Move shared dependencies into the pnpm catalog (#2330)