lock pnpm version and node version

.github/actions/install-deps/action.yml

@@ -4,11 +4,11 @@ inputs:
   NODE_VERSION:
     description: 'The version of Node.js to use'
     required: true
-    default: '19.x'
+    default: '20.x'
   PNPM_VERSION:
     description: 'The version of PNPM to use'
     required: true
-    default: '9.x'
+    default: '8.x'
 runs:
   using: composite
   steps:

.npmrc

@@ -0,0 +1,53 @@
+## PNPM related ###############
+## https://pnpm.io/npmrc      #
+###############################
+
+# Not always possible to be strict, but if it works for you, keep it to true.
+# https://pnpm.io/next/npmrc#strict-peer-dependencies
+strict-peer-dependencies=true
+
+# https://pnpm.io/npmrc#auto-install-peers
+auto-install-peers=true
+
+# Helps locating duplicates, default in v8
+# https://pnpm.io/next/npmrc#use-lockfile-v6
+use-lockfile-v6=true
+
+# Will fix duplicates due to peer-dependencies (>=7.29.0), default in v8
+# https://github.com/pnpm/pnpm/releases/tag/v7.29.0
+dedupe-peer-dependents=true
+
+# Helps with peer-deps (>=7.23.0), default in v8
+# https://pnpm.io/npmrc#resolve-peers-from-workspace-root
+resolve-peers-from-workspace-root=true
+
+# default to 'lowest' in v8.5.0
+# set to highest for reasons specified here: https://github.com/pnpm/pnpm/issues/6463
+# https://pnpm.io/npmrc#resolution-mode
+resolution-mode=highest
+
+# Default in 8.1.0 to fix issues with root/workspaces hoisting
+# https://pnpm.io/npmrc#dedupe-direct-deps
+dedupe-direct-deps=false
+
+# Pinlock to exact version (default is '^')
+# https://pnpm.io/npmrc#save-prefix
+# see also how save-workspace-protocol affect this https://pnpm.io/npmrc#save-workspace-protocol
+save-prefix=''
+
+# Most of the time, you want to use the rolling protocol for monorepos
+# https://pnpm.io/npmrc#save-workspace-protocol
+save-workspace-protocol=rolling
+
+# Specifies which exact Node.js version should be used for the project's runtime. 
+# pnpm will automatically install the specified version of Node.js and use it 
+# for running pnpm run commands or the pnpm node command.
+# https://pnpm.io/npmrc#save-workspace-protocol
+use-node-version=20.10.0
+
+# Prevent contributors of your project from adding new incompatible dependencies
+# This way, even if someone is using Node.js v16, they will not be able to install
+# a new dependency that doesn't support Node.js v20.10.0
+# https://pnpm.io/npmrc#use-node-version
+node-version=20.10.0
+engine-strict=true

package.json

@@ -3,6 +3,10 @@
   "private": true,
   "version": "0.0.0",
   "type": "module",
+  "engines": {
+    "node": "^20",
+    "pnpm": "^8"
+  },
   "scripts": {
     "dev": "vite",
     "test": "vitest",