Update non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@​sap-ai-sdk/ai-api	1.17.0 -> 1.18.0
@​sap-ai-sdk/orchestration	1.17.0 -> 1.18.0
@types/node (source)	22.17.2 -> 22.18.0
eslint-plugin-sonarjs (source)	3.0.4 -> 3.0.5
typescript-eslint (source)	8.40.0 -> 8.41.0
zod (source)	4.1.1 -> 4.1.5

---

Release Notes

SonarSource/SonarJS (eslint-plugin-sonarjs)

v3.0.5

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.41.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

colinhacks/zod (zod)

v4.1.5

Compare Source

Commits:

• 530415f Update docs
• b7b081d Update z.function() type to support array input (#​5170)
• 780cf57 4.1.5

v4.1.4

Compare Source

v4.1.3

Compare Source

Commits:

• 98ff675 Drop stringToBoolean
• a410616 Fix typo
• 0cf4589 fix(v4): toJSONSchema - add missing oneOf inside items in tuple conversion (#​5146)
• 8bf0c16 fix(v4): toJSONSchema tuple path handling for draft-7 with metadata IDs (#​5152)
• 5c5fa90 fix(v4): toJSONSchema - wrong record output when targeting openapi-3.0 (#​5141)
• 87b97cc docs(codecs): update example to use payloadSchema (#​5150)
• 309f358 fix(v4): toJSONSchema - output numbers with exclusive range correctly when targeting openapi-3.0 (#​5139)
• 1e71ca9 docs: fix refine fn to encode works properly (#​5148)
• a85ec3c fix(docs): correct example to use LooseDog instead of Dog (#​5136)
• 3e98274 4.1.3

v4.1.2

Compare Source

Commits:

• e45e61b Improve codec docs
• 25a4c37 fix(v4): toJSONSchema - wrong record tuple output when targeting openapi-3.0 (#​5145)
• 0fa4f46 Use method form in codecs.mdx
• 940383d Update JSON codec and docs
• 3009fa8 4.1.2

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Both pr-review and pr-summary projects have their core SDK and development tool dependencies bumped to the latest patch/minor versions, ensuring compatibility and stability without altering user-facing functionality.

Walkthrough

• Chore: Updated @sap-ai-sdk/ai-api and @sap-ai-sdk/orchestration from 1.17.0 to 1.18.0 in both packages
• Chore: Upgraded general dependencies (zod, @types/node, eslint-plugin-sonarjs, typescript-eslint) to their latest patch releases
• Chore: Ensured development tooling (linting, building) stays current and secure

_{Model: o4-mini | Prompt Tokens: 1034 | Completion Tokens: 478}

[github-actions]

We’ve provided a code review with AI-powered guidance to help you spot improvements. Treat these ideas as optional suggestions rather than hard rules and choose what best suits your goals. You remain in charge—AI is here to assist your decision-making process.
_{Model: o4-mini | Prompt Tokens: 1678 | Completion Tokens: 3234}

[github-actions]

Consider using semantic versioning ranges (e.g., ^1.18.0) instead of fixed versions to allow safe minor/patch upgrades without manual bumps. For example:

"@sap-ai-sdk/ai-api": "^1.18.0",
"@sap-ai-sdk/orchestration": "^1.18.0"

[github-actions]

Similarly, swap fixed dependency versions for caret ranges to leverage semantic versioning and reduce future churn:

"@sap-ai-sdk/ai-api": "^1.18.0",
"@sap-ai-sdk/orchestration": "^1.18.0"

[github-actions]

There's a lot of duplicate devDependencies across pr-review and pr-summary. If you have a monorepo, consider hoisting these to the root package.json or using npm/yarn workspaces to avoid version drift and reduce maintenance. For example, in the root manifest:

{
  "workspaces": ["packages/*"],
  "devDependencies": {
    "typescript": "^5.9.2",
    "eslint": "^9.34.0",
    "prettier": "^3.6.2",
    "@types/node": "^22.18.0"
  }
}

[github-actions]

Apply the same monorepo/workspaces strategy here to manage shared devDependencies in one place and keep individual package manifests lean. This ensures consistency across modules.