fix(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
@anatine/esbuild-decorators (source)	dependencies	pin	^0.2.19 → 0.2.19
@dagrejs/dagre	dependencies	pin	^1.1.8 → 1.1.8
@oclif/core	dependencies	pin	^3.27.0 → 3.27.0
@oclif/plugin-help	dependencies	pin	^6.2.36 → 6.2.36
@oclif/plugin-plugins	dependencies	pin	^5.4.54 → 5.4.54
chalk	dependencies	pin	^5.6.2 → 5.6.2
chokidar	dependencies	pin	^3.6.0 → 3.6.0
class-variance-authority	dependencies	pin	^0.7.1 → 0.7.1
clsx	dependencies	pin	^2.1.1 → 2.1.1
commander	dependencies	pin	^11.1.0 → 11.1.0
dagre	dependencies	pin	^0.8.5 → 0.8.5
esbuild-plugin-pino	dependencies	pin	^2.3.3 → 2.3.3
eslint (source)	dependencies	pin	^8.57.1 → 8.57.1
espree (source)	dependencies	pin	^9.6.1 → 9.6.1
express (source)	dependencies	pin	^4.22.1 → 4.22.1
glob	dependencies	pin	^10.5.0 → 10.5.0
handlebars (source)	dependencies	pin	^4.7.8 → 4.7.8
handlebars-utils	dependencies	pin	^1.0.6 → 1.0.6
hasha	dependencies	pin	^6.0.0 → 6.0.0
html-to-image	dependencies	pin	^1.11.13 → 1.11.13
http-proxy-agent (source)	dependencies	pin	^7.0.2 → 7.0.2
https-proxy-agent (source)	dependencies	pin	^7.0.6 → 7.0.6
jotai	dependencies	pin	^2.16.0 → 2.16.0
langium (source)	dependencies	pin	^2.1.3 → 2.1.3
node-fetch	dependencies	pin	^3.3.2 → 3.3.2
p-retry	dependencies	pin	^6.2.1 → 6.2.1
pino-pretty	dependencies	pin	^10.3.1 → 10.3.1
prettier (source)	dependencies	pin	^3.7.4 → 3.7.4
react-error-boundary (source)	dependencies	pin	^4.1.2 → 4.1.2
reactflow (source)	dependencies	pin	^11.11.4 → 11.11.4
tailwind-merge	dependencies	pin	^2.6.0 → 2.6.0
tempy	dependencies	pin	^3.1.0 → 3.1.0
tokio-stream (source)	dependencies	pin	0.1.15 → =0.1.15
tokio-util (source)	dependencies	pin	0.7.10 → =0.7.10
tonic	dependencies	pin	0.11.0 → =0.11.0
tonic-health	dependencies	pin	0.11.0 → =0.11.0
tonic-types	dependencies	pin	0.11.0 → =0.11.0
tonic-web	dependencies	pin	0.11.0 → =0.11.0
tower-http	dependencies	pin	0.5.2 → =0.5.2
tower-lsp-macros	dependencies	pin	0.9.0 → =0.9.0
tracing (source)	dependencies	pin	0.1.40 → =0.1.40
ts-morph	dependencies	pin	^20.0.0 → 20.0.0
ts-pattern	dependencies	pin	^5.9.0 → 5.9.0
vscode	dependencies	pin	^1.1.37 → 1.1.37
vscode-languageclient (source)	dependencies	pin	^9.0.1 → 9.0.1
vscode-languageserver (source)	dependencies	pin	^9.0.1 → 9.0.1
vscode-languageserver-textdocument (source)	dependencies	pin	^1.0.12 → 1.0.12
vscode-uri	dependencies	pin	^3.1.0 → 3.1.0
zod (source)	dependencies	pin	^3.25.76 → 3.25.76
zod-validation-error	dependencies	pin	^2.1.0 → 2.1.0

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path apps/engine/Cargo.toml --workspace
error: failed to load manifest for workspace member `/tmp/renovate/repos/github/storm-software/acidic/apps/engine`
referenced by workspace at `/tmp/renovate/repos/github/storm-software/acidic/Cargo.toml`

Caused by:
  failed to load manifest for dependency `acidic-config`

Caused by:
  failed to read `/tmp/renovate/repos/github/storm-software/acidic/crates/config/Cargo.toml`

Caused by:
  No such file or directory (os error 2)

[deepsource-io]

DeepSource Code Review

We reviewed changes in fb59a67...e6168a2 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		May 4, 2026 1:33a.m.	Review ↗
Shell		May 4, 2026 1:33a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report