chore(deps): update dependency syncpack to v15

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
syncpack	14.3.1 → 15.3.1

---

Release Notes

JamieMason/syncpack (syncpack)

v15.3.1

Compare Source

Bug Fixes

• types: update typescript types for 5.3.0 (82a435b)

v15.3.0

Compare Source

Features

• groups: add range only version group (a9d511a)
• update: only list selected updates in summary (63d17e5)

v15.2.0

Compare Source

Features

• config: allow autofix to be optionally disabled (d589d3e), closes #​325 #​216
• config: allow other .json files when explicitly set (5c83a60), closes #​333
• config: allow sources to append rather than replace (99cc046), closes #​205

Bug Fixes

• cargo: update dependencies (8aea6d1)
• glob: match globs and gitignore correctly (df700d8), closes #​334

v15.1.2

Compare Source

Bug Fixes

• npm: forward stdio correctly to binary (87be440)

v15.1.1

Compare Source

Features

• config: add updateGroups to set registry update policies (bd7573e), closes #​244
• update: add --interactive prompt (8b1334a)
• update: cache registry responses for 30mins (08bd28c)

Bug Fixes

• cargo: update dependencies (f99d54f)
• github: fix release pipeline (9a38e9e)

v15.0.0

Compare Source

⚠ BREAKING CHANGES

• pnpm: https://syncpack.dev/guide/migrate-v15/

pnpmOverrides now reads pnpm-workspace.yaml

The default pnpmOverrides dependency type now reads overrides from pnpm-workspace.yaml instead of pnpm.overrides in package.json. This matches pnpm's current convention for managing overrides.

Restoring the legacy behaviour

If your overrides still live in package.json under pnpm.overrides, define pnpmOverridesLegacy in your config to point at the legacy location:

{
  "customTypes": {
    "pnpmOverridesLegacy": {
      "strategy": "versionsByName",
      "path": "pnpm.overrides"
    }
  }
}

The default pnpmOverrides continues to manage the YAML location.

Features

• groups: add full pnpm/bun catalogs support (53d54e0), closes #​258
• pnpm: read pnpmOverrides from pnpm-workspace.yaml (72ce5ef), closes #​304
• update: add minimumReleaseAge and default to 1 day (a6648ab), closes #​302

Bug Fixes

• cargo: update dependencies (a375df4)
• cli: do not display --version and --help as errors (2abe490), closes #​331
• cli: fix panic when using --config option (76f1553), closes #​332
• config: prevent ERR_UNSUPPORTED_ESM_URL_SCHEME on Windows (127ae12), closes #​327 #​328
• core: widen detection of pnpm and bun projects (be883f5)
• npm: detect musl libc to resolve correct binary (89d5654), closes #​329
• rust: update edition from 2021 to 2024 (efad1b5)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	syncpack@​15.3.1

View full report