chore(workspace): expand pnpm catalog with all dependencies

Migrate all devDependencies to use pnpm workspace catalog references
instead of hardcoded versions. This centralizes version management in
pnpm-workspace.yaml, making dependency updates easier and more consistent
across all packages.

Changes:
- Add 140+ dependency versions to pnpm-workspace.yaml catalog
- Convert package.json dependencies from explicit versions to catalog:
- Update pnpm-lock.yaml to reflect catalog usage

Benefits:
- Single source of truth for dependency versions
- Easier to update dependencies across the monorepo
- Reduces version drift between packages

Author: jdalton

package.json

@@ -3,152 +3,152 @@
   "version": "0.0.0",
   "private": true,
   "devDependencies": {
-    "@babel/core": "7.28.4",
+    "@babel/core": "catalog:",
     "@babel/parser": "catalog:",
-    "@babel/plugin-proposal-export-default-from": "7.27.1",
-    "@babel/plugin-transform-export-namespace-from": "7.27.1",
-    "@babel/plugin-transform-runtime": "7.28.3",
-    "@babel/preset-react": "7.27.1",
-    "@babel/preset-typescript": "7.27.1",
-    "@babel/runtime": "7.28.4",
-    "@babel/traverse": "7.28.4",
-    "@biomejs/biome": "2.2.4",
-    "@coana-tech/cli": "14.12.51",
-    "@cyclonedx/cdxgen": "11.10.0",
-    "@dotenvx/dotenvx": "1.49.0",
-    "@eslint/compat": "1.3.2",
-    "@eslint/js": "9.35.0",
-    "@npmcli/arborist": "9.1.4",
-    "@npmcli/config": "10.4.0",
-    "@octokit/graphql": "9.0.1",
-    "@octokit/openapi-types": "25.1.0",
-    "@octokit/request-error": "7.0.0",
-    "@octokit/rest": "22.0.0",
-    "@octokit/types": "14.1.0",
-    "@pnpm/dependency-path": "1001.1.0",
-    "@pnpm/lockfile.detect-dep-types": "1001.0.13",
-    "@pnpm/lockfile.fs": "1001.1.17",
-    "@pnpm/logger": "1001.0.0",
-    "@socketregistry/hyrious__bun.lockb": "1.0.19",
-    "@socketregistry/indent-string": "1.0.14",
-    "@socketregistry/is-interactive": "1.0.6",
+    "@babel/plugin-proposal-export-default-from": "catalog:",
+    "@babel/plugin-transform-export-namespace-from": "catalog:",
+    "@babel/plugin-transform-runtime": "catalog:",
+    "@babel/preset-react": "catalog:",
+    "@babel/preset-typescript": "catalog:",
+    "@babel/runtime": "catalog:",
+    "@babel/traverse": "catalog:",
+    "@biomejs/biome": "catalog:",
+    "@coana-tech/cli": "catalog:",
+    "@cyclonedx/cdxgen": "catalog:",
+    "@dotenvx/dotenvx": "catalog:",
+    "@eslint/compat": "catalog:",
+    "@eslint/js": "catalog:",
+    "@npmcli/arborist": "catalog:",
+    "@npmcli/config": "catalog:",
+    "@octokit/graphql": "catalog:",
+    "@octokit/openapi-types": "catalog:",
+    "@octokit/request-error": "catalog:",
+    "@octokit/rest": "catalog:",
+    "@octokit/types": "catalog:",
+    "@pnpm/dependency-path": "catalog:",
+    "@pnpm/lockfile.detect-dep-types": "catalog:",
+    "@pnpm/lockfile.fs": "catalog:",
+    "@pnpm/logger": "catalog:",
+    "@socketregistry/hyrious__bun.lockb": "catalog:",
+    "@socketregistry/indent-string": "catalog:",
+    "@socketregistry/is-interactive": "catalog:",
     "@socketregistry/packageurl-js": "catalog:",
-    "@socketregistry/yocto-spinner": "1.0.25",
+    "@socketregistry/yocto-spinner": "catalog:",
     "@socketsecurity/config": "catalog:",
-    "@socketsecurity/lib": "3.2.4",
+    "@socketsecurity/lib": "catalog:",
     "@socketsecurity/registry": "catalog:",
     "@socketsecurity/sdk": "catalog:",
-    "@types/cmd-shim": "5.0.2",
-    "@types/ink": "2.0.3",
-    "@types/js-yaml": "4.0.9",
-    "@types/micromatch": "4.0.9",
-    "@types/mock-fs": "4.13.4",
+    "@types/cmd-shim": "catalog:",
+    "@types/ink": "catalog:",
+    "@types/js-yaml": "catalog:",
+    "@types/micromatch": "catalog:",
+    "@types/mock-fs": "catalog:",
     "@types/node": "catalog:",
-    "@types/npm-package-arg": "6.1.4",
-    "@types/npmcli__arborist": "6.3.1",
-    "@types/npmcli__config": "6.0.3",
-    "@types/proc-log": "3.0.4",
-    "@types/react": "19.2.2",
