Change package manager to pnpm and update dependencies

[jimchen5209]

• Switch the package manager from Yarn to pnpm
• Update the Dockerfile and workflows accordingly, and address a CVE in js-yaml.
• Update major dependencies

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vue-tsc@​3.0.6 ⏵ 3.1.4			+1	+1
	@​tsconfig/​node22@​22.0.2 ⏵ 22.0.5
	@​types/​node@​22.17.2 ⏵ 24.10.1	+1		+1
	pinia@​3.0.3 ⏵ 3.0.4			+1	-2
	vite@​7.1.3 ⏵ 7.2.4	+1	+14		-1
	jiti@​2.5.1 ⏵ 2.6.1	-1			-2
	@​vue/​tsconfig@​0.7.0 ⏵ 0.8.1	+1		+1
	vite-plugin-vue-devtools@​8.0.1 ⏵ 8.0.5	+1		+2	+4
	vis-data@​8.0.1 ⏵ 8.0.3	+1		+1	-1
	@​fontsource/​roboto@​5.2.6 ⏵ 5.2.8				-4
	vite-plugin-inspect@​11.3.2 ⏵ 11.3.3	+1		+1	-3
	vue-router@​4.5.1 ⏵ 4.6.3	-4		+25
	sass-embedded@​1.90.0 ⏵ 1.93.3	+1		+1	-2
	vite-plugin-vue-layouts-next@​1.0.0 ⏵ 1.2.0	-2			+9
	typescript@​5.9.2 ⏵ 5.9.3			+1
	unplugin-auto-import@​20.0.0 ⏵ 20.2.0				+1
	eslint-plugin-vue@​10.4.0 ⏵ 10.6.0	-1		+1	+4
	unplugin-vue-components@​29.0.0 ⏵ 30.0.0	+1
	@​vitejs/​plugin-vue@​6.0.1 ⏵ 6.0.2
	vue@​3.5.18 ⏵ 3.5.24	+1		+1
	axios@​1.11.0 ⏵ 1.13.2		+22
	vis-timeline@​8.3.0 ⏵ 8.4.0	+1			+1
	unplugin-vue-router@​0.15.0 ⏵ 0.16.2				+8
	@​vue/​compiler-sfc@​3.5.21 ⏵ 3.5.24	+1		+1
	eslint@​9.33.0 ⏵ 9.39.1	+1
	vuetify@​3.9.7 ⏵ 3.10.11	+1		+22	+1

View full report