chore: upgrade pnpm to 11.24.0 (#18)

- pin packageManager to pnpm@11.24.0 (drives CI action-setup and Docker corepack)
- approve esbuild and protobufjs build scripts via allowBuilds; pnpm 11
  errors on unapproved build scripts where pnpm 10 only warned
- exempt the @univer-cli/@univerjs/@univerjs-pro scopes from
  minimumReleaseAge so the same-day SDK baseline sync via update:sdk
  keeps working; all other deps keep the pnpm 11 24h supply-chain default
- README badges and requirements now say pnpm 11
- pnpm-lock.yaml is unchanged: pnpm 11 keeps lockfileVersion 9.0

Author: hexf00

README.md

@@ -8,7 +8,7 @@
 
 [![License](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)
 [![Node.js](https://img.shields.io/badge/Node.js-%3E%3D24-339933?logo=node.js&logoColor=white)](package.json)
-[![pnpm](https://img.shields.io/badge/pnpm-10-F69220?logo=pnpm&logoColor=white)](package.json)
+[![pnpm](https://img.shields.io/badge/pnpm-11-F69220?logo=pnpm&logoColor=white)](package.json)
 
 English | [简体中文](README.zh-CN.md)
 
@@ -70,7 +70,7 @@ them. See the [CLI guide](apps/cli/README.md) for the complete product workflow.
 ### Requirements
 
 - Node.js 24 or newer
-- pnpm 10
+- pnpm 11
 
 Install dependencies and prepare the application configuration:
 

README.zh-CN.md

@@ -8,7 +8,7 @@
 
 [![License](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)
 [![Node.js](https://img.shields.io/badge/Node.js-%3E%3D24-339933?logo=node.js&logoColor=white)](package.json)
-[![pnpm](https://img.shields.io/badge/pnpm-10-F69220?logo=pnpm&logoColor=white)](package.json)
+[![pnpm](https://img.shields.io/badge/pnpm-11-F69220?logo=pnpm&logoColor=white)](package.json)
 
 [English](README.md) | 简体中文
 
@@ -68,7 +68,7 @@ Worktree 将 Agent 编辑转化为边界清晰的审阅流程：
 ### 环境要求
 
 - Node.js 24 或更高版本
-- pnpm 10
+- pnpm 11
 
 安装依赖并准备应用配置：
 

apps/workspace/README.md

@@ -9,7 +9,7 @@ and Worktrees.
 Requirements:
 
 - Node.js 24 or newer
-- pnpm 10
+- pnpm 11
 - a Univer license for capabilities that require one
 
 ```bash

package.json

@@ -3,7 +3,7 @@
   "private": true,
   "license": "Apache-2.0",
   "type": "module",
-  "packageManager": "pnpm@10.32.1",
+  "packageManager": "pnpm@11.24.0",
   "engines": {
     "node": ">=24"
   },

pnpm-workspace.yaml

@@ -1,3 +1,14 @@
 packages:
   - apps/*
   - packages/*
+
+allowBuilds:
+  esbuild: true
+  protobufjs: true
+
+# The SDK baseline is pinned to exact releases and updated on release day via
+# `pnpm update:sdk`; only these scopes are exempt from minimumReleaseAge.
+minimumReleaseAgeExclude:
+  - "@univer-cli/*"
+  - "@univerjs/*"
+  - "@univerjs-pro/*"