chore: up deps and fix alerts

[vorobey]

No description provided.

[Copilot]

Pull request overview

Updates the DevExtreme/ThemeBuilder toolchain and regenerates the “additional” theme CSS to align the template with DevExtreme 26.1.4, while also adding dependency overrides/exclusions to address dependency alerts.

Changes:

• Bump devextreme, devextreme-angular, devextreme-themebuilder, and related tooling to 26.1.4 / 1.17.0.
• Regenerate theme.additional.css and theme.additional.dark.css for the updated ThemeBuilder version.
• Add nanoid override (security fix) and introduce minimumReleaseAgeExclude entries in pnpm workspace config.

Reviewed changes

Copilot reviewed 2 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/themes/generated/theme.additional.dark.css	Regenerated dark “additional” theme output for ThemeBuilder 26.1.4 (new icons + updated styles/variables).
src/themes/generated/theme.additional.css	Regenerated light “additional” theme output for ThemeBuilder 26.1.4 (new icons + updated styles/variables).
pnpm-workspace.yaml	Adds nanoid override and config exclusions for pnpm release-age gating.
pnpm-lock.yaml	Lockfile refresh reflecting updated DevExtreme packages and transitive dependency changes.
package.json	Updates DevExtreme deps and pins devextreme-cli version; aligns ThemeBuilder dependency.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 7 changed files in this pull request and generated no new comments.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

Suppressed comments (2)

pnpm-workspace.yaml:19

• minimumReleaseAgeExclude is configured, but there is no minimumReleaseAge setting anywhere in the repo. As-is, this block is likely a no-op and may confuse future maintenance (it’s unclear what behavior is being opted out of).

minimumReleaseAgeExclude:
  - devextreme-cli
  - devextreme-schematics

package.json:25

• Directly depending on devextreme-schematics at ^1.17.0 results in multiple devextreme-schematics versions in the install graph (e.g. devextreme-angular@26.1.4 pulls devextreme-schematics@1.15.0 per pnpm-lock.yaml). If the app doesn’t use schematics at runtime, this extra direct dependency may be unnecessary bloat.

    "devextreme-schematics": "^1.17.0",