chore: remove pnpm from dependencies and require >=10.27.0

- Remove pnpm from devDependencies to avoid security vulnerabilities
- Update packageManager to pnpm@10.27.0
- Update engines.pnpm to >=10.27.0
- Update README.md to recommend corepack or mise for version management
- Fixes GHSA-379q-355j-w6rj, GHSA-7vhp-vf5g-r2fw, GHSA-2phv-j68v-wwqx

README.md

@@ -16,7 +16,7 @@ A modern web management console for [RustFS](https://github.com/rustfs/rustfs) d
 ### Prerequisites
 
 - Node.js >= 22.0.0
-- pnpm >= 10.19.0
+- pnpm >= 10.27.0 (managed via corepack or mise)
 - RustFS backend running
 
 ### Installation
@@ -163,7 +163,7 @@ Output: `.output/public` (static files)
 FROM node:22-alpine AS builder
 WORKDIR /app
 COPY package.json pnpm-lock.yaml ./
-RUN corepack enable && corepack prepare pnpm@10.19.0 --activate
+RUN corepack enable && corepack prepare pnpm@10.27.0 --activate
 RUN pnpm install --frozen-lockfile
 COPY . .
 RUN pnpm build

package.json

@@ -83,7 +83,6 @@
     "@vitest/ui": "^3.2.4",
     "c8": "^10.1.3",
     "jsdom": "^27.0.0",
-    "pnpm": "^10.19.0",
     "prettier": "^3.2.5",
     "shadcn-nuxt": "^2.4.3",
     "tailwindcss": "^4.1.18",
@@ -92,10 +91,10 @@
     "vitest": "^3.2.4",
     "vue-tsc": "^2.2.12"
   },
-  "packageManager": "pnpm@10.19.0",
+  "packageManager": "pnpm@10.27.0",
   "engines": {
     "node": ">=22.0.0",
-    "pnpm": ">=10.19.0"
+    "pnpm": ">=10.27.0"
   },
   "pnpm": {
     "overrides": {

pnpm-lock.yaml

@@ -192,9 +192,6 @@ importers:
       jsdom:
         specifier: ^27.0.0
         version: 27.0.1(postcss@8.5.6)
-      pnpm:
-        specifier: ^10.19.0
-        version: 10.19.0
       prettier:
         specifier: ^3.2.5
         version: 3.6.2
@@ -5568,11 +5565,6 @@ packages:
   pkg-types@2.3.0:
     resolution: {integrity: sha512-SIqCzDRg0s9npO5XQ3tNZioRY1uK06lA41ynBC1YmFTmnY6FjUjVt6s4LoADmwoig1qqD0oK8h1p/8mlMx8Oig==}
 
-  pnpm@10.19.0:
-    resolution: {integrity: sha512-yfxyNukq31yK9C/VvxYS35nCzrYvJwRwMvRyCzP46s3eMRhl6RxBHyd09hjYLzIICOy1Fxi/qCwGDEunx2oyuA==}
-    engines: {node: '>=18.12'}
-    hasBin: true
-
   point-in-polygon-hao@1.2.4:
     resolution: {integrity: sha512-x2pcvXeqhRHlNRdhLs/tgFapAbSSe86wa/eqmj1G6pWftbEs5aVRJhRGM6FYSUERKu0PjekJzMq0gsI2XyiclQ==}
 
@@ -13165,8 +13157,6 @@ snapshots:
       exsolve: 1.0.8
       pathe: 2.0.3
 
-  pnpm@10.19.0: {}
-
   point-in-polygon-hao@1.2.4:
     dependencies:
       robust-predicates: 3.0.2