A Dependabot bump left pnpm-lock.yaml without @volar/typescript. CI failed at pnpm install --frozen-lockfile.
Fix: run pnpm install --no-frozen-lockfile once, then check that --frozen-lockfile passes, and commit the lockfile.
With --lockfile-only you do not touch node_modules. Use it when node_modules comes from another environment, such as a devcontainer.