chore: Use pnpm 11 catalogs to force certain dependencies on common v…

.github/workflows/api-docs.yml

@@ -16,6 +16,8 @@ jobs:
       contents: read
     steps:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
+        with:
+          pnpm-version: 11
       - name: Generate API documentation
         run: |
           pnpm generate

.github/workflows/auto-fix-lint.yml

@@ -24,6 +24,7 @@ jobs:
           ref: ${{ github.head_ref }}
           persist-credentials: true
           token: ${{ steps.app-token.outputs.token }}
+          pnpm-version: 11
       - run: pnpm lint:fix
       - name: Commit Changes if needed
         env:

.github/workflows/auto-gen.yml

@@ -24,6 +24,7 @@ jobs:
           ref: ${{ github.head_ref }}
           persist-credentials: true
           token: ${{ steps.app-token.outputs.token }}
+          pnpm-version: 11
       - name: Generate and apply patches
         shell: bash
         run: |

.github/workflows/build.yml

@@ -23,6 +23,7 @@ jobs:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
         with:
           node-version: ${{ matrix.node-version }}
+          pnpm-version: 11
       # type-check can run in parallel to unit tests
       - name: Type Tests
         id: test-type
@@ -51,6 +52,8 @@ jobs:
       contents: read
     steps:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
+        with:
+          pnpm-version: 11
       - name: Enforce generated code is up to date
         shell: bash
         run: |

.github/workflows/bump.yml

@@ -28,6 +28,7 @@ jobs:
           token: ${{ steps.app-token.outputs.token }}
           ref: 'main'
           persist-credentials: true
+          pnpm-version: 11
       - name: Bump version
         id: bump
         uses: sap/cloud-sdk-js/.github/actions/changesets-fixed-version-bump@main
@@ -67,6 +68,7 @@ jobs:
         uses: sap/cloud-sdk-js/.github/actions/setup@main
         with:
           node-version: ${{ vars.DEFAULT_NODE_VERSION }}
+          pnpm-version: 11
       - name: Fetch full commit history (blobless)
         run: git fetch --filter=blob:none --unshallow
 

.github/workflows/draft-release.yml

@@ -13,6 +13,8 @@ jobs:
       contents: write
     steps:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
+        with:
+          pnpm-version: 11
       - name: Get Changelog
         id: get-changelog
         uses: sap/cloud-sdk-js/.github/actions/get-changelog@main

.github/workflows/e2e-tests.yml

@@ -26,6 +26,8 @@ jobs:
       contents: read
     steps:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
+        with:
+          pnpm-version: 11
       - name: Create .env file
         env:
           AICORE_SERVICE_KEY: ${{ secrets[matrix.secret-name] }} # zizmor: ignore[overprovisioned-secrets]

.github/workflows/fosstars.yml

@@ -24,14 +24,15 @@ jobs:
       contents: write
     steps:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
+        with:
+          pnpm-version: 11
       # OWASP runs in Docker and cannot see the runner's pnpm install. Put the
       # standalone pnpm 11 bundle in the mounted workspace instead.
       - name: Install pnpm for OWASP container
         shell: bash
-        env:
-          PNPM_VERSION: 11.13.0
         run: |
           archive="${RUNNER_TEMP}/pnpm-linux-x64-musl.tar.gz"
+          PNPM_VERSION="$(pnpm --version)"
           curl --proto "=https" --tlsv1.2 -fsSL \
             "https://github.com/pnpm/pnpm/releases/download/v${PNPM_VERSION}/pnpm-linux-x64-musl.tar.gz" \
             -o "${archive}"

.github/workflows/issue-reply.yml

@@ -37,6 +37,7 @@ jobs:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
         with:
           registry-token: ${{ secrets.NPM_TOKEN_ARTIFACTORY }}
+          pnpm-version: 11
 
       - name: Generate answer
         id: answer

.github/workflows/pnpm-update.yml

@@ -25,6 +25,7 @@ jobs:
           persist-credentials: true
           token: ${{ steps.app-token.outputs.token }}
           skip-install: 'true'
+          pnpm-version: 11
 
