pnpm: Add pnpmfile hack for outdated estimo deps (#40549)

Estimo doesn't seem to be actively maintained despite having strictly
versioned deps. Add a pnpmfile hack to change these to caret deps, so we
can update `ws` and `nanoid` to versions that don't have dependabot
complaining.

.pnpmfile.cjs

@@ -82,6 +82,16 @@ function fixDeps( pkg ) {
 		}
 	}
 
+	// Seemingly unmaintained upstream, and has strict deps that are outdated.
+	// https://github.com/mbalabash/estimo/issues/50
+	if ( pkg.name === 'estimo' ) {
+		for ( const [ dep, ver ] of Object.entries( pkg.dependencies ) ) {
+			if ( ver.match( /^\d+(\.\d+)+$/ ) ) {
+				pkg.dependencies[ dep ] = '^' + ver;
+			}
+		}
+	}
+
 	// Outdated dependency.
 	// No upstream bug link yet.
 	if ( pkg.name === 'rollup-plugin-postcss' && pkg.dependencies.cssnano === '^5.0.1' ) {