ci: use pnpm/setup and devEngines

[danielroe]

this uses the new https://github.com/pnpm/setup github action to replace actions/setup-node + corepack, as corepack is going away in node 26+ 😢

[coldtea-pr-lens]

◈ PR Lens

🟢 +0 new · 🟠 ~2 changed · 🔴 -0 removed · 0 flows · 3 files · commit 5a8078a

Architecture

2 components touched across 1 lane.

Open the interactive canvas

Data flow

No data-flow sequence changed in this PR.

Drill down

CI ＆ Maintenance — 2 components

🟡 CHANGED CI Test ＆ Security Workflow

Runs test and verification jobs on GitHub Actions using pnpm/setup.

• .github/workflows/ci.yml:20-26

🟡 CHANGED Vitest

Runs tests and configures required Node and pnpm engines.

• package.json:19-30
• pnpm-lock.yaml:118-120

View

• Architecture lens
• Data flow lens
• Expand every detail
• Show unchanged neighbours

Tip

Show unchanged neighbours lists the components this change did not touch alongside the ones it did, so the drill-down shows what the changed code sits next to.

🪧 More tips

• Run PR Lens on your own machine: npx skills add coldteadotai/pr-lens installs the agent skill. Then tell your coding agent: "Diagram the change you just made with PR Lens and attach it to the pull request."
• Draw a diff before it is even a pull request: npx @coldtea/pr-lens-cli analyze --base origin/main reads the diff with your own model key, and npx @coldtea/pr-lens-cli render .pr-lens/graph.json draws the same lenses on your machine.
• The boxes under View are live. Tick Architecture lens or Data flow lens to choose which diagrams appear, or Expand every detail to open every drill-down at once. The comment redraws in place a few seconds later.
• GitHub will not let you zoom an image in a comment. The link under each diagram opens it on an interactive canvas, where you can zoom, pan and step through the flow.
• The CLI's render picks up .github/pr-lens.yml automatically and applies your corrections (renames, exclusions, lane pins) at draw time.
• Would you rather run it from CI on a key of your own? Add .github/workflows/pr-lens.yml with coldteadotai/pr-lens/packages/action@v0 and a model key in your repository secrets, say GEMINI_API_KEY. The Action asks Gemini by default, or OpenAI and any endpoint speaking /chat/completions through its provider input.
• PR Lens is free for open source. A star on the repository is what keeps it going.
• Push a new commit and the whole comment re-renders for the new head. An older run never overwrites a newer one, so a slow render cannot put a stale diagram back.
• The diagrams follow your GitHub theme, so dark mode gets the dark render and light mode the light one, and the moving dots show this pull request's data in motion.

---

◈ Rendered by PR Lens · crafted with ❤️ by the Coldtea team · Come say hi on Discord

[agentscanapp]

Mixed activity

Activity patterns show a mix of organic and automated signals.

View full analysis →

Evidence

• Very high PR volume (daily): 32 PRs within a single 24-hour window

Last 5 PRs:

• https://redirect.github.com/nuxt/nuxt/pull/36301
• https://redirect.github.com/nuxt/nuxt/pull/36302
• https://redirect.github.com/nuxt/nuxt/pull/36304
• https://redirect.github.com/nuxt/nuxt/pull/36305
• https://redirect.github.com/nuxt/nuxt/pull/36306

_{This is an automated analysis by AgentScan}