chore(deps): update pnpm to v10.9.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pnpm (source)	10.8.1 -> 10.9.0

---

Release Notes

pnpm/pnpm (pnpm)

v10.9.0

Compare Source

Minor Changes

• Added support for installing JSR packages. You can now install JSR packages using the following syntax:

  pnpm add jsr:<pkg_name>
  

  or with a version range:

  pnpm add jsr:<pkg_name>@&#8203;<range>
  

  For example, running:

  pnpm add jsr:@​foo/bar
  

  will add the following entry to your package.json:

  {
    "dependencies": {
      "@​foo/bar": "jsr:^0.1.2"
    }
  }

  When publishing, this entry will be transformed into a format compatible with npm, older versions of Yarn, and previous pnpm versions:

  {
    "dependencies": {
      "@​foo/bar": "npm:@​jsr/foo__bar@^0.1.2"
    }
  }

  Related issue: #​8941.

  Note: The @jsr scope defaults to https://npm.jsr.io/ if the @jsr:registry setting is not defined.

• Added a new setting, dangerouslyAllowAllBuilds, for automatically running any scripts of dependencies without the need to approve any builds. It was already possible to allow all builds by adding this to pnpm-workspace.yaml:

  neverBuiltDependencies: []

  dangerouslyAllowAllBuilds has the same effect but also allows to be set globally via:

  pnpm config set dangerouslyAllowAllBuilds true
  

  It can also be set when running a command:

  pnpm install --dangerously-allow-all-builds
  

Patch Changes

• Fix a false negative in verifyDepsBeforeRun when nodeLinker is hoisted and there is a workspace package without dependencies and node_modules directory #​9424.
• Explicitly drop verifyDepsBeforeRun support for nodeLinker: pnp. Combining verifyDepsBeforeRun and nodeLinker: pnp will now print a warning.

---

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
magic-regexp-docs	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 21, 2025 9:04am

[github-actions]

Diagnostics Comparison:

Click to expand

Metric	Previous	New	Status
Files	356	356	± (0.00%)
Lines	147867	147867	± (0.00%)
Identifiers	150788	150788	± (0.00%)
Symbols	255473	255473	± (0.00%)
Types	53589	53589	± (0.00%)
Instantiations	622816	622816	± (0.00%)
Memory used	263572K	264611K	▲ (+0.39%)
I/O read	0.03s	0.03s	± (0.00%)
I/O write	0s	0s	± (0.00%)
Parse time	0.96s	0.97s	± (+1.03%)
Bind time	0.41s	0.42s	± (+2.38%)
Check time	2.07s	2.07s	± (0.00%)
Emit time	0.1s	0.1s	± (0.00%)
Total time	3.55s	3.56s	± (+0.28%)

[codspeed-hq]

CodSpeed Performance Report

Merging #544 will degrade performances by 61.04%

_{Comparing renovate/all-minor-patch (6647c9a) with main (5886e19)}

Summary

❌ 1 regressions
✅ 5 untouched benchmarks

⚠️ Please fix the performance issues or acknowledge them on CodSpeed.

Benchmarks breakdown

	Benchmark	BASE	HEAD	Change
❌	ignores non-JS files	259.2 µs	665.1 µs	-61.04%