fix: align with using yarn, remove pnpm in workflow

[zengzengzenghuy]

No description provided.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	react@​18.0.0
	react-twitter-embed@​4.0.4
	prism-react-renderer@​1.3.5
	react-player@​2.15.1
	sass-loader@​13.3.3
	react-dom@​18.0.0
	react-hook-form@​7.47.0
	sass@​1.56.1

View full report

[zengzengzenghuy]

Regarding security-audit failure:
The vulnerability is low and the reason comes from webpack. To fix it, we need to upgrade webpack to >=5.104.1, but it will break Docusaurus 3.9.2's ProgressPlugin. We can ignore the error.