fix(deps): remediate pnpm audit findings

[0xJem]

Summary

• Remediate the current pnpm audit findings for postcss, nanoid, and brace-expansion.
• Apply the fixes through workspace overrides and regenerate pnpm-lock.yaml.
• Preserve the repository's minimumReleaseAge policy; no minimumReleaseAgeExclude entries were added.

Validation

• pnpm run check:runtime-versions — passed
• pnpm install --frozen-lockfile — passed
• lint/format — passed
• build/tests — passed
• local snapshot generation — passed
• final pnpm audit --audit-level=moderate — passed; one low-severity baseline remains

Container validation was not run because Docker is not installed in the validation environment. No protected default branch was modified.

Summary by CodeRabbit

• Chores
  • Updated dependency version constraints and overrides.
  • Added an override for Nanoid and refreshed PostCSS and brace-expansion versions.

[railway-app]

🚅 Deployed to the protocol-visualizer-pr-62 environment in protocol-visualizer

Service	Status	Web	Updated (UTC)
snapshot-publisher	✅ Success (View Logs)		Aug 14, 2026 at 2:01 am
snapshot-monitor	🚨 Crashed (View Logs)		Aug 14, 2026 at 12:05 am
snapshot-gateway	✅ Success (View Logs)		Aug 13, 2026 at 7:35 am
frontend	✅ Success (View Logs)		Aug 13, 2026 at 6:06 am
indexer	✅ Success (View Logs)		Aug 13, 2026 at 6:06 am
hasura	✅ Success (View Logs)		Aug 13, 2026 at 6:06 am

[coderabbitai]

Important

Review skipped

No new commits to review since the last review.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 5b38eb77-9b6f-42dd-a1ef-88b77241d58b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 5e1cbbb7-3b72-47b3-adc9-61b856ddeda5

📥 Commits

Reviewing files that changed from the base of the PR and between d0a9480 and eddbbda.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• pnpm-workspace.yaml

---

Walkthrough

The workspace dependency constraints now target updated PostCSS, brace-expansion, and Nanoid versions.

Changes

Workspace dependency constraints

Layer / File(s)	Summary
Dependency override updates pnpm-workspace.yaml	The PostCSS exclusion and override now use 8.5.23. The brace-expansion override now uses 5.0.9. A Nanoid override for versions below 3.3.17 was added.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Mergeability Score: ⚪ Minimal · up to eddbb

The PR updates dependency overrides and the lockfile to remediate the reported audit findings, with installation, build/tests, snapshot, and audit checks passing. No actionable merge-blocking risk remains beyond normal review.

Possibly related PRs

• OlympusDAO/protocol-visualizer#34: Both PRs update dependency constraints in pnpm-workspace.yaml.
• OlympusDAO/protocol-visualizer#61: Both PRs update brace-expansion and PostCSS overrides.

Suggested reviewers: zeroxnoodle

Poem

A rabbit checks the versions in a row,
PostCSS and braces now safely grow.
Nanoid joins the update trail,
Workspace rules are set without fail.
Hop, hop—clean constraints prevail!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies dependency fixes for the pnpm audit findings, which matches the primary changes.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/pnpm-security-20260812

---

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	postcss@​8.5.23

View full report