Merge develop into feature branch, resolving conflicts

Resolved conflicts in:
- .github/workflows/ci.yml: Combined theme-ecl and theme-desy in test matrix
- pnpm-lock.yaml: Used feature branch versions for tar (7.5.11) and tinyglobby (0.2.15)

Author: claude

.github/workflows/auto-dependency-updater.yml

@@ -43,7 +43,7 @@ jobs:
         with:
           # cache: pnpm
           node-version: 24
-      - uses: pnpm/action-setup@v5
+      - uses: pnpm/action-setup@v6
         id: pnpm-install
         with:
           version: 10

.github/workflows/ci.yml

@@ -60,7 +60,7 @@ jobs:
     continue-on-error: true
     strategy:
       matrix:
-        package: ['test-tag-name-transformer', 'theme-bwst', 'theme-default', 'theme-kern', 'theme-ecl']
+        package: ['test-tag-name-transformer', 'theme-bwst', 'theme-default', 'theme-desy', 'theme-kern', 'theme-ecl']
     runs-on: ubuntu-latest
     steps:
       - name: Checkout

.github/workflows/cve-overview.yml

@@ -37,7 +37,7 @@ jobs:
       - uses: actions/setup-node@v6
         with:
           node-version: 24
-      - uses: pnpm/action-setup@v5
+      - uses: pnpm/action-setup@v6
         id: pnpm-install
         with:
           version: 10
@@ -77,7 +77,7 @@ jobs:
       - uses: actions/setup-node@v6
         with:
           node-version: 24
-      - uses: pnpm/action-setup@v5
+      - uses: pnpm/action-setup@v6
         id: pnpm-install
         with:
           version: 10

.github/workflows/draft-deploy.yml

@@ -32,7 +32,7 @@ jobs:
         with:
           node-version: 24
       - name: Install pnpm
-        uses: pnpm/action-setup@v5
+        uses: pnpm/action-setup@v6
         id: pnpm-install
         with:
           version: 10

.github/workflows/handle-pr-labels.yml

@@ -16,7 +16,7 @@ jobs:
       github.event.label.name == 'codex'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v8
+      - uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |

.github/workflows/manage-npm-tags.yml

@@ -54,6 +54,7 @@ jobs:
           - '@public-ui/solid'
           - '@public-ui/svelte'
           - '@public-ui/theme-default'
+          - '@public-ui/theme-desy'
           - '@public-ui/theme-ecl'
           - '@public-ui/theme-kern'
           # - '@public-ui/stylelint-rules'

.github/workflows/mcp-vercel.yml

@@ -126,7 +126,7 @@ jobs:
 
       - name: Share preview URL in PR
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         env:
           PREVIEW_URL: ${{ steps.deploy_preview.outputs.url }}
         with:

.github/workflows/publish.yml

@@ -66,7 +66,7 @@ jobs:
           registry-url: https://registry.npmjs.org
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v5
+        uses: pnpm/action-setup@v6
         id: pnpm-install
         with:
           version: 10
@@ -193,27 +193,33 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPMJS_GRANULAR_TOKEN}}
           NPM_CONFIG_PROVENANCE: true
+      - name: Build and publish theme bwst
+        run: pnpm publish --access public --provenance --no-git-checks --tag ${{env.prefix}}${{github.event.inputs.tag}} || echo "⚠️ Publish skipped – package already exists"
+        working-directory: packages/themes/bwst
+        env:
+          NODE_AUTH_TOKEN: ${{secrets.NPMJS_GRANULAR_TOKEN}}
+          NPM_CONFIG_PROVENANCE: true
       - name: Build and publish theme default
         run: pnpm publish --access public --provenance --no-git-checks --tag ${{env.prefix}}${{github.event.inputs.tag}} || echo "⚠️ Publish skipped – package already exists"
         working-directory: packages/themes/default
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPMJS_GRANULAR_TOKEN}}
           NPM_CONFIG_PROVENANCE: true
-      - name: Build and publish theme ecl
+      - name: Build and publish theme desy
         run: pnpm publish --access public --provenance --no-git-checks --tag ${{env.prefix}}${{github.event.inputs.tag}} || echo "⚠️ Publish skipped – package already exists"
-        working-directory: packages/themes/ecl
+        working-directory: packages/themes/desy
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPMJS_GRANULAR_TOKEN}}
           NPM_CONFIG_PROVENANCE: true
-      - name: Build and publish theme kern
+      - name: Build and publish theme ecl
         run: pnpm publish --access public --provenance --no-git-checks --tag ${{env.prefix}}${{github.event.inputs.tag}} || echo "⚠️ Publish skipped – package already exists"
-        working-directory: packages/themes/kern
+        working-directory: packages/themes/ecl
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPMJS_GRANULAR_TOKEN}}
           NPM_CONFIG_PROVENANCE: true
-      - name: Build and publish theme bwst
+      - name: Build and publish theme kern
         run: pnpm publish --access public --provenance --no-git-checks --tag ${{env.prefix}}${{github.event.inputs.tag}} || echo "⚠️ Publish skipped – package already exists"
-        working-directory: packages/themes/bwst
+        working-directory: packages/themes/kern
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPMJS_GRANULAR_TOKEN}}
           NPM_CONFIG_PROVENANCE: true

.github/workflows/security-scan-schedule.yml

@@ -24,7 +24,7 @@ jobs:
           ref: ${{ matrix.branch }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v5
+        uses: pnpm/action-setup@v6
         with:
           version: 10
 

.github/workflows/security-scan.yml

@@ -36,7 +36,7 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v5
+        uses: pnpm/action-setup@v6
         with:
           version: 10