooling dependencies, including @eslint/compat, typescript-eslint, TypeScript, Prettier, and Node types.
pnpm-workspace.yaml	Adds minimumReleaseAge configuration alongside existing workspace package globs.
pnpm-lock.yaml	Large lockfile refresh reflecting dependency bumps and TypeScript 6 upgrade.
packages/types/package.json	Updates dev tooling versions (Prettier/TypeScript/Vitest) for the @repo/types workspace.
packages/logger/package.json	Updates dev tooling versions (Prettier/TypeScript/Vitest) for the logger workspace.
packages/db/package.json	Bumps drizzle-orm and updates dev tooling versions (Prettier/TypeScript/Vitest).
package.json	Updates root Prettier version to match workspace tooling.
apps/ui/package.json	Bumps UI runtime deps (react/react-dom/motion) and dev tooling (Playwright, jsdom, Vitest, TypeScript, Node types, analyzer).
apps/jobs/package.json	Bumps runtime deps (drizzle-orm, fast-xml-parser) and dev tooling (TypeScript/Vitest/Prettier/Node types/drizzle-kit/wrangler).
apps/api/package.json	Bumps runtime deps (drizzle-orm, hono) and dev tooling (TypeScript/Vitest/Prettier/Node types/wrangler).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.