Chore/20260119

[SvenVw]

Summary by CodeRabbit

• Chores
  • Updated package manager to pnpm 10.28.1 across CI/CD workflows and project configuration
  • Updated dependencies and development tools to latest stable versions across the monorepo

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5f4cee0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Walkthrough

This PR updates pnpm from version 10.26.0 to 10.28.1 across GitHub Actions workflows and all workspace package manifests, and bumps multiple dependencies in individual packages.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflows - pnpm Action Update .github/workflows/deploy-docs-test.yml, .github/workflows/deploy-docs.yml, .github/workflows/release.yml, .github/workflows/tests.yml, .github/workflows/typecheck.yml	Updated pnpm setup action version from 10.26.0 to 10.28.1 across all workflows (5 occurrences total). No changes to workflow logic or steps.
Root & Workspace Package Manager package.json, pnpm-workspace.yaml	Updated pnpm version to 10.28.1. Root package.json also adds protobufjs to onlyBuiltDependencies and bumps @biomejs/biome (2.3.10→2.3.11) and turbo (2.6.3→2.7.5). Workspace dev dependencies bumped: @types/node, @vitest/coverage-v8, better-auth, rollup, typedoc, vite, vitest.
fdm-app Package fdm-app/package.json	Updated pnpm to 10.28.1 and bumped 16 dependencies including @react-email/components, @sentry/* packages, @turf/* packages, framer-motion, maplibre-gl, postgres, posthog-js, posthog-node, react-hook-form, remix-toast (major: 3.4.0→4.0.0), zustand, and dev dependencies.
fdm-docs Package fdm-docs/package.json	Updated pnpm to 10.28.1, bumped react and react-dom (19.2.0→19.2.3), lucide-react (0.552.0→0.562.0), and dev dependency markdownlint-cli2 (0.19.1→0.20.0).
fdm-calculator Package fdm-calculator/package.json	Updated pnpm to 10.28.1 and bumped postgres dev dependency (3.4.7→3.4.8).
fdm-core Package fdm-core/package.json	Updated pnpm to 10.28.1 and bumped dev dependencies fs-extra (11.3.2→11.3.3) and globals (16.5.0→17.0.0), and dependencies @electric-sql/pglite (0.3.14→0.3.15) and postgres (3.4.7→3.4.8).
fdm-data Package fdm-data/package.json	Updated pnpm to 10.28.1 only.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~15 minutes

Possibly related PRs

• Chore/20250918 #271: Updates pnpm version in CI workflows and packageManager fields to a different target version
• Update dependencies to address CVE-2025-55182 #364: Modifies package manifests with dependency version bumps across the same workspace packages
• Patch for CVE-2025-15284 #399: Updates overlapping dependencies in fdm-app/package.json (react-email, sentry, posthog, react-hook-form)

Suggested labels

fdm-app, fdm-core, fdm-data, fdm-calculator, fdm-docs, dependencies, branch:development

Suggested reviewers

• gerardhros
• BoraIneviNMI

Poem

🐰 Hop along to version new,
Pnpm jumps from 10.26 to .28-oo!
Dependencies dance with updates bright,
turbo spins and remix takes flight ✨
A monorepo's waltz, a package delight!

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'Chore/20260119' is vague and generic, using a date-based naming convention that provides no meaningful information about what the pull request actually does.	Replace the generic title with a descriptive summary of the main changes, such as 'Chore: update pnpm to 10.28.1 and bump dependencies' or 'Chore: update dependencies and pnpm version'.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch chore/20260119

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.04%. Comparing base (db88422) to head (5f4cee0).
⚠️ Report is 6 commits behind head on development.

Additional details and impacted files

@@             Coverage Diff              @@
##           development     #423   +/-   ##
============================================
  Coverage        88.04%   88.04%           
============================================
  Files               91       91           
  Lines             4591     4591           
  Branches          1468     1468           
============================================
  Hits              4042     4042           
  Misses             549      549           

Flag	Coverage Δ
fdm-calculator	88.67% <ø> (ø)
fdm-core	86.81% <ø> (ø)
fdm-data	92.12% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.