chore(deps): update dependency lerna to v9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
lerna (source)	8.2.4 → 9.0.7

---

Release Notes

lerna/lerna (lerna)

v9.0.7

Compare Source

Bug Fixes

• core: remove multimatch dependency and legacy-core internals (#​4314) (ec01462)

v9.0.6

Compare Source

Bug Fixes

• deps: add missing ci-info dependency (#​4263) (b768187)
• deps: bump tar from 7.5.8 to 7.5.11 (#​4296) (7a69a57)

v9.0.5

Compare Source

Bug Fixes

• bump minimatch from 3.0.5 to 3.1.4 (#​4285) (2e3f99e)
• bump tar from 7.5.7 to 7.5.8 (#​4273) (bdffd1d)

v9.0.4

Compare Source

Bug Fixes

• bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#​4267) (43e3d46)

v9.0.3

Compare Source

Note: Version bump only for package lerna

v9.0.1

Compare Source

Bug Fixes

• expand version range to include nx v22.x (#​4242) (0cca286)

v9.0.0

Compare Source

Bug Fixes

• publish: ensure README file names are populated on package.json (#​4211) (362875d)

Features

• support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

• A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
• A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

• node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

• The @​lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

• remove all remaining lodash usage (#​4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

• use internal fork of unmaintained strong-log-transformer (#​4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

---

Configuration

📅 Schedule: Branch creation - "on Monday every 9 weeks of the year starting on the 7th week" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.