chore: keep Renovate updates self-contained

[electrohyun]

Summary

Group packageManager updates with the existing weekly dev-tooling stream so pnpm and compatible development-tool updates arrive together.

Stop recording pnpm in the generated public-surface inventory because it does not affect Socket.IO declaration extraction. Keep the pinned TypeScript version as the relevant extractor metadata, and document the distinction.

Related issue

Closes #479.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
smocket	Ready	Preview	Sep 3, 2026 2:38am UTC

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: fe183be7-d719-4520-b8d5-ab90d3d98025

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[renovate]

Reconfigure PR Results

This is a reconfigure PR comment to help you understand and re-configure your Renovate settings. If this Reconfigure PR were to be merged, we'd expect to see the following outcome:

---

Detected Package Files

• .github/workflows/ci.yml (github-actions)
• .github/workflows/pr-label.yml (github-actions)
• .github/workflows/published-consumer.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• package.json (npm)
• packages/smocket-client/package.json (npm)
• pnpm-workspace.yaml (npm)
• scripts/fixtures/unused-runtime-dependency/dependency/package.json (npm)
• scripts/fixtures/unused-runtime-dependency/package.json (npm)
• website/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs
• Enable Renovate Dependency Dashboard creation.

---

What to Expect

With your current configuration, Renovate will create 3 Pull Requests:

chore: update dependency @​types/node to v26.4.1

• Schedule: ["before 6am on monday"]
• Branch name: renovate/patch-dev-tooling
• Merge into: main
• Upgrade @types/node to 26.4.1

chore: update dependency typescript-eslint to v8.69.0

• Schedule: ["before 6am on monday"]
• Branch name: renovate/dev-tooling
• Merge into: main
• Upgrade typescript-eslint to 8.69.0

chore: update dependency nanoid@<3.3.18 to v6

• Schedule: ["at any time"]
• Branch name: renovate/nanoid-3.3.18-6.x
• Merge into: main
• Upgrade nanoid@<3.3.18 to 6.0.1

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.