fix(manager/npm): use --config.ignore-scripts=true for pnpm dedupe

[liby]

Changes

• Reverted the revert commit 3609cdd.
• Adjusted the pnpm dedupe command to use --config.ignore-scripts=true to circumvent potential issues brought about by having to determine the pnpm version.

Context

The initial strategy was to employ semver.coerce to manage version ranges when verifying the pnpm version. The goal was to apply pnpm dedupe --ignore-scripts only for pnpm versions 8.8.0 and above, as lower versions would throw an error.

However, a new approach was discovered which allows for script ignoring during deduplication in all pnpm versions by using the --config.ignore-scripts=true flag with the pnpm dedupe command.

Not only does this prevent the aforementioned error in versions lower than 8.8.0, but it also ensures consistent behavior across different pnpm versions regarding script execution during the pnpm dedupe process.

This approach eliminates the need for additional checks to determine the pnpm version, reducing the potential for other issues that might arise from unhandled special cases. The inspiration for this solution came from a comment on a related pnpm GitHub issue.

Relevant Issues:

• pnpm dedupe fails if package.json engines is not pinned #25201
• Composer Not Found in Renovate Environment #24417

I have tested the changes in a separate repository to ensure the fix works as expected. The test repository can be found here: Test Repository.

Please let me know if there are any additional changes needed or if there's anything else I can do to assist.

Documentation (please check one with an [x])

• I have updated the documentation, or
• No documentation update is required

How I've tested my work (please select one)

I have verified these changes via:

• Code inspection only, or
• Newly added/modified unit tests, or
• No unit tests but ran on a real repository, or
• Both unit tests + ran on a real repository

[renovate-release]

🎉 This PR is included in version 37.19.3 🎉

The release is available on:

• GitHub release
• 37.19.3

Your semantic-release bot 📦🚀