Hugh Hackman
23c86bf2d9
When pnpm-lock.yaml is present, use pnpm for install, lint, type-check, format check, tests, and security audit instead of npm. Repos using npm are unaffected (falls back to existing npm behavior). This fixes the npm/pnpm inconsistency in headlamp-polaris-plugin where local development uses pnpm but CI used npm, causing: - Different transitive dependency resolution (TypeScript not hoisted) - Different audit results (pnpm audit vs npm audit) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>