chore(deps): weekly dependency update weekly dependency update (2026-07-31)

[github-actions]

Caution

Protected files were modified in this change.
This pull request is in request_review mode and requires explicit human scrutiny before merge.

Protected files: pnpm-lock.yaml

Weekly catalog refresh for 2026-07-31.

Fix applied (out-of-allowlist): pnpm-workspace.yaml — nock catalog pin

The weekly update bumped nock from 14.0.16 → 15.0.0, but 15.0.0 ships @mswjs/interceptors@0.39.8 whose fetch bypass path clones an already-consumed request body and throws TypeError: unusable on any fetch POST-with-body to an enableNetConnect-allowed host. The upstream marked 15.0.0 as deprecated ("released accidentally"); the stabilized fix is in a beta still inside the 7-day soak window.

The fleet catalog in .config/fleet/pnpm-workspace.fleet.yaml already documents this pin at 14.0.16; pnpm-workspace.yaml is aligned to match. The nock-loopback-passthrough regression guard exists specifically to red-drive any future bump until the stabilized 15.x ships.

Files changed:

• pnpm-workspace.yaml — nock pin reverted to 14.0.16 with comment linking the fleet rationale
• pnpm-lock.yaml — lockfile regenerated

Test result: 9 test files, 62 tests, all green.

Warning

Firewall blocked 3 domains

The following domains were blocked by the firewall during workflow execution:

• api.refero.design
• mcp.linear.app
• mcp.notion.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.refero.design"
    - "mcp.linear.app"
    - "mcp.notion.com"

See Network Configuration for more information.

Generated by 🟢 Get Green · sonnet46 · 112.6 AIC · ⌖ 33.2 AIC · ⊞ 6.4K · ◷

---

Note

This was originally intended as a pull request, but the git push operation failed.

Original error: pushSignedCommits: refusing unsigned push for branch 'deps/weekly-update-2026-07-31-389903b79a0499b0': Signed-commit payload violates file-protection policy (request_review): pnpm-lock.yaml

Workflow Run: View run details and download bundle artifact

The bundle file is available in the agent artifact in the workflow run linked above.

To create a pull request with the changes:

# Download the artifact from the workflow run
gh run download 30619299746 -n agent -D /tmp/agent-30619299746

# Fetch the bundle into a temporary ref, then update the local branch
git fetch /tmp/agent-30619299746/aw-deps-weekly-update-2026-07-31.bundle refs/heads/deps/weekly-update-2026-07-31:refs/bundles/create-pr-deps-weekly-update-2026-07-31-389903b79a0499b0-fe1451f0
git update-ref refs/heads/deps/weekly-update-2026-07-31-389903b79a0499b0 refs/bundles/create-pr-deps-weekly-update-2026-07-31-389903b79a0499b0-fe1451f0
git checkout deps/weekly-update-2026-07-31-389903b79a0499b0
# Ensure the working tree matches the updated branch
git reset --hard
# Remove the temporary bundle ref
git update-ref -d refs/bundles/create-pr-deps-weekly-update-2026-07-31-389903b79a0499b0-fe1451f0

# Push the branch to origin
git push origin deps/weekly-update-2026-07-31-389903b79a0499b0

# Create the pull request
gh pr create --title 'chore(deps): weekly dependency update weekly dependency update (2026-07-31)' --base main --head deps/weekly-update-2026-07-31-389903b79a0499b0 --repo SocketDev/socket-vscode