[Justkant]

• .nvmrc: 22.23.4 → 26.13.0 (current LTS; CI reads it through node-version-file)
• packageManager: pnpm 11.5.2 → 12.14.0
• pnpm-lock.yaml: pnpm 12 adds a leading document that pins pnpm itself (packageManagerDependencies); the dependency graph is unchanged
• pnpm-workspace.yaml: minimumReleaseAgeExclude gets @ledgerhq/* in place of the two exact @ledgerhq entries. pnpm 12 verifies every lockfile entry against the registry manifest, and the JFrog registry's @ledgerhq manifests miss versions that npmjs has (e.g. @ledgerhq/errors@6.35.0), so CI failed with ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION ("could not be checked").

engines.node stays ^22.13.0 || ^24 || >=26: it is the supported range, not the dev version.

Locally on Node 26.13.0 / pnpm 12.14.0 (turbo cache bypassed): install --frozen-lockfile, format:check, build, lint, typecheck and test pass.

[changeset-bot]

⚠️ No Changeset found

Latest commit: fd07012

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
wallet-api-wallet-api-tools	Ready	Preview	Nov 5, 2026 12:42pm UTC

[Copilot]

🔵 Needs a closer look

The scope-wide @ledgerhq release-age bypass requires security-policy confirmation and validation of pnpm 12 frozen installs against the actual CI JFrog registry.

No open issues 🎉

1 file not reviewed

• pnpm-lock.yaml: Generated file

What changed in this PR

Updates the repository’s development and CI toolchain to Node 26.13.0 and pnpm 12.14.0 while preserving the supported Node range.

Changes:

• Updates the Node version and pinned pnpm version.
• Adds pnpm’s package-manager lockfile document without changing application dependencies.
• Broadens the release-age exception to @ledgerhq/* to address incomplete JFrog registry manifests.

File	Description
pnpm-workspace.yaml	Replaces two version-specific Ledger exceptions with a scope-wide exception and explanatory comments.
pnpm-lock.yaml	Adds locked pnpm dependencies and platform-specific executables.
package.json	Pins pnpm 12.14.0 with an updated integrity hash.
.nvmrc	Sets Node 26.13.0 for development and CI.

_{Review effort: Balanced}