Scope audit remediation to packages and js-plugins

[Copilot]

Dependency audit remediation should only cover packages and js-plugins; dependency updates in examples, templates, website, and other versioned areas should be rolled back.

• Scope rollback

  • Reverted dependency upgrades outside packages/** and js-plugins/**, including examples, create-farm templates, website, and unrelated root devDependencies.

• Audit remediation

  • Kept direct package updates needed under packages and js-plugins.
  • Added targeted pnpm.overrides for vulnerable transitive chains used by those workspaces.

• Release metadata

  • Updated the changeset to cover the affected packages only.

[changeset-bot]

🦋 Changeset detected

Latest commit: 21d1b76

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

💥 An error occurred when fetching the changed packages and changesets in this PR

Some errors occurred when validating the changesets config:
The package or glob expression "farm-docs" is specified in the `ignore` option but it is not found in the project. You may have misspelled the package name or provided an invalid glob expression. Note that glob expressions must be defined according to https://www.npmjs.com/package/micromatch
The package or glob expression "bench" is specified in the `ignore` option but it is not found in the project. You may have misspelled the package name or provided an invalid glob expression. Note that glob expressions must be defined according to https://www.npmjs.com/package/micromatch

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
farm-docs	Ready	Preview, Comment	Jun 14, 2026 1:57pm