[jaredwray]

Please check if the PR fulfills these requirements

• Followed the Contributing and Code of Conduct guidelines.
• Tests for the changes have been added (for bug fixes/features) with 100% code coverage.

What kind of change does this PR introduce? Maintenance (package manager upgrade). No source changes, so no new tests. The existing suite still passes at 100% statement, branch, function, and line coverage.

Summary

Upgrade the root packageManager field from pnpm@12.4.1 to pnpm@12.13.0. pnpm is not a devDependency, so the target is the newest stable release published at least 7 days ago. 12.13.0 was published on 2026-10-13. 12.14.0 and 12.15.0 are inside the 7-day window and were not selected. corepack use pnpm@12.13.0 wrote the version and the integrity hash.

Changes

• packageManager pnpm@12.4.1+sha512… → pnpm@12.13.0+sha512…
• Lockfile packageManagerDependencies and the @pnpm/exe.* packages move from 12.4.1 to 12.13.0

Artifact diffs

• pnpm 12.4.1 → 12.13.0

Verification

• corepack use pnpm@12.13.0 rewrote the field with an integrity hash
• pnpm --version is 12.13.0
• pnpm build passes (Node 22.22.2)
• pnpm test passes (318 tests, 100% coverage)

Test plan

1. corepack use pnpm@12.13.0
2. pnpm build && pnpm test

  

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-21T19:40:32.850219Z	598b815	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (3d50d0a) to head (598b815).

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #223   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            5         5           
  Lines          434       434           
  Branches       110       110           
=========================================
  Hits           434       434           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 598b815e5c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Update the recorded pnpm pin

After this line changes to 12.13.0, DEFENSE_IN_DEPTH.md:20 still identifies 12.4.1 and its old hash as the verified pin. Update that audit record so security checks and maintainers do not use a value that conflicts with package.json.

Useful? React with 👍 / 👎.