chore: bump socket-registry SHA + migrate to pnpm v11.0.0-rc.0 (#167)

Author: jdalton

.github/workflows/ci.yml

@@ -27,7 +27,7 @@ permissions:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
     with:
       test-setup-script: 'pnpm run build'
       lint-script: 'pnpm run lint --all'
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
 
       - name: Build project
         run: pnpm run build

.github/workflows/provenance.yml

@@ -26,7 +26,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
     with:
       debug: ${{ inputs.debug }}
       package-name: '@socketsecurity/lib'

.github/workflows/weekly-update.yml

@@ -24,7 +24,7 @@ jobs:
     outputs:
       has-updates: ${{ steps.check.outputs.has-updates }}
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
 
       - name: Check for npm updates
         id: check
@@ -48,7 +48,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
 
       - name: Create update branch
         id: branch
@@ -60,7 +60,7 @@ jobs:
           git checkout -b "$BRANCH_NAME"
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
         with:
           gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
 
@@ -295,7 +295,7 @@ jobs:
             test-output.log
           retention-days: 7
 
-      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
         if: always()
 
   notify:

.npmrc

@@ -1,9 +1,4 @@
-ignore-scripts=true
-link-workspace-packages=false
-loglevel=error
-prefer-workspace-packages=false
 # Minimum release age for npm v11+ (days).
-# pnpm equivalent is in pnpm-workspace.yaml (minimumReleaseAge).
 min-release-age=7
 
 trust-policy=no-downgrade

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@socketsecurity/lib",
   "version": "5.15.0",
-  "packageManager": "pnpm@10.33.0",
+  "packageManager": "pnpm@11.0.0-rc.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
@@ -695,8 +695,8 @@
     "CHANGELOG.md"
   ],
   "engines": {
-    "node": ">=24",
-    "pnpm": ">=10.33.0"
+    "node": ">=22",
+    "pnpm": ">=11.0.0-rc.0"
   },
   "sideEffects": false,
   "scripts": {
@@ -798,57 +798,5 @@
     "typescript": {
       "optional": true
     }
-  },
-  "pnpm": {
-    "overrides": {
-      "@inquirer/ansi": "1.0.2",
-      "@inquirer/core": "10.3.1",
-      "@inquirer/figures": "1.0.15",
-      "@npmcli/arborist": "9.1.6",
-      "@npmcli/git": "6.0.3",
-      "@npmcli/run-script": "10.0.0",
-      "@sigstore/core": "3.1.0",
-      "@sigstore/sign": "4.1.0",
-      "ansi-regex": "6.2.2",
-      "brace-expansion": "5.0.5",
-      "chownr": "3.0.0",
-      "debug": "4.4.3",
-      "execa": "5.1.1",
-      "has-flag": "5.0.1",
-      "hosted-git-info": "8.1.0",
-      "isexe": "3.1.1",
-      "lru-cache": "11.2.2",
-      "minimatch": "9.0.6",
-      "minipass": "7.1.3",
-      "minipass-fetch": "4.0.1",
-      "minipass-sized": "1.0.3",
-      "minipass@7": "7.1.3",
-      "minizlib": "3.1.0",
-      "npm-package-arg": "12.0.2",
-      "npm-pick-manifest": "10.0.0",
-      "p-map": "7.0.4",
-      "picomatch": "4.0.4",
-      "proc-log": "6.1.0",
-      "semver": "7.7.2",
-      "signal-exit": "4.1.0",
-      "spdx-expression-parse": "4.0.0",
-      "ssri": "12.0.0",
-      "string-width": "8.1.0",
-      "strip-ansi": "7.1.2",
-      "supports-color": "10.2.2",
-      "tar": "7.5.11",
-      "which": "5.0.0",
-      "wrap-ansi": "9.0.2",
-      "yoctocolors-cjs": "2.1.3"
-    },
-    "patchedDependencies": {
-      "@npmcli/run-script@10.0.0": "patches/@npmcli__run-script@10.0.0.patch",
-      "@sigstore/sign@4.1.0": "patches/@sigstore__sign@4.1.0.patch",
-      "execa@5.1.1": "patches/execa@5.1.1.patch",
-      "minipass-flush@1.0.5": "patches/minipass-flush@1.0.5.patch",
-      "minipass-pipeline@1.2.4": "patches/minipass-pipeline@1.2.4.patch",
-      "node-gyp@11.5.0": "patches/node-gyp@11.5.0.patch",
-      "minipass-sized@1.0.3": "patches/minipass-sized@1.0.3.patch"
-    }
   }
 }

patches/minipass-flush@1.0.5.patch patches/minipass-flush@1.0.7.patchpatches/minipass-flush@1.0.5.patch renamed to patches/minipass-flush@1.0.7.patch

@@ -1,5 +1,4 @@
 diff --git a/index.js b/index.js
-index cb2537fa6b2b57b790cf6e8704a90ea52351e638..f435f5d7fde518722c010d7612a6ff11b4cf52c2 100644
 --- a/index.js
 +++ b/index.js
 @@ -1,4 +1,4 @@
@@ -9,11 +8,10 @@ index cb2537fa6b2b57b790cf6e8704a90ea52351e638..f435f5d7fde518722c010d7612a6ff11
  const _flushed = Symbol('_flushed')
  const _flushing = Symbol('_flushing')
 diff --git a/package.json b/package.json
-index 09127d0ec2015cd969307c23ea7c8a1d7414a21c..e13856c53443ba75a31933c25ea38ac06f574b73 100644
 --- a/package.json
 +++ b/package.json
-@@ -18,7 +18,7 @@
-     "tap": "^14.6.9"
+@@ -21,7 +21,7 @@
+     "tap": "^15.1.6"
    },
    "dependencies": {
 -    "minipass": "^3.0.0"