chore: harden pnpm installs

.github/actions/bootstrap/action.yml

@@ -17,6 +17,8 @@ runs:
 
     - name: Install pnpm
       uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+      with:
+        version: 10.33.0
 
     - name: Install Foundry
       if: ${{ inputs.install-foundry == 'true' }}

package.json

@@ -33,23 +33,22 @@
     "prettier": "^2.6.2",
     "typescript": "^4.6.4"
   },
-  "packageManager": "[email protected]",
   "engines": {
     "node": ">=24",
-    "pnpm": "10.33.0",
+    "pnpm": ">=10.33.0",
     "npm": "use-pnpm",
     "yarn": "use-pnpm"
   },
   "pnpm": {
     "overrides": {
       "ajv": "6.14.0",
-      "axios": ">=1.15.0",
+      "axios": ">=1.15.2",
       "brace-expansion": ">=1.1.13",
       "braces": ">=3.0.3",
       "cross-spawn": ">=7.0.5",
       "ejs": ">=3.1.10",
       "flatted": ">=3.4.2",
-      "follow-redirects": ">=1.15.6",
+      "follow-redirects": ">=1.16.0",
       "glob": ">=11.1.0",
       "immutable": ">=5.1.5",
       "js-yaml": ">=4.1.1",
@@ -63,8 +62,6 @@
       "word-wrap": ">=1.2.4",
       "yaml": ">=2.8.3",
       "ajv@<6.14.0": "6.14.0",
-      "axios@<0.30.0": ">=0.30.0",
-      "axios@<=0.30.2": ">=0.30.3",
       "axios@>=0.8.1 <0.28.0": ">=0.28.0",
       "brace-expansion@<1.1.13": ">=1.1.13",
       "brace-expansion@>=1.0.0 <=1.1.11": ">=1.1.12",
@@ -73,8 +70,6 @@
       "ejs@<3.1.10": ">=3.1.10",
       "flatted@<3.4.0": ">=3.4.0",
       "flatted@<=3.4.1": ">=3.4.2",
-      "follow-redirects@<1.15.4": ">=1.15.4",
-      "follow-redirects@<=1.15.5": ">=1.15.6",
       "glob@>=11.0.0 <11.1.0": ">=11.1.0",
       "immutable@>=5.0.0 <5.1.5": ">=5.1.5",
       "js-yaml@>=4.0.0 <4.1.1": ">=4.1.1",
@@ -89,8 +84,7 @@
       "word-wrap@<1.2.4": ">=1.2.4",
       "yaml@>=1.0.0 <1.10.3": ">=1.10.3",
       "yaml@>=2.0.0 <2.8.3": ">=2.8.3",
-      "axios@<1.15.0": ">=1.15.0",
-      "apisauce>axios": ">=1.15.0"
+      "apisauce>axios": ">=1.15.2"
     }
   }
 }

pnpm-workspace.yaml

@@ -0,0 +1,7 @@
+minimumReleaseAge: 10080
+minimumReleaseAgeExclude:
+  - "axios"
+preferFrozenLockfile: true
+engineStrict: true
+strictDepBuilds: true
+blockExoticSubdeps: true