chore(deps): libpg-query 18.1.4, makage 0.5.1, @pgsql/parser 1.5.0

[pyramation]

Summary

Dependency refresh for our own tooling, ahead of a publish.

• libpg-query 18.1.2 → 18.1.4 in all 9 consuming packages and config/versions.json (the 18 entry, which feeds packages/{parser,deparser}/versions/* generation via package.template.json).
• makage ^0.1.8 → ^0.5.1 everywhere — applied with makage update-deps --from ../makage --in . (18 files).
• @pgsql/parser ^1.2.1 → ^1.5.0 (@pgsql/transform-ast devDep), nested-obj 0.2.2 → 0.2.3 (@pgsql/utils).

Workspace-protocol audit (the devDep question)

makage update-workspace reports 0 changes: every reference to a workspace package (in dependencies and devDependencies) already uses workspace:*, except pgsql-types → @pgsql/utils: "workspace:^", which is also workspace-protocol (publishes as ^<version> instead of the exact version) and was left alone.

The one hard-coded version on a package we publish is pg-proto-parser devDep @pgsql/types: "^17.6.2" — not a workspace member (it's published from proto-parser codegen), and it stays on PG17: the checked-in packages/proto-parser/test-utils/meta/*.ts was generated from a PG17 proto, so ^18.0.0 breaks meta.test.ts typecheck (rctype on RowCompareExpr, returningList on InsertStmt/DeleteStmt/UpdateStmt/MergeStmt, inhcount on Constraint). Left as-is per review.

Verification

pnpm install → pnpm build → tests for all 12 CI matrix packages pass locally (deparser 716, transform-ast 1443, plpgsql-parser 324, transform 236, etc.); pnpm lint clean. pgsql-types/pgsql-cli "no tests found" failures under a recursive pnpm test are pre-existing.

Link to Devin session: https://app.devin.ai/sessions/feaa7122b9174cccb3e2485ce59577bc
Requested by: @pyramation

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	makage@​0.5.1
	@​pgsql/​parser@​1.5.0
	nested-obj@​0.2.3

View full report