Follow-up: revalidate pnpm/action-setup v6 and remove temporary ignore

[bryce-seefieldt]

Background

A temporary Dependabot ignore is active for pnpm/action-setup due to CI failures observed when upgrading to v6.

Evidence

• Merged remediation PR: chore(ci)(deps): bump pnpm/action-setup from 5.0.0 to 6.0.1 in the gha-all group across 1 directory #99
• Representative failing CI run (install/frozen lockfile parse): https://github.com/bryce-seefieldt/portfolio-docs/actions/runs/25224067909

Objective

Validate whether pnpm/action-setup v6 can be safely adopted and then remove the temporary ignore.

Timebox

• Target validation PR window: week of 2026-05-18
• Hard review/decision date: 2026-06-01

Acceptance Criteria

• Open focused validation PR that only bumps pnpm/action-setup to v6
• Validation PR passes ci/quality, ci/build, and ci/policy-consistency
• At least one subsequent merged PR remains green with v6 in place
• Remove temporary ignore from .github/dependabot.yml
• Update runbook note to mark exception closed

Ownership

• Owner: Maintainer on-call

Notes

• Calendar reminder: set a reminder for 2026-06-01 to review and either lift the exception or renew with rationale.

[bryce-seefieldt]

Follow-up implementation PR opened: https://github.com/bryce-seefieldt/portfolio-docs/pull/105\n\nThis PR links the temporary exception docs/config to issue #103 and aligns label guidance with repository labels.