chore(ci): bump socket-registry SHA + migrate to pnpm v11.0.0-rc.0 (#1193)

Author: jdalton

.github/workflows/ci.yml

@@ -109,7 +109,7 @@ jobs:
           export default { text, view, renderToString, renderToStringWithWidth, printComponent, eprintComponent, getTerminalSize, TuiRenderer, init }
           CODE
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
 
@@ -168,7 +168,7 @@ jobs:
           export default { text, view, renderToString, renderToStringWithWidth, printComponent, eprintComponent, getTerminalSize, TuiRenderer, init }
           CODE
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
 
@@ -234,7 +234,7 @@ jobs:
           export default { text, view, renderToString, renderToStringWithWidth, printComponent, eprintComponent, getTerminalSize, TuiRenderer, init }
           CODE
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
           node-version: ${{ matrix.node-version }}
@@ -310,7 +310,7 @@ jobs:
           export default { text, view, renderToString, renderToStringWithWidth, printComponent, eprintComponent, getTerminalSize, TuiRenderer, init }
           CODE
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
           node-version: ${{ matrix.node-version }}

.github/workflows/provenance.yml

@@ -51,7 +51,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
 
@@ -91,7 +91,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
           registry-url: 'https://registry.npmjs.org'
@@ -141,7 +141,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
           registry-url: 'https://registry.npmjs.org'

.github/workflows/weekly-update.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
 
@@ -61,7 +61,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           checkout: 'false'
 
@@ -76,7 +76,7 @@ jobs:
           git checkout -b "$BRANCH_NAME"
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         with:
           gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
 
@@ -303,7 +303,7 @@ jobs:
             test.log
           retention-days: 7
 
-      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
         if: always()
 
   notify:

.npmrc

@@ -1,15 +1,4 @@
-# Suppress pnpm build script warnings.
-ignore-scripts=true
-
-# Suppress pnpm workspace warnings
-link-workspace-packages=false
-loglevel=error
-prefer-workspace-packages=false
-
-# Minimum release age for npm v11+ (days).
-# pnpm equivalent is in pnpm-workspace.yaml (minimumReleaseAge).
+# npm v11+ settings (not pnpm — pnpm v11 only reads auth/registry from .npmrc).
 min-release-age=7
-
-# Trust policy - prevent downgrade attacks
 trust-policy=no-downgrade
-trust-policy-exclude[]=undici@6.21.3
+trust-policy-exclude[]=undici@6.21.3

package.json

@@ -1,11 +1,11 @@
 {
   "name": "socket-cli-monorepo",
   "version": "0.0.0",
-  "packageManager": "pnpm@10.33.0",
+  "packageManager": "pnpm@11.0.0-rc.0",
   "private": true,
   "engines": {
     "node": ">=25.9.0",
-    "pnpm": ">=10.33.0"
+    "pnpm": ">=11.0.0-rc.0"
   },
   "scripts": {
     "// Build": "",
@@ -139,67 +139,6 @@
     "yoctocolors-cjs": "catalog:",
     "zod": "catalog:"
   },
-  "pnpm": {
-    "overrides": {
-      "@octokit/graphql": "catalog:",
-      "@octokit/request-error": "catalog:",
-      "@sigstore/sign": "4.1.0",
-      "@socketsecurity/lib": "catalog:",
-      "aggregate-error": "catalog:",
-      "ansi-regex": "catalog:",
-      "brace-expansion": "catalog:",
-      "defu": ">=6.1.6",
-      "emoji-regex": "catalog:",
-      "es-define-property": "catalog:",
-      "es-set-tostringtag": "catalog:",
-      "function-bind": "catalog:",
-      "glob": ">=13.0.6",
-      "globalthis": "catalog:",
-      "gopd": "catalog:",
-      "graceful-fs": "catalog:",
-      "has-property-descriptors": "catalog:",
-      "has-proto": "catalog:",
-      "has-symbols": "catalog:",
-      "has-tostringtag": "catalog:",
-      "hasown": "catalog:",
-      "https-proxy-agent": "catalog:",
-      "indent-string": "catalog:",
-      "is-core-module": "catalog:",
-      "isarray": "catalog:",
-      "lodash": "catalog:",
-      "npm-package-arg": "catalog:",
-      "packageurl-js": "catalog:",
-      "path-parse": "catalog:",
-      "qs": ">=6.15.0",
-      "safe-buffer": "catalog:",
-      "safer-buffer": "catalog:",
-      "semver": "catalog:",
-      "set-function-length": "catalog:",
-      "shell-quote": "catalog:",
-      "side-channel": "catalog:",
-      "signal-exit": "4.1.0",
-      "string_decoder": "catalog:",
-      "string-width": "catalog:",
-      "strip-ansi": "catalog:",
-      "tiny-colors": "catalog:",
-      "typedarray": "catalog:",
-      "undici": "catalog:",
-      "vite": "catalog:",
-      "wrap-ansi": "catalog:",
-      "xml2js": "catalog:",
-      "yaml": "catalog:",
-      "yargs-parser": "catalog:"
-    },
-    "patchedDependencies": {
-      "@npmcli/run-script@10.0.3": "patches/@npmcli__run-script@10.0.3.patch",
-      "@npmcli/run-script@10.0.4": "patches/@npmcli__run-script@10.0.4.patch",
-      "@sigstore/sign@4.1.0": "patches/@sigstore__sign@4.1.0.patch",
-      "execa@2.1.0": "patches/execa@2.1.0.patch",
-      "execa@5.1.1": "patches/execa@5.1.1.patch",
-      "node-gyp@12.1.0": "patches/node-gyp@12.1.0.patch",
-      "node-gyp@12.2.0": "patches/node-gyp@12.2.0.patch"
-    }
-  },
   "lint-staged": {
     "*.{cjs,cts,js,json,md,mjs,mts,ts}": [
       "oxfmt --write"