Bump pnpm to v10 and standardize Renovate config

package.json

@@ -4,9 +4,10 @@
   "keywords": [],
   "license": "MIT",
   "engines": {
+    "pnpm": "^10.26.2",
     "node": ">=18.14.0"
   },
-  "packageManager": "pnpm@9.15.9",
+  "packageManager": "pnpm@10.26.2",
   "sideEffects": false,
   "repository": {
     "type": "git",
@@ -54,6 +55,7 @@
     "@types/jest": "^30.0.0",
     "@types/lodash": "^4.17.21",
     "@types/node": "^24.10.1",
+    "eslint": "^8.57.1",
     "husky": "^9.1.7",
     "jest": "^30.2.0",
     "prettier": "^3.7.4",

pnpm-workspace.yaml

@@ -0,0 +1,5 @@
+# See: https://pnpm.io/supply-chain-security
+blockExoticSubdeps: true
+minimumReleaseAge: 20160 # 14 days (keep in sync with Renovate config)
+ignoredBuiltDependencies:
+  - unrs-resolver

renovate.json

@@ -1,35 +1,11 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:base"],
+  "extends": ["local>api3dao/renovate-config"],
   "packageRules": [
     {
-      "matchPackageNames": ["node", "@octokit/rest"],
+      "matchPackageNames": ["@octokit/rest"],
       "enabled": false
-    },
-    {
-      "matchDepTypes": ["packageManager"],
-      "matchPackageNames": ["pnpm"],
-      "extends": ["schedule:quarterly"]
-    },
-    {
-      "matchDepTypes": ["devDependencies"],
-      "matchUpdateTypes": ["patch", "minor"],
-      "schedule": ["before 4am on Monday"],
-      "groupName": "non-major-dev-dependencies",
-      "automerge": true
-    },
-    {
-      "matchDepTypes": ["dependencies"],
-      "matchUpdateTypes": ["patch", "minor"],
-      "schedule": ["before 4am on Monday"],
-      "groupName": "non-major-dependencies",
-      "automerge": true
     }
   ],
-  "rangeStrategy": "bump",
-  "lockFileMaintenance": {
-    "enabled": false
-  },
-  "reviewers": ["Siegrift"],
-  "dependencyDashboard": false
+  "reviewers": ["Siegrift"]
 }