       - name: Update Transitive Dependencies
         run: |

.github/workflows/publish-canary.yml

@@ -25,6 +25,7 @@ jobs:
           node-version: 24 # Will install npm 11 needed for trusted publishing
           pnpm-install-args: ''
           package-manager-cache: false
+          pnpm-version: 11
 
       - name: prepare canary changeset
         run: |

.github/workflows/publish-release.yml

@@ -34,6 +34,7 @@ jobs:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
         with:
           package-manager-cache: false
+          pnpm-version: 11
       - name: Determine Release Notes PR Branch Name
         id: determine-branch-name
         run: |
@@ -79,6 +80,7 @@ jobs:
         with:
           node-version: 24 # Will install npm 11 needed for trusted publishing
           package-manager-cache: false
+          pnpm-version: 11
       - name: publish
         run: |
           pnpm changeset publish

.github/workflows/smoke-tests.yml

@@ -16,6 +16,7 @@ jobs:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
         with:
           node-version: '24'
+          pnpm-version: 11
       - name: Update smoke test dependencies
         # Always use latest SDK packages for smoke tests to ensure they are tested against the latest version.
         run: pnpm --filter @sap-ai-sdk/smoke-tests update '@sap-ai-sdk/*' --no-save --ignore-scripts

.github/workflows/spec-update.yaml

@@ -81,6 +81,7 @@ jobs:
         with:
           persist-credentials: true
           token: ${{ secrets.GITHUB_TOKEN }}
+          pnpm-version: 11
 
       - name: 'Checkout or Create Branch'
         id: branch

package.json

@@ -42,11 +42,11 @@
     "@sap-ai-sdk/core": "workspace:^",
     "@sap-ai-sdk/foundation-models": "workspace:^",
     "@sap-ai-sdk/orchestration": "workspace:^",
-    "@sap-cloud-sdk/connectivity": "4.8.0",
-    "@sap-cloud-sdk/generator-common": "4.8.0",
-    "@sap-cloud-sdk/http-client": "4.8.0",
-    "@sap-cloud-sdk/openapi-generator": "4.8.0",
-    "@sap-cloud-sdk/util": "4.8.0",
+    "@sap-cloud-sdk/connectivity": "catalog:",
+    "@sap-cloud-sdk/generator-common": "catalog:",
+    "@sap-cloud-sdk/http-client": "catalog:",
+    "@sap-cloud-sdk/openapi-generator": "catalog:",
+    "@sap-cloud-sdk/util": "catalog:",
     "@types/mock-fs": "4.13.4",
     "@types/node": "22.20.1",
     "@typescript/native": "npm:typescript@7.0.2",
@@ -62,6 +62,6 @@
     "typedoc": "0.28.20",
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "vitest": "4.1.10",
-    "zod": "4.4.3"
+    "zod": "catalog:"
   }
 }

packages/ai-api/package.json

@@ -41,8 +41,8 @@
   },
   "dependencies": {
     "@sap-ai-sdk/core": "workspace:^",
-    "@sap-cloud-sdk/connectivity": "^4.8.0",
-    "@sap-cloud-sdk/util": "^4.8.0"
+    "@sap-cloud-sdk/connectivity": "catalog:",
+    "@sap-cloud-sdk/util": "catalog:"
   },
   "devDependencies": {
     "vitest": "4.1.10"

packages/core/package.json

@@ -38,10 +38,10 @@
     "lint:fix": "oxlint --fix && oxfmt ."
   },
   "dependencies": {
-    "@sap-cloud-sdk/connectivity": "^4.8.0",
-    "@sap-cloud-sdk/http-client": "^4.8.0",
-    "@sap-cloud-sdk/openapi": "^4.8.0",
-    "@sap-cloud-sdk/util": "^4.8.0"
+    "@sap-cloud-sdk/connectivity": "catalog:",
+    "@sap-cloud-sdk/http-client": "catalog:",
+    "@sap-cloud-sdk/openapi": "catalog:",
+    "@sap-cloud-sdk/util": "catalog:"
   },
   "devDependencies": {
     "vitest": "4.1.10"

