Bump pnpm from 9.4.0 to 9.5.0

[dependabot]

Bumps pnpm from 9.4.0 to 9.5.0.

Release notes

Sourced from pnpm's releases.

pnpm 9.5

Minor Changes

• Added support for catalogs #8122.

  Catalogs may be declared in the pnpm-workspace.yaml file. For example:

  # Default catalogs
  catalog:
    chalk: ^4.1.2
  Named catalogs
  catalogs:
  react16:
  react: ^16.7.0
  react-dom: ^16.7.0
  react17:
  react: ^17.10.0
  react-dom: ^17.10.0

  Then, in package.json files, use the catalog: protocol to reference a "default" or "named" catalog:

  {
    "dependencies": {
      "chalk": "catalog:",
      "react": "catalog:react16",
      "react-dom": "catalog:react16"
    }
  }

  Shout out to @​gluxon for implementing it!

• Bundled pnpm setup now creates the pnpx script #8230.

Patch Changes

• Read authentication information from .npmrc in the current directory when running dlx #7996.
• Updated @pnpm/tabtab to v0.5.4, enabling zsh autocomplete lazy loading #8236.
• Installation with filtering will now work, when dedupe-peer-dependents is set to true #6300.
• Fixed dlx not actually using the Node.js version specified by --use-node-version.

Platinum Sponsors

... (truncated)

Commits

• 07a7ac4 chore(release): 9.5.0
• afe520d fix(deps): update
• f30590b fix: skip cataloged dependencies when running pnpm update --latest (#8286)
• 824363b fix: preserve catalog protocol when updating project manifest (#8285)
• 7ddbed7 docs(matcher): fix user example (#8283)
• 50787c8 chore(release): 9.5.0-beta.3
• 5b8c917 fix: win-arm64 build
• d29351f chore(release): 9.5.0-beta.2
• 2f81b59 chore: remove redundant script from prepublish step
• 2382073 chore: don't use catalogs in pnpm CLI package
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)