fix: use literal version ranges in pnpm overrides instead of catalog refs (#1015)

Author: antfubot

pnpm-workspace.yaml

@@ -29,18 +29,24 @@ allowBuilds:
 
 overrides:
   '@nuxt/devtools': workspace:*
-  chokidar: catalog:buildtools
-  esbuild: catalog:buildtools
-  rollup: catalog:buildtools
-  semver: catalog:prod
-  typescript: catalog:cli
-  unimport: catalog:types
-  vite: catalog:buildtools
+  # NOTE: these must be literal ranges, not `catalog:` refs. pnpm's
+  # `catalog:` protocol inside `overrides` isn't understood by pnpm 9.x
+  # (e.g. the pnpm major Vercel falls back to when corepack isn't active),
+  # which silently drops the whole `overrides` config and desyncs the
+  # lockfile, breaking `pnpm install --frozen-lockfile`. Keep these in sync
+  # with the matching catalog entries below by hand.
+  chokidar: ^5.0.0
+  esbuild: ^0.28.1
+  rollup: ^4.62.2
+  semver: ^7.8.5
+  typescript: ^6.0.3
+  unimport: ^6.3.0
+  vite: ^8.1.4
   # `@vitejs/devtools@0.4` requires vue `^3.5.39`; dedupe the whole tree onto a
   # single vue (and thus a single `@vue/compiler-sfc`) to avoid duplicate-import
   # SFC codegen errors from mixed compiler versions.
-  vue: catalog:frontend
-  vue-tsc: catalog:cli
+  vue: ^3.5.39
+  vue-tsc: ^3.3.7
 catalogs:
   buildtools:
     '@discoveryjs/cli': ^2.15.0
@@ -57,21 +63,17 @@ catalogs:
     '@unocss/preset-uno': ^66.7.5
     '@vitejs/devtools': ^0.4.0
     '@vueuse/nuxt': ^14.3.0
-    chokidar: ^5.0.0
-    esbuild: ^0.28.1
     exsolve: ^1.1.0
     lightningcss: ^1.32.0
     nitropack: ^2.13.4
     nuxt: ^4.4.8
-    rollup: ^4.62.2
     shiki-codegen: ^4.3.1
     skills-npm: ^1.2.0
     turbo: ^2.10.4
     unbuild: ^3.6.1
     unocss: ^66.7.5
     unplugin-vue: ^7.2.0
     unplugin-vue-markdown: ^32.0.0
-    vite: ^8.1.4
   cli:
     '@antfu/eslint-config': ^9.1.0
     '@antfu/ni': ^30.2.0

turbo.json

@@ -1,5 +1,8 @@
 {
   "$schema": "https://turbo.build/schema.json",
+  "globalPassThroughEnv": [
+    "COREPACK_HOME"
+  ],
   "tasks": {
     "build": {
       "dependsOn": [