chore: update PNPM to 11

.gitignore

@@ -33,6 +33,7 @@ npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 .pnpm-debug.log*
+.pnpm-store
 
 # local env files
 .env.local

AGENTS.md

@@ -56,7 +56,7 @@ frontends/
 
 - **Framework**: Vue 3, Nuxt 4.1
 - **Build**: Vite 7, Turbo, unbuild
-- **Package Manager**: pnpm 10.17.0
+- **Package Manager**: pnpm 11.5.2
 - **Language**: TypeScript
 - **Styling**: UnoCSS, Tailwind.css
 - **Testing**: Vitest (unit), Playwright (e2e)

package.json

@@ -46,24 +46,5 @@
   "engines": {
     "node": "^20.x || ^22.x || ^24.x"
   },
-  "packageManager": "pnpm@10.23.0",
-  "pnpm": {
-    "overrides": {
-      "axios": "^1.16.1",
-      "minimatch": "^10.2.5",
-      "undici": "^6.24.0",
-      "unbuild": "^3.6.1",
-      "uuid": "^14.0.0"
-    },
-    "peerDependencyRules": {
-      "ignoreMissing": [
-        "webpack",
-        "vite",
-        "react-dom",
-        "react",
-        "@types/react",
-        "@algolia/client-search"
-      ]
-    }
-  }
+  "packageManager": "pnpm@11.5.2"
 }

pnpm-workspace.yaml

@@ -10,17 +10,43 @@ templates:
 # Reduciing the risk of installing fresh compromised packages before detected
 minimumReleaseAge: 4320 ## 3 days
 minimumReleaseAgeExclude:
-- '@shopware/*'
-- '@typescript/native-preview'
-- 'happy-dom'
-- '@vue/test-utils'
-- '@adyen/adyen-web'
+  - '@shopware/*'
+  - '@typescript/native-preview'
+  - 'happy-dom'
+  - '@vue/test-utils'
+  - '@adyen/adyen-web'
 
 auditConfig:
   ignoreGhsas:
-    - GHSA-92fh-27vv-894w # not vulnerable - https://github.com/unjs/nanotar/issues/59
-  ignoreCves:
-    # - CVE-2024-43788
-    - CVE-2025-68458 # webpack issue, not affected
-    - CVE-2025-68157 # webpack issue, not affected
-    - CVE-2024-43788 # webpack issue, not affected
+    - CVE-2025-68458
+    - CVE-2025-68157
+    - CVE-2024-43788
+overrides:
+  axios: ^1.16.1
+  minimatch: ^10.2.5
+  undici: ^6.24.0
+  unbuild: ^3.6.1
+  uuid: ^14.0.0
+peerDependencyRules:
+  ignoreMissing:
+    - webpack
+    - vite
+    - react-dom
+    - react
+    - '@types/react'
+    - '@algolia/client-search'
+shamefullyHoist: true
+autoInstallPeers: true
+strictPeerDependencies: false
+preferWorkspacePackages: true
+enablePrePostScripts: true
+preferFrozenLockfile: true
+preferOffline: true
+verifyDepsBeforeRun: false
+linkWorkspacePackages: deep
+allowBuilds:
+  '@biomejs/biome': true
+  '@parcel/watcher': true
+  esbuild: true
+  sharp: true
+  vue-demi: true