chore: bump socket-registry SHA + migrate to pnpm v11.0.0-rc.0 (#56)

Author: jdalton

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ permissions:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
     with:
       fail-fast: false
       lint-script: 'pnpm run lint --all'

.github/workflows/provenance.yml

@@ -32,7 +32,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
     with:
       debug: ${{ inputs.debug }}
       dist-tag: ${{ inputs.dist-tag }}

.github/workflows/weekly-update.yml

@@ -24,7 +24,7 @@ jobs:
     outputs:
       has-updates: ${{ steps.check.outputs.has-updates }}
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
 
       - name: Check for npm updates
         id: check
@@ -48,7 +48,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
 
       - name: Create update branch
         id: branch
@@ -60,7 +60,7 @@ jobs:
           git checkout -b "$BRANCH_NAME"
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
         with:
           gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
 
@@ -290,7 +290,7 @@ jobs:
             test-output.log
           retention-days: 7
 
-      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@bab1dc8adc59a21c04fa73d3dd4a333c12e2ca9b # main
         if: always()
 
   notify:

.npmrc

@@ -1,14 +1,5 @@
-# Suppress pnpm build script warnings.
-ignore-scripts=true
-
-# Suppress pnpm workspace warnings
-link-workspace-packages=false
-loglevel=error
-prefer-workspace-packages=false
-
 # Minimum release age for npm v11+ (days).
-# pnpm equivalent is in pnpm-workspace.yaml (minimumReleaseAge).
 min-release-age=7
 
 # Trust policy - prevent downgrade attacks
-trust-policy=no-downgrade
+trust-policy=no-downgrade

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@socketregistry/packageurl-js",
   "version": "1.4.1",
-  "packageManager": "pnpm@10.33.0",
+  "packageManager": "pnpm@11.0.0-rc.0",
   "license": "MIT",
   "description": "Socket.dev optimized package override for packageurl-js",
   "keywords": [
@@ -35,7 +35,7 @@
   ],
   "engines": {
     "node": ">=18.20.8",
-    "pnpm": ">=10.33.0"
+    "pnpm": ">=11.0.0-rc.0"
   },
   "sideEffects": false,
   "scripts": {
@@ -94,15 +94,6 @@
     "vitest": "4.0.3",
     "yoctocolors-cjs": "2.1.3"
   },
-  "pnpm": {
-    "ignoredBuiltDependencies": [
-      "esbuild",
-      "unrs-resolver"
-    ],
-    "overrides": {
-      "vite": "7.3.2"
-    }
-  },
   "socket": {
     "categories": [
       "levelup"