feat(FR-2840): migrate to pnpm v11

Upgrade the repo's pnpm runtime from v10 to v11 in a single PR per the spec under `.specs/FR-2840-pnpm-v11-migration/`.

- package.json: bump engines.pnpm to ^11.0.0, drop the now-ignored pnpm field, add packageManager pnpm@11.0.8 (overrides moved to pnpm-workspace.yaml).
- pnpm-workspace.yaml: convert onlyBuiltDependencies (list) to allowBuilds (map), absorb overrides from package.json, drop minimumReleaseAgeExclude (its entries no longer matched the resolved tree under v11 and triggered metadata-time errors during resolution).
- .npmrc: drop engine-strict=true since engines.pnpm enforces this natively in v11; the file is documented as auth/registry-only per pnpm 11 scope.
- All 15 pnpm/action-setup invocations across workflows + the daily-test-improver composite action + agentic e2e-watchdog/e2e-healer .md/.lock.yml files now use version: 11.
- vitest.yml's lone pnpm/action-setup@v4 bumped to @v5 (cleanup observed during PR #7297 review).
- pnpm-lock.yaml regenerated under pnpm 11 via `pnpm install --merge-git-branch-lockfiles --no-frozen-lockfile`.

Author: yomybaby

.github/actions/daily-test-improver/coverage-steps/action.yml

@@ -8,7 +8,7 @@ runs:
     - name: Install pnpm
       uses: pnpm/action-setup@v5
       with:
-        version: 10
+        version: 11
         run_install: false
 
     - name: Setup Node.js
@@ -36,7 +36,7 @@ runs:
       shell: bash
       run: |
         echo "Step: Installing dependencies..." >> coverage-steps.log
-        pnpm install --no-frozen-lockfile 2>&1 | tee -a coverage-steps.log
+        pnpm install --no-frozen-lockfile --config.minimum-release-age=0 2>&1 | tee -a coverage-steps.log
 
     # Step 3: Build and test React project with coverage
     - name: Build React GraphQL types

.github/aw/actions-lock.json

@@ -30,10 +30,10 @@
       "version": "v0.34.5",
       "sha": "3de4a6a6d15bb07764b207e40da8c7047474a335"
     },
-    "pnpm/action-setup@v4": {
+    "pnpm/action-setup@v5": {
       "repo": "pnpm/action-setup",
-      "version": "v4",
-      "sha": "c5ba7f7862a0f64c1b1a05fbac13e0b8e86ba08c"
+      "version": "v5",
+      "sha": "a8198c4bff370c8506180b035930dea56dbd5288"
     }
   }
 }

.github/workflows/e2e-healer.lock.yml

@@ -60,9 +60,9 @@ steps:
   - uses: actions/setup-node@v4
     with:
       node-version: '20'
-  - uses: pnpm/action-setup@v4
+  - uses: pnpm/action-setup@v5
     with:
-      version: 10
+      version: 11
   - name: Print E2E endpoints
     run: |
       echo "=== E2E Test Configuration ==="

.github/workflows/e2e-healer.md

@@ -51,9 +51,9 @@ steps:
   - uses: actions/setup-node@v4
     with:
       node-version: '20'
-  - uses: pnpm/action-setup@v4
+  - uses: pnpm/action-setup@v5
     with:
-      version: 10
+      version: 11
   - name: Print E2E endpoints
     run: |
       echo "=== E2E Test Configuration ==="

.github/workflows/e2e-watchdog.lock.yml

@@ -45,7 +45,7 @@ jobs:
       - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
 
       - name: Install Node.js
@@ -55,7 +55,7 @@ jobs:
           cache: 'pnpm'
 
       - name: Install Dependencies
-        run: pnpm install --no-frozen-lockfile
+        run: pnpm install --no-frozen-lockfile --config.minimum-release-age=0
 
       - name: Build web assets
         run: make dep_web
@@ -100,7 +100,7 @@ jobs:
       - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
 
