chore(deps): rolling dependency update

[socket-pr-bot]

Rolling dependency update

One long-lived PR, rebuilt from main on every run so it stays
mergeable. Each run appends its dependency delta below, newest first.

2026-09-11 — run · 1 updated

package	from	to
ecc-agentshield	1.4.0	1.6.0

commits

• chore(deps): apply weekly update fixes

---

Note

Low Risk
Lockfile and catalog pin updates only; ecc-agentshield affects CI install tooling but not runtime app logic.

Overview
This rolling dependency PR refreshes fleet pins and lockfile resolutions with no application source changes.

The catalog bumps ecc-agentshield from 1.4.0 to 1.6.0, which flows into the fleet install GitHub Action that downloads and runs the agentshield binary. Workspace overrides also move postcss@>=8 to 8.5.28 and tinyexec to 1.3.1, with matching updates in pnpm-lock.yaml for consumers such as Vite, Vitest, and @antfu/ni.

^{Reviewed by Cursor Bugbot for commit fc310bd. Configure here.}