chore(deps): bump pgsql-parser workspace packages to 18.2.8 / 18.3.8 / 18.5.10

[pyramation]

Summary

Pulls in the pgsql-parser release that ships the PG18 deparser round-trip fixes (constructive-io/pgsql-parser#354): pgsql-parser ^18.2.8, pgsql-deparser ^18.3.8, plpgsql-parser ^18.5.10, plus the matching @pgsql/{lint,scripts,semantics,transform,traverse,utils} patches, across the 10 workspace packages that consume them (pgpm core/cli/slice/transform, safegres, pg-ast, query-builder, csv-to-pg, node-type-registry, graphile-sql-expression-validator).

Generated with makage deps ../pgsql-parser --install. Most of the pnpm-lock.yaml churn is pnpm 10.34 reformatting resolution: blocks; the only resolved-version changes are the 10 pgsql-*/@pgsql/* packages.

Verified locally: full pnpm -r build and tests for all consuming packages (transform 124, slice 59, safegres 625, query-builder 148, sql-expression-validator 271, pg-ast, csv-to-pg, node-type-registry) pass.

Link to Devin session: https://app.devin.ai/sessions/9ac99c3b56114e9ca60e6d984ee9c11a
Open in Devin Desktop: https://app.devin.ai/desktop/session/9ac99c3b56114e9ca60e6d984ee9c11a?variant=devin
Requested by: @pyramation

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring

[tenki-reviewer]

Review complete. No issues found — approved ✅.

---

This PR updates dependency version ranges across 10 package.json files (and their pnpm-lock.yaml importers) for the SQL parser toolchain family. All changes are within-major patch bumps (^18.x.(7→8), ^18.5.(9→10), etc.), which are non-breaking per semver, and the lockfile stays fully in sync with the manifests — every importers specifier resolves to exactly one version, with no stale or divergent entries left behind.

Files	Change
graphile/graphile-sql-expression-validator, packages/csv-to-pg, packages/node-type-registry, packages/safegres	Bump shared @pgsql/*/pgsql-parser/pgsql-deparser/plpgsql-parser ranges to the new patch release.
pgpm/cli, pgpm/core, pgpm/slice, pgpm/transform	Align the PGPM suite's parser tooling to the same bumped family in lockstep.
postgres/pg-ast, postgres/query-builder	Update the query-builder / AST stack dependencies to the matching versions.

No functional code changed in this PR; the review found no defects in the dependency bump.

_{Reviewed commit: 1269816}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​pgsql/​lint@​18.2.7 ⏵ 18.2.8				+1
	@​pgsql/​semantics@​18.1.8 ⏵ 18.1.9				+1
	@​pgsql/​scripts@​18.4.7 ⏵ 18.4.8				+1
	@​pgsql/​transform@​18.17.7 ⏵ 18.17.8				+1
	@​pgsql/​utils@​18.2.9 ⏵ 18.2.10				+1
	@​pgsql/​traverse@​18.7.9 ⏵ 18.7.10				+1
	pgsql-deparser@​18.3.7 ⏵ 18.3.8				+1
	pgsql-parser@​18.2.7 ⏵ 18.2.8				+1
	plpgsql-parser@​18.5.9 ⏵ 18.5.10				+1

View full report