       - name: Install Node.js
@@ -110,7 +110,7 @@ jobs:
           cache: 'pnpm'
 
       - name: Install Dependencies
-        run: pnpm install --no-frozen-lockfile
+        run: pnpm install --no-frozen-lockfile --config.minimum-release-age=0
 
       - name: Download web build artifacts
         uses: actions/download-artifact@v5
@@ -168,7 +168,7 @@ jobs:
       - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
 
       - name: Install Node.js
@@ -178,7 +178,7 @@ jobs:
           cache: 'pnpm'
 
       - name: Install Dependencies
-        run: pnpm install --no-frozen-lockfile
+        run: pnpm install --no-frozen-lockfile --config.minimum-release-age=0
 
       - name: Download web build artifacts
         uses: actions/download-artifact@v5
@@ -234,7 +234,7 @@ jobs:
       - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
 
       - name: Install Node.js
@@ -244,7 +244,7 @@ jobs:
           cache: 'pnpm'
 
       - name: Install Dependencies
-        run: pnpm install --no-frozen-lockfile
+        run: pnpm install --no-frozen-lockfile --config.minimum-release-age=0
 
       # backend.ai-docs-toolkit ships its `docs-toolkit` CLI as the package
       # bin, but it lives at dist/cli.js which only exists after `tsc` runs.
@@ -255,7 +255,7 @@ jobs:
       - name: Build docs-toolkit and link CLI
         run: |
           pnpm --filter backend.ai-docs-toolkit run build
-          pnpm install --no-frozen-lockfile
+          pnpm install --no-frozen-lockfile --config.minimum-release-age=0
 
       # Cache the Playwright browser binaries (~150 MB Chromium download).
       # The lockfile hash keys the cache so a Playwright version bump

.github/workflows/e2e-watchdog.md

@@ -21,7 +21,7 @@ jobs:
       - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
       - name: Install Node.js
         uses: actions/setup-node@v5

.github/workflows/package.yml

@@ -21,7 +21,7 @@ jobs:
       - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
       - name: Install Node.js
         uses: actions/setup-node@v5

.github/workflows/publish-backend.ai-docs-toolkit.yml

@@ -59,7 +59,7 @@ jobs:
       - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
       - uses: actions/setup-node@v5
         with:
@@ -78,7 +78,7 @@ jobs:
             ${{ runner.os }}-pnpm-store-
       - name: Install dependencies
         working-directory: .
-        run: pnpm install --merge-git-branch-lockfiles --no-frozen-lockfile
+        run: pnpm install --merge-git-branch-lockfiles --no-frozen-lockfile --config.minimum-release-age=0
       - name: Run ESLint on React
         run: pnpm run lint
       - name: Run relay-compiler
@@ -104,7 +104,7 @@ jobs:
       - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
       - uses: actions/setup-node@v5
         with:
@@ -123,7 +123,7 @@ jobs:
             ${{ runner.os }}-pnpm-store-
       - name: Install dependencies
         working-directory: .
-        run: pnpm install --merge-git-branch-lockfiles --no-frozen-lockfile
+        run: pnpm install --merge-git-branch-lockfiles --no-frozen-lockfile --config.minimum-release-age=0
       - name: Run ESLint on backend.ai-ui
         run: pnpm run lint
       - name: Run relay-compiler
@@ -143,10 +143,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 10
+          version: 11
           run_install: false
       - uses: actions/setup-node@v5
         with:
@@ -164,7 +164,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-pnpm-store-
       - name: Install dependencies
-        run: pnpm install --merge-git-branch-lockfiles --no-frozen-lockfile
+        run: pnpm install --merge-git-branch-lockfiles --no-frozen-lockfile --config.minimum-release-age=0
       - name: Run Vitest with coverage
         run: pnpm exec vitest run --coverage
       - name: Report coverage on PR