chore(deps): bump pnpm 11.1.2 to 11.1.3

Local dev was already on 11.1.3; fleet CI was pinned to
11.1.2 which surfaced as packageManager version mismatch
errors across the fleet.

Refresh:
  external-tools.json: version 11.1.2 -> 11.1.3 plus all 7
    platform SRIs (darwin-arm64, linux-{x64,arm64}{,-musl},
    win-{x64,arm64}) plus the npm-registry tarball SHA-512
    for darwin-x64.
  package.json: packageManager pnpm@11.1.2 -> pnpm@11.1.3.

SRIs from the pnpm v11.1.3 GitHub release assets via
openssl dgst -sha256 -binary | base64. darwin-x64 SHA-512
is the npm-registry dist.integrity from npm.

Pre-commit bypassed (SOCKET_API_KEY 401, user-authorized
via 'Allow lint bypass').

Author: jdalton

external-tools.json

@@ -118,43 +118,43 @@
     "notes": "pnpm upstream publishes 7 platform-native binaries: linux-{x64,arm64}{,-musl}, darwin-arm64, win-{x64,arm64}. The linux-*-musl entries are first-class assets (pnpm-linux-{x64,arm64}-musl.tar.gz), NOT aliases of the glibc tarballs — their hashes are genuinely distinct. Do not \"simplify\" them by pointing at the glibc asset; the binaries are linked against different libcs and only the matching one runs on its target. darwin-x64 is intentionally a different shape: upstream dropped the SEA binary in 11.0.5 because of an upstream Node.js LIEF/Mach-O bug (nodejs/node#62893) that the Node team has declined to fix. Intel Mac instead installs the npm-registry JS tarball + runs it through the system Node — see source/binary fields below.",
     "description": "Fast, disk space efficient package manager",
     "repository": "github:pnpm/pnpm",
-    "version": "11.1.2",
+    "version": "11.1.3",
     "release": "asset",
     "checksums": {
       "darwin-arm64": {
         "asset": "pnpm-darwin-arm64.tar.gz",
-        "integrity": "sha256-L0a8t6w8aTr3LgbmhGezqRJ8vyokt3g4K8i+r/hGOu4="
+        "integrity": "sha256-wlgxCSbPqqWbUClrwN78pmpGZ5nrBF1Pdv4/w8XmVl0="
       },
       "darwin-x64": {
-        "asset": "pnpm-11.1.2.tgz",
-        "integrity": "sha512-QVocwll0cx51RVwUaDcb50xapft2IbUNQFbSIkUWCfEUEvI/1gLmFp8eBgRmZB95hZfhvpYaEGiINqZ7FlaUmQ==",
+        "asset": "pnpm-11.1.3.tgz",
+        "integrity": "sha512-yFNX/hfKEt0j3XBxgiZm39fjy3b+IU4zcLXqL7NPKiMRhVCbY+cX880KyzjdP42CvNXoFyQArmeLcOpPvtCJbQ==",
         "source": "npm-registry",
         "binary": "package/dist/pnpm.cjs",
         "notes": "Intel Mac uses the npm-registry JS tarball + system Node (no SEA binary). Upstream dropped darwin-x64 SEA in pnpm 11.0.5 due to nodejs/node#62893 (upstream LIEF/Mach-O bug Node has declined to fix)."
       },
       "linux-arm64": {
         "asset": "pnpm-linux-arm64.tar.gz",
-        "integrity": "sha256-piypVPJ8sElNKfGmMtHXqKBtLDYIpGRfXAcUoyBNoCs="
+        "integrity": "sha256-NWdqPazH4yXdaskNs1/UJfF3SOqAlcLqbUfCN1qXT80="
       },
       "linux-arm64-musl": {
         "asset": "pnpm-linux-arm64-musl.tar.gz",
-        "integrity": "sha256-wxX4//gyNSaG/V4NZ6HHIauAu5A7qDdqjE5J5eNBoJ4="
+        "integrity": "sha256-TTzpFkZiH1VR+XI3RN8s56LysAoji5V9X8K62I6XLq0="
       },
       "linux-x64": {
         "asset": "pnpm-linux-x64.tar.gz",
-        "integrity": "sha256-+C92FXLZYhxaZGzMAKHs7Ez1g51mtxRJfmyhDNLghu4="
+        "integrity": "sha256-jlaFwivAXoCSrbBWuz2EjD15JqLJCe0CgFIJjVnbnm4="
       },
       "linux-x64-musl": {
         "asset": "pnpm-linux-x64-musl.tar.gz",
-        "integrity": "sha256-PJjfpfDCuobrSJFjGBCNv6CgcQ2sRoYbP2TXLj3v2gA="
+        "integrity": "sha256-cp5ISnyiwDGeGItM6XUjA0qKmROmgzyK/cFEsDqf8mA="
       },
       "win-arm64": {
         "asset": "pnpm-win32-arm64.zip",
-        "integrity": "sha256-boRXbuU6lI1K5vgE1ff9OoKVPr5wd/wP3+AEqHS8tDg="
+        "integrity": "sha256-xP+pmFO6hyTQUm1bUmN6puww89KtlYYm6wjRCjEyK/E="
       },
       "win-x64": {
         "asset": "pnpm-win32-x64.zip",
-        "integrity": "sha256-RBUJuopehgt8n0HjNxqrbS3adqBxqpWru+3airXIR5g="
+        "integrity": "sha256-RtQrqdFBYF38ZYGaSYsnlxxFicfvE5rYDF6dp6XDSwY="
       }
     }
   }

package.json

@@ -153,5 +153,5 @@
     "node": ">=18.20.8",
     "pnpm": ">=11.1.2"
   },
-  "packageManager": "pnpm@11.1.2"
+  "packageManager": "pnpm@11.1.3"
 }