chore(deps): update pnpm to v11.27.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pnpm (source)	11.26.0 → 11.27.0

---

Release Notes

pnpm/pnpm (pnpm)

v11.27.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 1am and before 5am"
• Automerge
  • "after 2am and before 5am"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
nitro.build	Ready	Preview	Sep 17, 2026 5:26pm UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: ef571488-3ba5-4aa3-861a-261f1c0442c9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/nitro@4634

commit: d83fcf5

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 38 workspace projects
? Verifying lockfile against supply-chain policies (1469 entries)...
✓ Lockfile passes supply-chain policies (1469 entries in 26s)
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 95, reused 0, downloaded 0, added 0
Progress: resolved 110, reused 0, downloaded 0, added 0
Progress: resolved 121, reused 0, downloaded 0, added 0
Progress: resolved 127, reused 0, downloaded 0, added 0
Progress: resolved 130, reused 0, downloaded 0, added 0
Progress: resolved 135, reused 0, downloaded 0, added 0
Progress: resolved 137, reused 0, downloaded 1, added 0
Progress: resolved 138, reused 0, downloaded 1, added 0
Progress: resolved 143, reused 0, downloaded 1, added 0
Progress: resolved 237, reused 0, downloaded 1, added 0
Progress: resolved 382, reused 0, downloaded 1, added 0
/tmp/renovate/repos/github/nitrojs/nitro/examples/vite-ssr-tss-react:
[ERR_PNPM_TRUST_DOWNGRADE] High-risk trust downgrade for "undici-types@6.21.0" (possible package takeover)

This error happened while installing the dependencies of @types/node@22.20.3

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had provenance attestation, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.