build(deps): bump pnpm from 8.9.2 to 10.6.5

[dependabot]

Bumps pnpm from 8.9.2 to 10.6.5.

Release notes

Sourced from pnpm's releases.

pnpm 10.6.5

Patch Changes

• Remove warnings after having explicitly approved no builds #9296.
• When installing different dependency packages, should retain the ignoredBuilds field in the .modules.yaml file #9240.
• Fix usages of the catalog: protocol in injected local workspace packages. This previously errored with ERR_PNPM_SPEC_NOT_SUPPORTED_BY_ANY_RESOLVER. #8715
• Setting workspace-concurrency to less than or equal to 0 should work #9297.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.6.5

Patch Changes

• Remove warnings after having explicitly approved no builds #9296.
• When installing different dependency packages, should retain the ignoredBuilds field in the .modules.yaml file #9240.
• Fix usages of the catalog: protocol in injected local workspace packages. This previously errored with ERR_PNPM_SPEC_NOT_SUPPORTED_BY_ANY_RESOLVER. #8715
• Setting workspace-concurrency to less than or equal to 0 should work #9297.

10.6.4

Patch Changes

• Fix pnpm dlx with --allow-build flag #9263.
• Invalid Node.js version in use-node-version should not cause pnpm itself to break #9276.
• The max amount of workers running for linking packages from the store has been reduced to 4 to achieve optimal results #9286. The workers are performing many file system operations, so increasing the number of CPUs doesn't help performance after some point.

10.6.3

Patch Changes

• pnpm install --prod=false should not crash, when executed in a project with a pnpm-workspace.yaml file #9233. This fixes regression introduced via #9211.

• Add the missing node-options config to recursive run #9180.

• Removed a branching code path that only executed when dedupe-peer-dependents=false. We believe this internal refactor will not result in behavior changes, but we expect it to make future pnpm versions behave more consistently for projects that override dedupe-peer-dependents to false. There should be less unique bugs from turning off dedupe-peer-dependents.

  See details in #9259.

10.6.2

Patch Changes

• pnpm self-update should always update the version in the packageManager field of package.json.
• Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #8971.
• pnpm patch-commit will now use the same filesystem as the store directory to compare and create patch files.
• Don't show info output when --loglevel=error is used.
• peerDependencyRules should be set in pnpm-workspace.yaml to take effect.

10.6.1

Patch Changes

• The pnpm CLI process should not stay hanging, when --silent reporting is used.
• When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
• Don't ignore pnpm.patchedDependencies from package.json #9226.
• When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.
• When a package version cannot be found in the package metadata, print the registry from which the package was fetched.

10.6.0

Minor Changes

... (truncated)

Commits

• f19cbc2 chore(release): 10.6.5
• cae0848 chore(release): 10.6.4
• 8238bf4 test(dlx): fix
• 942de71 chore(release): 10.6.3
• 65da4d9 chore(release): 10.6.2
• 81a90da docs: update sponsor logo
• 0900928 fix: pnpm-workspace.yaml config peerDependencyRules does not work (#9245)
• 11104c8 fix: self-update should not ignore the local package.json file
• a2d46b4 chore(release): 10.6.1
• f62db6c fix: process exit when --silent is used (#9229)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
devs-in-tech	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Mar 19, 2025 8:19pm

[netlify]

❌ Deploy Preview for devsintech failed.

Name	Link
🔨 Latest commit	537584d
🔍 Latest deploy log	https://app.netlify.com/sites/devsintech/deploys/67db26928f00d9000868c7c2

[dependabot]

Superseded by #797.