Aggregate ready dependency updates

[AArnott]

Summary

• Merge origin/main into bulkDepUpdates to pick up the pnpm migration.
• Aggregate the dependency updates whose required build and test checks pass and whose package releases satisfy the repo's minimum-release-age policy.

Included PRs

• Update Testing framework to 18.8.0 - autoclosed #505 Update Testing framework to 18.8.0

Deferred PRs

• Update typescript-eslint monorepo to v8.61.0 #508 Update typescript-eslint monorepo to v8.61.0
• Update dependency prettier to v3.8.4 #509 Update dependency prettier to v3.8.4
• Update dependency nerdbank-gitversioning to v3.10.70 #510 Update dependency nerdbank-gitversioning to v3.10.70
• Update dependency @types/node to v20.19.43 #511 Update dependency @types/node to v20.19.43
• Bump immutable from 5.1.4 to 5.1.5 in /src/servicebroker-npm #515 Bump immutable from 5.1.4 to 5.1.5 in /src/servicebroker-npm
• Update dependency @babel/core to v7.29.6 [SECURITY] #516 Update dependency @babel/core to v7.29.6 [SECURITY]
• Update dependency immutable to v5.1.5 [SECURITY] #517 Update dependency immutable to v5.1.5 [SECURITY]
• Update dependency picomatch@4 to v4.0.4 [SECURITY] #518 Update dependency picomatch@4 to v4.0.4 [SECURITY]

These deferred updates were removed from this aggregate PR because Azure's required supply-chain policy currently rejects them as newer than the configured minimum release age.

Validation

• dotnet build -c Release
• dotnet test --no-build -c Release -- --filter-not-trait "FailsInCloudTest=true"
• corepack pnpm --dir src/servicebroker-npm install --frozen-lockfile --registry https://registry.npmjs.org/
• corepack pnpm --dir src/servicebroker-npm build

[Copilot]

Pull request overview

Aggregates a set of dependency updates (NuGet + npm/pnpm) onto a branch that includes the pnpm workspace migration, primarily to pick up security and routine version bumps while keeping CI green.

Changes:

• Bumped npm/pnpm dependencies in src/servicebroker-npm/package.json (immutable, @types/node, prettier, typescript-eslint, nerdbank-gitversioning).
• Updated pnpm workspace/lock overrides for security-related packages (@babel/core, immutable, picomatch@4).
• Updated NuGet central package version for Microsoft.Testing.Extensions.CodeCoverage in Directory.Packages.props.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 3 comments.

File	Description
src/servicebroker-npm/pnpm-workspace.yaml	Updates pnpm overrides to newer (incl. security) versions.
src/servicebroker-npm/pnpm-lock.yaml	Updates portions of the pnpm lockfile for overridden dependencies.
src/servicebroker-npm/package.json	Bumps runtime/dev dependencies for the servicebroker npm package.
Directory.Packages.props	Bumps centrally-managed NuGet package version for code coverage extension.

Files not reviewed (1)

• src/servicebroker-npm/pnpm-lock.yaml: Generated file

[Copilot]

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated 3 comments.