From 8458a747eef66967d4af9283e61fd50b792a5876 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 19 Jun 2026 18:33:20 +0000
Subject: [PATCH 1/2] Update dependency serialize-javascript to v7.0.6

---
 client/pnpm-lock.yaml      | 14 +++++++-------
 client/pnpm-workspace.yaml |  9 +--------
 2 files changed, 8 insertions(+), 15 deletions(-)

diff --git a/client/pnpm-lock.yaml b/client/pnpm-lock.yaml
index 97d9b8d8a..853bd60aa 100644
--- a/client/pnpm-lock.yaml
+++ b/client/pnpm-lock.yaml
@@ -7,7 +7,7 @@ settings:
 overrides:
   ajv: 8.20.0
   minimatch: 10.2.5
-  serialize-javascript: 7.0.5
+  serialize-javascript: 7.0.6
   lodash: 4.18.1
   follow-redirects: 1.16.0
   flatted: 3.4.2
@@ -3908,8 +3908,8 @@ packages:
     resolution: {integrity: sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==}
     engines: {node: '>= 0.8.0'}
 
-  serialize-javascript@7.0.5:
-    resolution: {integrity: sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==}
+  serialize-javascript@7.0.6:
+    resolution: {integrity: sha512-ATTK5Q4gFVg0YDp1my2vqygyvhcklD/UV5GIlYHooGTn/NogJqIzpetkD6E5kmuVULqz/S9inUL25XcAgDRJQg==}
     engines: {node: '>=20.0.0'}
 
   serve-index@1.9.2:
@@ -6319,7 +6319,7 @@ snapshots:
   compression-webpack-plugin@12.0.0(webpack@5.107.2):
     dependencies:
       schema-utils: 4.3.3
-      serialize-javascript: 7.0.5
+      serialize-javascript: 7.0.6
       webpack: 5.107.2(postcss@8.5.15)(webpack-cli@7.0.3)
 
   compression@1.8.1:
@@ -6361,7 +6361,7 @@ snapshots:
       glob-parent: 6.0.2
       normalize-path: 3.0.0
       schema-utils: 4.3.3
-      serialize-javascript: 7.0.5
+      serialize-javascript: 7.0.6
       tinyglobby: 0.2.16
       webpack: 5.107.2(postcss@8.5.15)(webpack-cli@7.0.3)
 
@@ -6417,7 +6417,7 @@ snapshots:
       jest-worker: 30.4.1
       postcss: 8.5.14
       schema-utils: 4.3.3
-      serialize-javascript: 7.0.5
+      serialize-javascript: 7.0.6
       webpack: 5.107.2(postcss@8.5.15)(webpack-cli@7.0.3)
 
   css-select@4.3.0:
@@ -8468,7 +8468,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  serialize-javascript@7.0.5: {}
+  serialize-javascript@7.0.6: {}
 
   serve-index@1.9.2:
     dependencies:
diff --git a/client/pnpm-workspace.yaml b/client/pnpm-workspace.yaml
index cf23af572..f726f5941 100644
--- a/client/pnpm-workspace.yaml
+++ b/client/pnpm-workspace.yaml
@@ -1,10 +1,3 @@
-# pnpm v11 reads settings from this file rather than package.json's "pnpm"
-# section. We don't actually use pnpm workspaces — this file exists so
-# pnpm picks up project-wide settings (overrides, allowBuilds).
-
-# Allow @parcel/watcher's install script to run; it downloads a prebuilt
-# native binary used by sass/vitest for file watching. Without this entry,
-# pnpm fails the install on fresh machines (strictDepBuilds default).
 allowBuilds:
   '@parcel/watcher': true
 
@@ -14,7 +7,7 @@ allowBuilds:
 overrides:
   ajv: 8.20.0
   minimatch: 10.2.5
-  serialize-javascript: 7.0.5
+  serialize-javascript: 7.0.6
   lodash: 4.18.1
   follow-redirects: 1.16.0
   flatted: 3.4.2

From e1f21aa8af34e14451a47a4d29f29360413f267a Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 19 Jun 2026 18:33:44 +0000
Subject: [PATCH 2/2] chore: refresh SBOM after dependency update

---
 client/sbom/.lock-hash |  2 +-
 client/sbom/bom.json   | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/client/sbom/.lock-hash b/client/sbom/.lock-hash
index 5ed8f933e..d7773312a 100644
--- a/client/sbom/.lock-hash
+++ b/client/sbom/.lock-hash
@@ -1 +1 @@
-b4d387ffe2c524086cfafe5c598357fe2ec5e77620a50e16bfc8c5735a02cc87
+9c291890c795869e05e80c3f17a77e8a0d3707ea712b83b911d01b4d472ceef1
diff --git a/client/sbom/bom.json b/client/sbom/bom.json
index 9134b934b..cfccda076 100644
--- a/client/sbom/bom.json
+++ b/client/sbom/bom.json
@@ -15930,17 +15930,17 @@
     {
       "type": "library",
       "name": "serialize-javascript",
-      "version": "7.0.5",
-      "purl": "pkg:npm/serialize-javascript@7.0.5",
-      "bom-ref": "pkg:npm/serialize-javascript@7.0.5",
+      "version": "7.0.6",
+      "purl": "pkg:npm/serialize-javascript@7.0.6",
+      "bom-ref": "pkg:npm/serialize-javascript@7.0.6",
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.0.5.tgz",
+          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.0.6.tgz",
           "hashes": [
             {
               "alg": "SHA-512",
-              "content": "1782dc07452a525d7312babed676041334872672306f7005d97581f786fe69f86b7a43948a3c28a0062a17245b8d8926d8f00a05a6f1ea862fff10f1362f0807"
+              "content": "0134cae50e20155834603a759b2dafab2832be1724943fd45791889581e8a064e7fcda2026a233a5eb640fa139926b9550bab3fd2f629d42f6e5770080344942"
             }
           ]
         }
@@ -20084,7 +20084,7 @@
       "ref": "pkg:npm/compression-webpack-plugin@12.0.0",
       "dependsOn": [
         "pkg:npm/schema-utils@4.3.3",
-        "pkg:npm/serialize-javascript@7.0.5"
+        "pkg:npm/serialize-javascript@7.0.6"
       ]
     },
     {
@@ -22613,7 +22613,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/serialize-javascript@7.0.5",
+      "ref": "pkg:npm/serialize-javascript@7.0.6",
       "dependsOn": []
     },
     {