-    "@types/semver": "7.7.1",
-    "@types/which": "3.0.4",
-    "@types/yargs-parser": "21.0.3",
-    "@typescript-eslint/parser": "8.44.1",
-    "@vitest/coverage-v8": "4.0.3",
-    "@yao-pkg/pkg": "6.8.0",
-    "browserslist": "4.25.4",
-    "chalk-table": "1.0.2",
-    "cmd-shim": "7.0.0",
-    "del-cli": "6.0.0",
-    "dev-null-cli": "2.0.0",
+    "@types/npm-package-arg": "catalog:",
+    "@types/npmcli__arborist": "catalog:",
+    "@types/npmcli__config": "catalog:",
+    "@types/proc-log": "catalog:",
+    "@types/react": "catalog:",
+    "@types/semver": "catalog:",
+    "@types/which": "catalog:",
+    "@types/yargs-parser": "catalog:",
+    "@typescript-eslint/parser": "catalog:",
+    "@vitest/coverage-v8": "catalog:",
+    "@yao-pkg/pkg": "catalog:",
+    "browserslist": "catalog:",
+    "chalk-table": "catalog:",
+    "cmd-shim": "catalog:",
+    "del-cli": "catalog:",
+    "dev-null-cli": "catalog:",
     "esbuild": "catalog:",
-    "eslint": "9.35.0",
-    "eslint-import-resolver-typescript": "4.4.4",
-    "eslint-plugin-import-x": "4.16.1",
-    "eslint-plugin-n": "17.21.3",
-    "eslint-plugin-sort-destructure-keys": "2.0.0",
-    "eslint-plugin-unicorn": "56.0.1",
-    "fast-glob": "3.3.3",
-    "globals": "16.4.0",
-    "hpagent": "1.2.0",
-    "husky": "9.1.7",
-    "ignore": "7.0.5",
-    "ink": "6.3.1",
-    "ink-table": "3.1.0",
-    "js-yaml": "npm:@zkochan/js-yaml@0.0.10",
-    "lint-staged": "16.1.6",
+    "eslint": "catalog:",
+    "eslint-import-resolver-typescript": "catalog:",
+    "eslint-plugin-import-x": "catalog:",
+    "eslint-plugin-n": "catalog:",
+    "eslint-plugin-sort-destructure-keys": "catalog:",
+    "eslint-plugin-unicorn": "catalog:",
+    "fast-glob": "catalog:",
+    "globals": "catalog:",
+    "hpagent": "catalog:",
+    "husky": "catalog:",
+    "ignore": "catalog:",
+    "ink": "catalog:",
+    "ink-table": "catalog:",
+    "js-yaml": "catalog:",
+    "lint-staged": "catalog:",
     "magic-string": "catalog:",
-    "micromatch": "4.0.8",
-    "mock-fs": "5.5.0",
-    "nanotar": "0.2.0",
-    "nock": "14.0.10",
-    "npm-package-arg": "13.0.0",
-    "npm-run-all2": "8.0.4",
-    "open": "10.2.0",
-    "pony-cause": "2.1.11",
+    "micromatch": "catalog:",
+    "mock-fs": "catalog:",
+    "nanotar": "catalog:",
+    "nock": "catalog:",
+    "npm-package-arg": "catalog:",
+    "npm-run-all2": "catalog:",
+    "open": "catalog:",
+    "pony-cause": "catalog:",
     "postject": "catalog:",
-    "react": "19.2.0",
-    "react-reconciler": "0.33.0",
-    "registry-auth-token": "5.1.0",
-    "registry-url": "7.2.0",
+    "react": "catalog:",
+    "react-reconciler": "catalog:",
+    "registry-auth-token": "catalog:",
+    "registry-url": "catalog:",
     "semver": "catalog:",
-    "ssri": "12.0.0",
-    "synp": "1.9.14",
-    "taze": "19.6.0",
-    "terminal-link": "2.1.1",
-    "trash": "10.0.0",
-    "type-coverage": "2.29.7",
-    "typescript-eslint": "8.44.1",
-    "unplugin-purge-polyfills": "0.1.0",
-    "vitest": "4.0.3",
-    "yaml": "2.8.1",
-    "yargs-parser": "21.1.1",
-    "yoctocolors-cjs": "2.1.3",
-    "yoga-layout": "3.2.1",
-    "zod": "4.1.8"
+    "ssri": "catalog:",
+    "synp": "catalog:",
+    "taze": "catalog:",
+    "terminal-link": "catalog:",
+    "trash": "catalog:",
+    "type-coverage": "catalog:",
+    "typescript-eslint": "catalog:",
+    "unplugin-purge-polyfills": "catalog:",
+    "vitest": "catalog:",
+    "yaml": "catalog:",
+    "yargs-parser": "catalog:",
+    "yoctocolors-cjs": "catalog:",
+    "yoga-layout": "catalog:",
+    "zod": "catalog:"
   },
   "pnpm": {
     "overrides": {
-      "@octokit/graphql": "9.0.1",
-      "@octokit/request-error": "7.0.0",
-      "@socketsecurity/lib": "3.2.4",
-      "aggregate-error": "npm:@socketregistry/aggregate-error@^1.0.15",
-      "ansi-regex": "6.1.0",
-      "brace-expansion": "2.0.2",
-      "emoji-regex": "10.6.0",
-      "es-define-property": "npm:@socketregistry/es-define-property@^1.0.7",
