chore: bump pgsql-parser packages to latest 18.x

[pyramation]

Summary

Picks up today's pgsql-parser release (constructive-io/pgsql-parser#352 deparser fixes for ATTACH/DETACH PARTITION schema-qualified names, REMAINDER 0, ON DELETE SET NULL (cols), is_enforced builder default, walkSql aborting on PL/pgSQL body parse errors; #353 libpg-query 18.1.5).

Generated with makage update-deps --from pgsql-parser --in constructive:

pgsql-deparser   18.3.6 → 18.3.7     @pgsql/scripts     18.4.5 → 18.4.7
pgsql-parser     18.2.6 → 18.2.7     @pgsql/semantics   18.1.6 → 18.1.8
@pgsql/utils     18.2.8 → 18.2.9     @pgsql/transform   18.17.5 → 18.17.7
@pgsql/lint      18.2.5 → 18.2.7     plpgsql-parser     18.5.7 → 18.5.9
@pgsql/traverse  18.7.7 → 18.7.9

Lockfile regenerated with pnpm@10.34.5 (packageManager pin); only the bumped packages + transitive libpg-query@18.1.5 changed. @pgpmjs/transform... builds clean.

Link to Devin session: https://app.devin.ai/sessions/cc91c8b766d6493a9b10e82d2f08d01a
Open in Devin Desktop: https://app.devin.ai/desktop/session/cc91c8b766d6493a9b10e82d2f08d01a?variant=devin
Requested by: @pyramation

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring

[tenki-reviewer]

Review complete. No issues found — approved ✅.

---

PR #1846 is a pure dependency maintenance change: it bumps the pgsql-parser/deparser/traverse/lint plugin family to newer 18.x patch/minor releases (e.g. pgsql-deparser ^18.3.6 → ^18.3.7, plpgsql-parser ^18.5.7 → ^18.5.9) across 10 package.json manifests. No behavioral code is changed; the diffs are limited to dependency spec strings, and the bump pattern is consistent across the monorepo with no divergent versions of the same package introduced.

Files	Change
pgpm/*, postgres/*, graphile/graphile-sql-expression-validator, packages/csv-to-pg, packages/node-type-registry, packages/safegres	Each manifest bumps its pgsql-parser-family dependency to a matching newer ^18.x revision, keeping related parser/deparser/lint/traverse packages in step across the workspace.

_{Reviewed commit: 7af019f}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​pgsql/​lint@​18.2.5 ⏵ 18.2.7	+4			+1
	@​pgsql/​semantics@​18.1.6 ⏵ 18.1.8	+8			+1
	@​pgsql/​scripts@​18.4.5 ⏵ 18.4.7	+8			+1
	@​pgsql/​transform@​18.17.5 ⏵ 18.17.7	+7		+1
	@​pgsql/​utils@​18.2.8 ⏵ 18.2.9	-2
	@​pgsql/​traverse@​18.7.7 ⏵ 18.7.9	+9
	pgsql-deparser@​18.3.6 ⏵ 18.3.7	+1			-1
	pgsql-parser@​18.2.6 ⏵ 18.2.7	+1			-1
	plpgsql-parser@​18.5.7 ⏵ 18.5.9	+25

View full report