#89 update deps

[mumenthalers]

closes #89

[Copilot]

Copilot review overview

🟡 Changes recommended

The release-age safeguard is unsupported by the declared minimum npm version.

Review effort: Balanced
Findings: 1

Open (1)

• Require npm 11.10.0+ for min-release-age enforcement · New

What changed in this PR

Updates the monorepo and publish helper to Lerna 10 to reduce dependency risks.

Changes:

• Upgrades Lerna to 10.0.1.
• Adds npm funding and release-age settings.

File	Description
package.json	Upgrades root Lerna dependency.
packages/​publish-helper/​package.json	Requires Lerna 10 as a peer.
.npmrc	Configures npm funding and release-age behavior.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🟢 Approval recommended

The dependency upgrade and associated test and npm configuration changes are coherent with the stated goal.

Review effort: Balanced
Findings: None

Resolved since last review (1)

• Require npm 11.10.0+ for min-release-age enforcement

[Copilot]

Copilot review overview

🟡 Changes recommended

The declared and tested Node 25 support conflicts with Lerna 10’s supported Node versions.

Review effort: Balanced
Findings: 1

Open (1)

• CI and root engine allow unsupported Node 25 for Lerna 10 · New

Previously missed (1)

In code that hasn't changed since last review

Package Node engine range conflicts with Lerna 10 requirements

packages/​publish-helper/​package.json:33

This peer dependency makes Lerna 10 part of the publish helper's runtime contract, but the package still advertises Node >=24.10.2, including unsupported Node 25. Consumers enforcing engines cannot satisfy that advertised runtime together with Lerna 10's ^22.13.0 || ^24.0.0 || ^26.0.0 requirement. Narrow this package's Node engine to the supported majors.