build: upgrade pnpm 8 to 11, improve supply chain security (... and fix CI)

.github/workflows/e2e.yml

@@ -11,7 +11,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node-version: ['20.6.1', '24']
+        node-version: ['22.13.0', '24']
 
     steps:
       - name: Checkout
@@ -24,12 +24,14 @@ jobs:
           private-key: ${{ secrets.TOKENS_PRIVATE_KEY }}
           app-id: ${{ secrets.TOKENS_APP_ID }}
 
+      - name: Install pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
+
       - name: Node ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 
-      - run: corepack enable
       - name: Install Deno
         uses: denoland/setup-deno@v2
         with:

.github/workflows/publint.yml

@@ -18,7 +18,8 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
-      - run: corepack enable pnpm
+      - name: Install pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Node.js
         uses: actions/setup-node@v4
         with:

.github/workflows/release-please.yml

@@ -33,17 +33,11 @@ jobs:
           # Should match the `DENO_VERSION_RANGE` from https://github.com/netlify/build/blob/8ff162649f76a9586dd7593198c0fa798dac3629/packages/edge-bundler/node/bridge.ts#L22
           deno-version: v2.4.2
         if: ${{ steps.release.outputs.releases_created }}
-      - run: corepack enable
+      - name: Install pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Install dependencies
         run: pnpm install
       - run: pnpm build:packages
         if: ${{ steps.release.outputs.releases_created }}
-      - name: Authenticate pnpm
-        run: pnpm config set '//registry.npmjs.org/:_authToken' "${NPM_AUTH_TOKEN}"
-        if: ${{ steps.release.outputs.releases_created }}
-        env:
-          NPM_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
-      - run: pnpm -r publish --filter "@netlify/*"
-        env:
-          NPM_CONFIG_PROVENANCE: true
+      - run: pnpm -r publish --filter "@netlify/*" --provenance
         if: ${{ steps.release.outputs.releases_created }}

.github/workflows/test.yml

@@ -15,11 +15,12 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+      - name: Install pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Installing Node.js
         uses: actions/setup-node@v4
         with:
           node-version: 24
-      - run: corepack enable
       - name: Install Deno
         uses: denoland/setup-deno@v2
         with:
@@ -40,15 +41,16 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node-version: ['20.6.1', '24']
+        node-version: ['22.13.0', '24']
 
     steps:
       - uses: actions/checkout@v4
+      - name: Install pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Installing Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-      - run: corepack enable
       - name: Install Deno
         uses: denoland/setup-deno@v2
         with:

package.json

@@ -62,5 +62,5 @@
   "engines": {
     "node": ">=20.6.1"
   },
-  "packageManager": "pnpm@8.15.9+sha256.daa27a0b541bc635323ff96c2ded995467ff9fe6d69ff67021558aa9ad9dcc36"
+  "packageManager": "pnpm@11.7.0+sha512.19cc852c120c7125760f2443ee6be0ca5b40f9f50598de1a09a1f177503e010e57c23c77646e01e761de59bf874fb22a3398c33ab9691fc13eb946b6f0f4d620"
 }