[Tracking]: Dependencies related governance [JS/pnpm] [Rust/Cargo] #7156
Description
What subject does this issue tracking?
Summary
Since Rspack contains a large number of phantom dependency problems, which is not conducive to developers, we need to govern the dependencies in both js and Rust sides.
benefits
- more stable CI test and e2e results
- more readable dependencies relationship and easier to update the deps version
- this is a pre-task for chore(deps): add check-dependency-version for devDependencies #6323, better and simple dependencies graph will enhance the install speed
### Tasks
- [ ] https://github.com/web-infra-dev/rspack/pull/7094
- [ ] https://github.com/web-infra-dev/rspack/pull/7178
- [x] ci: `.pnpm/node_modules/<MODULE>/node_modules/dep_name` Snapshot serializer https://github.com/web-infra-dev/rspack/pull/8137
- [ ] https://github.com/web-infra-dev/rspack/pull/7130
- [ ] https://github.com/web-infra-dev/rspack/pull/6323
- [ ] #7208
- [ ] https://github.com/web-infra-dev/rspack/issues/7341
- [ ] #7403
- [ ] https://github.com/web-infra-dev/rspack/pull/7211
- [ ] https://github.com/web-infra-dev/rspack/pull/7235
- [x] Update the strategy of renovate in JS side https://github.com/web-infra-dev/rspack/pull/6429 https://github.com/web-infra-dev/rspack/pull/8294
- [x] Update the strategy of renovate in Rust side https://github.com/web-infra-dev/rspack/pull/6596 https://github.com/web-infra-dev/rspack/pull/8294
- [ ] Upgrade to pnpm9.5 to use "catelog:" protocol https://pnpm.io/catalogs (pending by renovate support https://github.com/renovatebot/renovate/issues/30079 ) https://github.com/web-infra-dev/rspack/pull/7065