-      "es-set-tostringtag": "npm:@socketregistry/es-set-tostringtag@^1.0.10",
-      "function-bind": "npm:@socketregistry/function-bind@^1.0.7",
-      "globalthis": "npm:@socketregistry/globalthis@^1.0.8",
-      "gopd": "npm:@socketregistry/gopd@^1.0.7",
-      "graceful-fs": "4.2.11",
-      "has-property-descriptors": "npm:@socketregistry/has-property-descriptors@^1.0.7",
-      "has-proto": "npm:@socketregistry/has-proto@^1.0.7",
-      "has-symbols": "npm:@socketregistry/has-symbols@^1.0.7",
-      "has-tostringtag": "npm:@socketregistry/has-tostringtag@^1.0.7",
-      "hasown": "npm:@socketregistry/hasown@^1.0.7",
-      "https-proxy-agent": "7.0.6",
-      "indent-string": "npm:@socketregistry/indent-string@^1.0.14",
-      "is-core-module": "npm:@socketregistry/is-core-module@^1.0.11",
-      "isarray": "npm:@socketregistry/isarray@^1.0.8",
-      "lodash": "4.17.21",
-      "npm-package-arg": "13.0.0",
-      "packageurl-js": "npm:@socketregistry/packageurl-js@^1.3.5",
-      "path-parse": "npm:@socketregistry/path-parse@^1.0.8",
-      "safe-buffer": "npm:@socketregistry/safe-buffer@^1.0.9",
-      "safer-buffer": "npm:@socketregistry/safer-buffer@^1.0.10",
-      "semver": "7.7.2",
-      "set-function-length": "npm:@socketregistry/set-function-length@^1.0.10",
-      "shell-quote": "npm:shell-quote@^1.8.3",
-      "side-channel": "npm:@socketregistry/side-channel@^1.0.10",
-      "string_decoder": "0.10.31",
-      "string-width": "8.1.0",
-      "tiny-colors": "2.1.3",
-      "typedarray": "npm:@socketregistry/typedarray@^1.0.8",
-      "undici": "6.21.3",
-      "vite": "7.1.12",
-      "xml2js": "0.6.2",
-      "yaml": "2.8.1",
-      "yargs-parser": "21.1.1"
+      "@octokit/graphql": "catalog:",
+      "@octokit/request-error": "catalog:",
+      "@socketsecurity/lib": "catalog:",
+      "aggregate-error": "catalog:",
+      "ansi-regex": "catalog:",
+      "brace-expansion": "catalog:",
+      "emoji-regex": "catalog:",
+      "es-define-property": "catalog:",
+      "es-set-tostringtag": "catalog:",
+      "function-bind": "catalog:",
+      "globalthis": "catalog:",
+      "gopd": "catalog:",
+      "graceful-fs": "catalog:",
+      "has-property-descriptors": "catalog:",
+      "has-proto": "catalog:",
+      "has-symbols": "catalog:",
+      "has-tostringtag": "catalog:",
+      "hasown": "catalog:",
+      "https-proxy-agent": "catalog:",
+      "indent-string": "catalog:",
+      "is-core-module": "catalog:",
+      "isarray": "catalog:",
+      "lodash": "catalog:",
+      "npm-package-arg": "catalog:",
+      "packageurl-js": "catalog:",
+      "path-parse": "catalog:",
+      "safe-buffer": "catalog:",
+      "safer-buffer": "catalog:",
+      "semver": "catalog:",
+      "set-function-length": "catalog:",
+      "shell-quote": "catalog:",
+      "side-channel": "catalog:",
+      "string_decoder": "catalog:",
+      "string-width": "catalog:",
+      "tiny-colors": "catalog:",
+      "typedarray": "catalog:",
+      "undici": "catalog:",
+      "vite": "catalog:",
+      "xml2js": "catalog:",
+      "yaml": "catalog:",
+      "yargs-parser": "catalog:"
     },
     "patchedDependencies": {
       "brace-expansion@2.0.2": "patches/brace-expansion@2.0.2.patch",

packages/bootstrap/package.json

@@ -15,11 +15,11 @@
     "clean": "del-cli dist"
   },
   "devDependencies": {
-    "@babel/core": "7.28.4",
-    "@babel/generator": "^7.28.5",
+    "@babel/core": "catalog:",
+    "@babel/generator": "catalog:",
     "@babel/parser": "catalog:",
     "@babel/traverse": "catalog:",
-    "@babel/types": "^7.28.5",
+    "@babel/types": "catalog:",
     "@socketsecurity/build-infra": "workspace:*",
     "@socketsecurity/cli": "workspace:*",
     "@socketsecurity/lib": "catalog:",

packages/cli-with-sentry/package.json

@@ -49,7 +49,7 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@sentry/node": "8.0.0"
+    "@sentry/node": "catalog:"
   },
   "publishConfig": {
     "access": "public",