Rely on PNPM v11 explicitly allowed builds.

.github/workflows/release.yml

@@ -160,7 +160,7 @@ jobs:
       - name: Install Dependencies
         run: brew update && brew install protobuf pnpm
       - name: PNPM install
-        run: pnpm install --dangerously-allow-all-builds
+        run: pnpm install
       # CMake v4 is too new: https://github.com/georust/geos/issues/194
       - name: Downgrade CMake
         run: pipx install --force cmake==3.31.10
@@ -202,7 +202,7 @@ jobs:
       - name: Install Dependencies
         run: brew update && brew install protobuf pnpm
       - name: PNPM install
-        run: pnpm install --dangerously-allow-all-builds
+        run: pnpm install
       # CMake v4 is too new: https://github.com/georust/geos/issues/194
       - name: Downgrade CMake
         run: pipx install --force cmake==3.31.10
@@ -247,7 +247,7 @@ jobs:
           apps: nodejs pnpm protobuf zip
       - name: PNPM install
         shell: bash
-        run: pnpm install --dangerously-allow-all-builds
+        run: pnpm install
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: ${{ env.TOOLCHAIN_VERSION }}

pnpm-workspace.yaml

@@ -16,3 +16,7 @@ packages:
   - 'examples/wasm-guest-js'
   - 'examples/wasm-guest-ts'
   - 'guests/typescript'
+allowBuilds:
+  esbuild: true
+  protobufjs: true
+  sharp: true