packages/foundation-models/package.json

@@ -44,9 +44,9 @@
   "dependencies": {
     "@sap-ai-sdk/ai-api": "workspace:^",
     "@sap-ai-sdk/core": "workspace:^",
-    "@sap-cloud-sdk/connectivity": "^4.8.0",
-    "@sap-cloud-sdk/http-client": "^4.8.0",
-    "@sap-cloud-sdk/util": "^4.8.0"
+    "@sap-cloud-sdk/connectivity": "catalog:",
+    "@sap-cloud-sdk/http-client": "catalog:",
+    "@sap-cloud-sdk/util": "catalog:"
   },
   "devDependencies": {
     "vitest": "4.1.10"

packages/langchain/package.json

@@ -42,16 +42,16 @@
     "@sap-ai-sdk/core": "workspace:^",
     "@sap-ai-sdk/foundation-models": "workspace:^",
     "@sap-ai-sdk/orchestration": "workspace:^",
-    "@sap-cloud-sdk/connectivity": "^4.8.0",
-    "@sap-cloud-sdk/util": "^4.8.0"
+    "@sap-cloud-sdk/connectivity": "catalog:",
+    "@sap-cloud-sdk/util": "catalog:"
   },
   "devDependencies": {
-    "@langchain/core": "1.2.4",
-    "@langchain/langgraph": "1.4.8",
+    "@langchain/core": "catalog:",
+    "@langchain/langgraph": "catalog:",
     "vitest": "4.1.10",
-    "zod": "4.4.3"
+    "zod": "catalog:"
   },
   "peerDependencies": {
-    "@langchain/core": "^1.2.3"
+    "@langchain/core": "catalog:"
   }
 }

packages/openai/package.json

@@ -46,8 +46,8 @@
   "dependencies": {
     "@sap-ai-sdk/ai-api": "workspace:^",
     "@sap-ai-sdk/core": "workspace:^",
-    "@sap-cloud-sdk/connectivity": "^4.8.0",
-    "@sap-cloud-sdk/util": "^4.8.0"
+    "@sap-cloud-sdk/connectivity": "catalog:",
+    "@sap-cloud-sdk/util": "catalog:"
   },
   "peerDependencies": {
     "openai": "^6.49.0 || ^7.0.0"

packages/orchestration/package.json

@@ -45,12 +45,12 @@
     "@sap-ai-sdk/ai-api": "workspace:^",
     "@sap-ai-sdk/core": "workspace:^",
     "@sap-ai-sdk/prompt-registry": "workspace:^",
-    "@sap-cloud-sdk/util": "^4.8.0",
+    "@sap-cloud-sdk/util": "catalog:",
     "yaml": "^2.9.0"
   },
   "devDependencies": {
-    "@sap-cloud-sdk/connectivity": "4.8.0",
-    "@sap-cloud-sdk/http-client": "4.8.0",
+    "@sap-cloud-sdk/connectivity": "catalog:",
+    "@sap-cloud-sdk/http-client": "catalog:",
     "vitest": "4.1.10"
   }
 }

packages/prompt-registry/package.json

@@ -44,7 +44,7 @@
   },
   "dependencies": {
     "@sap-ai-sdk/core": "workspace:^",
-    "zod": "^4.4.3"
+    "zod": "catalog:"
   },
   "devDependencies": {
     "vitest": "4.1.10"

packages/rpt/package.json

@@ -46,9 +46,9 @@
   "dependencies": {
     "@sap-ai-sdk/ai-api": "workspace:^",
     "@sap-ai-sdk/core": "workspace:^",
-    "@sap-cloud-sdk/connectivity": "^4.8.0",
-    "@sap-cloud-sdk/http-client": "^4.8.0",
-    "@sap-cloud-sdk/util": "^4.8.0"
+    "@sap-cloud-sdk/connectivity": "catalog:",
+    "@sap-cloud-sdk/http-client": "catalog:",
+    "@sap-cloud-sdk/util": "catalog:"
   },
   "devDependencies": {
     "vitest": "4.1.10"