[neilime]

Refresh CI dependencies and remove Gatsby from the npm, pnpm, and Yarn test fixtures. Gatsby's declared Node engine range excludes Node 26; removing it also removes most of the transitive dependency graph responsible for the large lockfile diff. Gatsby cache support in the public actions remains available.

Changes:

• Update Nx, Storybook, pnpm, the GitHub Actions toolkit, and the pinned CodeQL and pnpm setup actions. Keep the pnpm10 alias on 10.33.0 so the integration matrix continues to cover pnpm 10 and 12.
• Load the updated ESM-only toolkit packages with dynamic imports in the CommonJS tests, following the upstream exec and glob release notes.
• Prefer Corepack in dependency maintenance commands, fall back to installed pnpm/Yarn binaries when it is absent, and return a failing exit status if any installation fails.
• Refresh fixture lockfiles and overrides, mark the Yarn fixture private, and align dependency assertions and the ADR with the Gatsby removal.

Validation:

• All four package/release action suites pass on Node 24.22.1: 39 tests.
• The npm fixture passes npm ci --ignore-scripts --no-audit --no-fund and its Jest coverage test: 1 test.
• Frozen-lockfile installs pass for pnpm 10.33.0, pnpm 12.18.0, and Yarn 1.22.22 fixtures with lifecycle scripts disabled.
• Five isolated shell checks pass for Corepack precedence, direct binary fallback, failure propagation, continuing after a failed fixture, and missing-tool diagnostics.
• make lint passes against a clean snapshot of the exact changes. sh -n scripts/test-packages.sh and git diff --check pass.
• Both updated GitHub Action hashes match their annotated release tags.

Related: #572 overlaps with the dependency updates; #569 proposes the separate Node 26 upgrade. This PR keeps the declared runtime on Node 24. GitHub-hosted integration workflows will run on the PR.

[github-actions]

Super-linter summary

Language	Validation result
BASH	Pass ✅
BASH_EXEC	Pass ✅
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_COMMITLINT	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
PRE_COMMIT	Pass ✅
SHELL_SHFMT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0

[github-actions]

Code Coverage Report

Coverage Results

Coverage

Metric	Covered	Total	Percentage
Lines	2	2	100.00%
Functions	1	1	100.00%

Overall: 100.00% 🟢
🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (55afe8e) to head (eff600b).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #574   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            3         3           
=========================================
  Hits             3         3           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.