Update dependency pnpm to v11.20.0 [SECURITY] (#34250)

Co-authored-by: Michael Telatynski <7t3chguy@gmail.com>

pnpm-workspace.yaml

@@ -57,10 +57,17 @@ packageExtensions:
         peerDependencies:
             # Silence warning
             vite: "^8.0.0"
+    "@vitest/mocker":
+        peerDependencies:
+            vite: "^8.0.0"
+    vitest:
+        peerDependencies:
+            vite: "^8.0.0"
 
 allowBuilds:
     # Needed to make the git dependency in layered.sh happy
     matrix-js-sdk: true
+    "matrix-js-sdk@git+https://github.com/matrix-org/matrix-js-sdk.git": true
     # Installs the CLI, which we do not need
     "@sentry/cli": false
     # Installs nx cloud client, which we do not need
@@ -152,8 +159,8 @@ overrides:
     # https://github.com/advisories/GHSA-fx2h-pf6j-xcff
     # https://github.com/advisories/GHSA-4w7w-66w2-5vf9
     # https://github.com/advisories/GHSA-v6wh-96g9-6wx3
-    vite@5: ^6.4.3
-    vite@6 <6.4.3: ^6.4.3
+    # vitepress is the only consumer of vite <8; pin it to a patched vite 6 (it does not support vite 8).
+    vitepress>vite: ^6.4.3
     # Workaround for https://github.com/electron/electron/issues/51619
     yauzl: "^3.3.1"
     # Convince api-extractor to use a newer Typescript version