chore: pin difflib to github tarball in package.json

remove auto commit since it skips tests

related:
https://github.com/dependabot/dependabot-core/issues/7258
https://github.com/dependabot/dependabot-core/issues/7851
https://github.com/dependabot/dependabot-core/issues/10124

https://github.com/pnpm/pnpm/issues/6050
https://github.com/pnpm/pnpm/issues/6530
https://github.com/pnpm/pnpm/issues/8343

.github/workflows/test.yml

@@ -15,31 +15,6 @@ permissions:
   checks: write
 
 jobs:
-  fix-pnpm-lock:
-    # workaround for https://github.com/dependabot/dependabot-core/issues/7258
-    # until https://github.com/pnpm/pnpm/issues/6530 is fixed
-    if: github.triggering_actor == 'dependabot[bot]' && github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-      contents: write
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: lts/*
-          cache: 'pnpm'
-      - run: |
-          rm pnpm-lock.yaml
-          pnpm i
-      - uses: stefanzweifel/git-auto-commit-action@v5
-        with:
-          commit_message: 'chore: fix pnpm install'
-          commit_user_name: dependabot[bot]
-          commit_user_email: 49699333+dependabot[bot]@users.noreply.github.com
-          commit_author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
   vitest:
     runs-on: ubuntu-latest
     timeout-minutes: 10

package.json

@@ -198,5 +198,10 @@
     "packageManager": "pnpm@9.12.3",
     "engines": {
         "node": ">=22"
+    },
+    "pnpm": {
+        "overrides": {
+            "difflib": "https://codeload.github.com/postlight/difflib.js/tar.gz/32e8e38c7fcd935241b9baab71bb432fd9b166ed"
+        }
     }
 }