chore(deps): batch-consolidate patch/minor/security Renovate updates (#1033)

* fix(deps): update actions/checkout action to v6.1.0

* fix(deps): update pnpm/action-setup action to v4.4.0

* fix(deps): update dependency tsx to v4.23.11

* fix(deps): update dependency prettier to v3.9.6

* fix(deps): update dependency @commercetools/platform-sdk to v8.27.0

* fix(deps): update dependency @babel/runtime to v7.29.7

* fix(deps): update dependency @babel/runtime-corejs3 to v7.29.7

* fix(deps): update dependency @commercetools-frontend/babel-preset-mc-app to v24.13.0

* fix(deps): update dependency @commercetools-frontend/eslint-config-mc-app to v24.13.0

* fix(deps): update dependency @commercetools-frontend/mc-scripts to v24.13.0

* fix(deps): update dependency squirrelly to v9.1.1

* fix(deps): update dependency @types/lodash to v4.17.25

* fix(deps): update dependency @preconstruct/cli to v2.8.13

* fix(deps): update dependency babel-plugin-module-resolver to v5.0.3

* fix(deps): update dependency dotenv to v17.4.2

* fix(deps): update dependency lodash to v4.18.1 [security]

* fix(deps): update dependency @babel/core to v7.29.6 [security]

* chore(deps): regenerate lockfile

* fix(deps): update dependency jest to v30.4.2

* fix(deps): update dependency jest-fail-on-console to v3.3.4

* fix(deps): update dependency @types/node to v24.13.3

* fix(deps): update dependency @changesets/changelog-github to v0.7.0

* fix(deps): update dependency @changesets/cli to v2.31.1

* fix(deps): update dependency @faker-js/faker to v10.5.0

* fix(deps): update actions/setup-node action to v6.5.0

* chore(deps): regenerate lockfile

* fix(cart-discount): add missing recurringOrderScope generator to keep up with platform-sdk 8.27.0 types

CartDiscount now requires recurringOrderScope (RecurringOrderScope union:
AnyOrder | ApplicableRecurrencePolicies | NonRecurringOrdersOnly |
RecurringOrdersOnly). Mirrors the existing 'value' field's arrayElement
pattern to vary across the union, building a real recurrence-policy
reference for the ApplicableRecurrencePolicies variant.

* fix(cart): add missing purchaseOrderNumber, freezeStrategy, lock, warnings, reservation generators to keep up with platform-sdk 8.27.0 types

- CartDraft/Cart: purchaseOrderNumber (string, mirrors the order model's
  existing generator pattern).
- Cart: freezeStrategy (new FreezeStrategy enum, no GraphQL equivalent yet
  so values are declared manually against the SDK type, matching the
  precedent in cart-discount-value-absolute/constants.ts), lock (optional
  CartLock, defaults to null like sibling rarely-populated fields), warnings
  (optional WarningObject[], defaults to empty array like sibling arrays).
- LineItem: reservation (optional ReservationReference), generated the same
  way as the sibling supplyChannel/distributionChannel reference fields.

* fix(customer): add missing customerGroupAssignments generator to keep up with platform-sdk 8.27.0 types

Customer now requires customerGroupAssignments (CustomerGroupAssignment[]),
the new multi-group replacement for the single customerGroup field. Defaults
to an empty array, mirroring the existing customerGroup: null default (no
group assigned by default).

* fix(inventory-entry): add missing reservationExpirationInMinutes, stockLevels generators to keep up with platform-sdk 8.27.0 types

Both InventoryEntry and InventoryEntryDraft now require
reservationExpirationInMinutes and stockLevels (InventoryEntryStockLevels).
Both are optional in the SDK type and rarely populated, so the REST configs
default them to null, matching the GraphQL configs which already set the
same defaults for these fields.

* fix(project): add missing discounts, inventory generators to keep up with platform-sdk 8.27.0 types

Project now requires discounts (DiscountsConfiguration) and inventory
(InventoryConfiguration), both previously optional/absent. Generated as
real nested config objects (discountCombinationMode via oneOf over the
BestDeal/Stacking enum, inventory's reservationExpirationInMinutes/
releaseExpiredReservations via faker), matching the existing
cdnContainerConfiguration inline-object precedent in this file rather than
defaulting to null.

