chore(deps): update dependency anymatch>picomatch to v4.0.7

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
anymatch>picomatch	4.0.5 → 4.0.7

---

Release Notes

micromatch/picomatch (anymatch>picomatch)

v4.0.7

Compare Source

Fixed

• Fixed terminal globstars in parenthesized patterns (#​142, e279bd7).

v4.0.6

Compare Source

Fixed

• scan() now scans the full pattern when tokens are requested, instead of merging the remaining path segments into the final token (#​62, 5f5819d).
• scan() now returns complete pattern parts, including leading and trailing empty segments, and handles nested and escaped parentheses correctly (#​58, f201165).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 2048ab3e-a872-4822-bcf2-c621a4bcdb14

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.13%. Comparing base (e347388) to head (6d87b8c).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #225   +/-   ##
=======================================
  Coverage   94.13%   94.13%           
=======================================
  Files          10       10           
  Lines         290      290           
  Branches      105      105           
=======================================
  Hits          273      273           
  Misses          1        1           
  Partials       16       16           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[timoa]

Renovate autopilot: skipped — CI gate failed. Required check 'Lint, Test, Build & Security' reported FAILURE on 2026-09-21. Diff is anymatch>picomatch 4.0.5→4.0.7 patch bump (lockfile + workspace only). Re-running the Lint job after the recent dependency changes may be needed; please investigate before retry/merge.

[timoa]

Blocked: Lint, Test, Build & Security check is failing. Renovate's own renovate/stability-days and other checks pass, but the bundled lint/test job is red. Skipping auto-merge until that gate goes green. Please triage (likely lint pipeline out of sync with current dependency lines, given multiple Renovate PRs show the same failure).

[timoa]

DevSecOps daily sweep (2026-09-24): Lint, Test, Build & Security FAILURE on this PR. Skipping. Will retry next sweep after CI is green.

[timoa]

DevSecOps daily sweep flagged this PR as skipped — CI failing.

Blocker: Lint, Test, Build & Security check is FAILURE on the latest run. Until that gate is green the autopilot will not approve or merge.

Likely root cause (seen across recent Renovate PRs in this repo): the Lint, Test, Build & Security job runs against the new lockfile and breaks when transitive deps (e.g. brace-expansion, picomatch, minimatch) cross a major boundary the toolchain does not yet handle. Triage: inspect the run log linked in the PR's Checks panel, then either rebase / retry, or pin Renovate to hold the major bump.

No auto-merge from autopilot.

[timoa]

CI gate failure: Lint, Test, Build & Security check FAILURE on this branch. Not eligible for auto-merge until CI is green. Files changed: pnpm-lock.yaml, pnpm-workspace.yaml. (autopilot TIM-376)

[timoa]

🤖 DevSecOps sweep: Lint, Test, Build & Security is FAILING on this PR. CI is not green, so this cannot be auto-merged. PR is MERGEABLE. No Renovate labels (security/patch/minor/major), so it does not qualify for auto-merge even if CI goes green — please triage the lint failure and merge manually once approved.