Disable pnpm's implicit install-on-run in favor of explicit installs

.github/workflows/ci-host.yaml

@@ -16,6 +16,7 @@ on:
       - ".github/workflows/ci-host.yaml"
       - "package.json"
       - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
       # CI boot path: see comment on the equivalent block in ci.yaml.
       - ".mise.toml"
       - ".github/actions/**"
@@ -149,7 +150,7 @@ jobs:
           use_cache=true
           while IFS= read -r file; do
             case "$file" in
-              packages/realm-server/*|packages/runtime-common/*|packages/postgres/*|packages/boxel-ui/*|package.json|pnpm-lock.yaml)
+              packages/realm-server/*|packages/runtime-common/*|packages/postgres/*|packages/boxel-ui/*|package.json|pnpm-lock.yaml|pnpm-workspace.yaml)
                 use_cache=false
                 echo "Index-behavior change detected: $file"
                 break

.github/workflows/ci-software-factory.yaml

@@ -20,6 +20,7 @@ on:
       - "packages/software-factory/**"
       - "package.json"
       - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
       # CI boot path: see comment on the equivalent block in ci.yaml.
       - ".mise.toml"
       - ".github/actions/**"

.github/workflows/ci.yaml

@@ -54,6 +54,7 @@ jobs:
               - 'packages/runtime-common/**'
               - 'package.json'
               - 'pnpm-lock.yaml'
+              - 'pnpm-workspace.yaml'
               # CI boot path. Each gated suite runs `./.github/actions/init`
               # (which calls `jdx/mise-action`, sourcing `.mise.toml` for tool
               # versions) and then `mise run test-services:*` (which sources

.github/workflows/pr-boxel-ui.yml

@@ -8,6 +8,7 @@ on:
       - ".github/workflows/pr-boxel-ui.yml"
       - "package.json"
       - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
 
 permissions:
   contents: read

.github/workflows/preview-host.yml

@@ -10,6 +10,7 @@ on:
       - ".github/workflows/preview-host.yml"
       - "package.json"
       - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
 
 concurrency:
   group: preview-host-${{ github.head_ref || github.run_id }}

pnpm-workspace.yaml

@@ -257,6 +257,15 @@ catalog:
   yaml: ^2.5.1
   yargs: ^17.5.1
 
+# pnpm 11 defaults this to `install`, making every `pnpm run` first check
+# node_modules freshness and silently run a full install when the check
+# fails. The check never passes in CI, so each of the ~9 services `run-p`
+# boots kicks off its own concurrent workspace-wide install into the same
+# node_modules; when they collide badly enough, start:matrix never reaches
+# `docker run` and the shard dies with "Failed to reach Synapse". Disabling
+# restores pnpm 10 behavior: scripts run against node_modules as-is.
+verifyDepsBeforeRun: false
+
 minimumReleaseAge: 1440
 minimumReleaseAgeExclude:
   - "@glint/ember-tsc"