Author: ByronDWall

.github/workflows/main.yml

@@ -11,16 +11,16 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
 
       - name: Install pnpm
-        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         id: pnpm-install
         with:
           run_install: false
 
       - name: Setup Node (uses version in .nvmrc)
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: '.nvmrc'
           cache: 'pnpm'

.github/workflows/pull-request.yml

@@ -9,7 +9,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           fetch-depth: 0
 
@@ -18,13 +18,13 @@ jobs:
           git checkout -
 
       - name: Install pnpm
-        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         id: pnpm-install
         with:
           run_install: false
 
       - name: Setup Node (uses version in .nvmrc)
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: '.nvmrc'
           cache: 'pnpm'

.github/workflows/release.yml

@@ -23,21 +23,21 @@ jobs:
           private_key: ${{ secrets.CT_CHANGESETS_APP_PEM }}
 
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           # Pass a personal access token (using our `ct-changesets` app) to be able to trigger other workflows
           # https://help.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
           # https://github.community/t/action-does-not-trigger-another-on-push-tag-action/17148/8
           token: ${{ steps.generate_github_token.outputs.token }}
 
       - name: Install pnpm
-        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         id: pnpm-install
         with:
           run_install: false
 
       - name: Setup Node (uses version in .nvmrc)
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: '.nvmrc'
           cache: 'pnpm'

generators/package.json

@@ -17,16 +17,16 @@
   "keywords": ["javascript", "typescript", "test-data"],
   "license": "MIT",
   "dependencies": {
-    "@babel/runtime": "7.28.4",
-    "@babel/runtime-corejs3": "7.28.4",
+    "@babel/runtime": "7.29.7",
+    "@babel/runtime-corejs3": "7.29.7",
     "@manypkg/find-root": "3.1.0",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "prompts": "2.4.2",
-    "squirrelly": "9.1.0",
-    "tsx": "4.21.0"
+    "squirrelly": "9.1.1",
+    "tsx": "4.23.11"
   },
   "devDependencies": {
-    "@types/lodash": "4.17.21",
+    "@types/lodash": "4.17.25",
     "@types/mustache": "4.2.6",
     "@types/prompts": "2.4.9"
   }

package.json

@@ -28,12 +28,12 @@
     "generate-model": "pnpm --filter @commercetools-test-data/generators generate"
   },
   "dependencies": {
-    "@babel/core": "7.29.0",
-    "@changesets/changelog-github": "0.5.2",
-    "@changesets/cli": "2.29.8",
-    "@commercetools-frontend/babel-preset-mc-app": "24.12.0",
-    "@commercetools-frontend/eslint-config-mc-app": "24.12.0",
-    "@commercetools-frontend/mc-scripts": "24.12.0",
+    "@babel/core": "7.29.6",
+    "@changesets/changelog-github": "0.7.0",
+    "@changesets/cli": "2.31.1",
+    "@commercetools-frontend/babel-preset-mc-app": "24.13.0",
+    "@commercetools-frontend/eslint-config-mc-app": "24.13.0",
+    "@commercetools-frontend/mc-scripts": "24.13.0",
     "@commitlint/cli": "19.8.1",
     "@commitlint/config-conventional": "19.8.1",
     "@graphql-codegen/add": "5.0.3",
@@ -45,26 +45,26 @@
     "@graphql-codegen/typescript-resolvers": "4.5.2",
     "@manypkg/cli": "0.25.1",
     "@manypkg/find-root": "3.1.0",
-    "@preconstruct/cli": "2.8.12",
+    "@preconstruct/cli": "2.8.13",
     "@types/jest": "29.5.14",
-    "@types/node": "24.10.9",
+    "@types/node": "24.13.3",
     "babel-jest": "29.7.0",
-    "babel-plugin-module-resolver": "5.0.2",
+    "babel-plugin-module-resolver": "5.0.3",
     "cross-env": "10.1.0",
-    "dotenv": "17.2.3",
+    "dotenv": "17.4.2",
     "eslint": "8.57.1",
     "eslint-formatter-pretty": "5.0.0",
     "find-up": "7.0.0",
     "husky": "9.1.7",
-    "jest": "30.2.0",
+    "jest": "30.4.2",
     "jest-extended": "6.0.0",
-    "jest-fail-on-console": "3.3.3",
+    "jest-fail-on-console": "3.3.4",
     "jest-runner-eslint": "2.3.0",
     "jest-silent-reporter": "0.6.0",
     "jest-watch-typeahead": "2.2.2",
     "lint-staged": "15.5.2",
-    "prettier": "3.7.4",
-    "prettier-jest": "npm:prettier@3.7.4",
+    "prettier": "3.9.6",
+    "prettier-jest": "npm:prettier@3.9.6",
     "tsc-files": "1.1.4",
     "typescript": "5.9.3"
   },