revert: revert the untested Renovate batch

[lilienblum]

Pull request #795 moved packageManager to pnpm@10.34.6 while the workflows still install 10.34.5. GitHub merged it about twenty seconds after it opened, and the test jobs then failed in pnpm/action-setup.

This reverts that commit. Renovate no longer asks GitHub to auto-merge when the pull request opens. It merges on a later run, after the checks are green. pnpm updates are disabled because this token cannot update the version pinned in the workflow.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-30T06:32:15.755389Z	098c8b0	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[greptile-apps]

Confidence Score: 5/5

[High risk] Reverts dependency and build configuration changes.

The PR appears safe to merge, with a non-blocking concern about the deprecated HTTP handler restored in the pnpm lockfile.

Findings

1.  Deprecated HTTP handler restored ▶

Fix with agent prompt

### Issue 1
pnpm-lock.yaml:2060
The rollback selects `@smithy/node-http-handler` 4.12.0, which its lockfile entry marks as deprecated for a memory leak. AWS-backed secret tests create an `SSMClient` for each write, so repeated writes in a long-lived test process risk accumulating resources. This is a non-blocking concern, but it could make those tests less reliable.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

Summary

The PR reverts the Renovate dependency batch, restores the pnpm version used by CI, and changes Renovate to merge after checks rather than requesting immediate platform auto-merge.

• The Platform TypeScript lockfile now matches its committed TypeScript manifest.
• One lower-impact concern remains: the rollback restores a deprecated HTTP handler used by AWS secret tests.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[Renovate opens dependency PR] --> B[CI checks]
  B -->|green| C[Later Renovate run merges PR]
  D[pnpm updates] --> E[Disabled until workflow pin can move]

Loading

_{Reviews (2) · Last reviewed commit: "fix: align the platform SDK lockfile wit..."}

[lilienblum]

@greptileai Please re-review the current head 26fc375. The lockfile mismatch from the 4/5 review is fixed, its thread is resolved, and npm ci now passes.