[mumenthalers]

closes #89

[Copilot]

Copilot review overview

🟡 Changes recommended

The release-age safeguard is unsupported by the declared minimum npm version.

Review effort: Balanced
Findings: 1

Open (1)

• Require npm 11.10.0+ for min-release-age enforcement · New

What changed in this PR

Updates the monorepo and publish helper to Lerna 10 to reduce dependency risks.

Changes:

• Upgrades Lerna to 10.0.1.
• Adds npm funding and release-age settings.

File	Description
package.json	Upgrades root Lerna dependency.
packages/​publish-helper/​package.json	Requires Lerna 10 as a peer.
.npmrc	Configures npm funding and release-age behavior.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🟢 Approval recommended

The dependency upgrade and associated test and npm configuration changes are coherent with the stated goal.

Review effort: Balanced
Findings: None

Resolved since last review (1)

• Require npm 11.10.0+ for min-release-age enforcement

[Copilot]

Copilot review overview

🟡 Changes recommended

The declared and tested Node 25 support conflicts with Lerna 10’s supported Node versions.

Review effort: Balanced
Findings: 1

Open (1)

• CI and root engine allow unsupported Node 25 for Lerna 10 · New

Previously missed (1)

In code that hasn't changed since last review

Package Node engine range conflicts with Lerna 10 requirements

packages/​publish-helper/​package.json:33

This peer dependency makes Lerna 10 part of the publish helper's runtime contract, but the package still advertises Node >=24.10.2, including unsupported Node 25. Consumers enforcing engines cannot satisfy that advertised runtime together with Lerna 10's ^22.13.0 || ^24.0.0 || ^26.0.0 requirement. Narrow this package's Node engine to the supported majors.

[Copilot]

🔵 Needs a closer look

The cross-cutting compiler, test-runner, package-manager, and CI upgrades warrant human validation of the complete CI and publishing flow.

0 open findings

1 resolved since last review

• CI and root engine allow unsupported Node 25 for Lerna 10

🧠 Review effort: Balanced

[Copilot]

🔵 Needs a closer look

Multiple major toolchain upgrades and repository-wide compiler changes warrant final human validation.

0 open findings

🧠 Review effort: Balanced

[Copilot]

One or more custom setup steps configured for this repository failed during this Copilot code review run:

GitHub registry Auth & Install Dependencies

Setup steps run before each review. If the review above is missing context, or no review was posted at all, the failing step above may be the cause. See the workflow run for failure details, fix your setup steps configuration, and re-request a review.

Note

You can configure setup steps for Copilot code review separately from Copilot cloud agent with a copilot-code-review.yml file. Read the docs for details.

[Copilot]

🟡 Changes recommended

The stale lint-staged lockfile entry causes both CI jobs to fail during npm ci.

1 open finding

• Update package-lock.json for lint-staged dependency upgrade · New

🧠 Review effort: Balanced

[Copilot]

🔵 Needs a closer look

Repository-wide major tooling upgrades and release configuration changes warrant final human validation.

1 open finding

• Update package-lock.json for lint-staged dependency upgrade

🧠 Review effort: Balanced

[Copilot]

🟢 Approval recommended

The lockfile is synchronized and the upgraded test, lint, build, and publishing workflow passed on Node.js 24 and 26.

1 open finding

• Update package-lock.json for lint-staged dependency upgrade

🧠 Review effort: Balanced