update deps + pnpm

[r0b1n]

No description provided.

[github-actions]

AI Code Review

⚠️ Approved with suggestions — low-severity items only, safe to merge

---

What was reviewed

File	Change
package.json	packageManager field bumped from pnpm@10.28.2 to pnpm@10.33.4 with updated SHA512 hash

Skipped (out of scope): pnpm-lock.yaml (lockfile), CI checks (approval required in this environment)

---

Findings

⚠️ Low — engines.pnpm upper bound may be too broad

File: package.json line ~34
Note: The engines field still reads "pnpm": "<11.x.x". While this technically allows 10.33.4, the constraint syntax <11.x.x is non-standard semver — <11 is the canonical form. Worth tidying alongside this bump so the constraint is unambiguous.

---

Positives

• SHA512 hash is updated alongside the version bump, ensuring integrity verification stays in sync with the new pnpm release.
• Lockfile (pnpm-lock.yaml) correctly re-resolves brace-expansion from 5.0.5 → 5.0.6 and minimatch transitive snapshots, keeping the lockfile consistent with the new pnpm version.