Skip to content

fix(scan): parse pnpm v5.4/v6 lock grammars in the lockfile supplement #600

fix(scan): parse pnpm v5.4/v6 lock grammars in the lockfile supplement

fix(scan): parse pnpm v5.4/v6 lock grammars in the lockfile supplement #600

Triggered via pull request August 19, 2026 00:00
Status Success
Total duration 18m 24s
Artifacts 74

ci.yml

on: pull_request
Matrix: coverage-docker
Matrix: test
Matrix: e2e-docker
Matrix: setup-matrix
Matrix: e2e
coverage-merge
26s
coverage-merge
Fit to window
Zoom out
Zoom in

Annotations

25 warnings and 3 notices
dispatch-tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
hosted-e2e
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (deno)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (golang)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (cargo)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (composer)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (nuget)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (gem)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (maven)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (npm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (pypi)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (npm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (composer)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (deno)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (cargo)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (nuget)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (golang)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (pypi)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (gem)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (maven)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-merge
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (ubuntu-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (macos-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (windows-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
release-lint
all checks passed for 3.3.0
release-lint
version coherence OK: every stamped site already carries 3.3.0
lint-ecosystems
install.socket.dev/patch/latest does not answer yet — skipping the Socket-origin install.

Artifacts

Produced during runtime
Name Size Digest
SocketDev~socket-patch~2FWFR8.dockerbuild
31.2 KB
sha256:f243b9b4f6a244719a547c55c01292a788bee3525f63de6c37da2d370a9090b4
SocketDev~socket-patch~2NGYMU.dockerbuild
24.8 KB
sha256:0bb0331c89b70e2e59ac8a365b681ee43c983393332847021a4ee20846711969
SocketDev~socket-patch~750ERH.dockerbuild
30.3 KB
sha256:32675153c4134abb51388597fca713b9eedcc759575abb18f4a84360136df583
SocketDev~socket-patch~8VXH58.dockerbuild
24.1 KB
sha256:5dbcd3b1869d4291bedb049e63516a908638e8f57c5a9067e5cb2d440887cf9e
SocketDev~socket-patch~91KUNJ.dockerbuild
35.7 KB
sha256:c677b5b0769cf4168da9fc9d0fd1fe3021bc510d277830e7b74321402613851c
SocketDev~socket-patch~9FWUVA.dockerbuild
21.8 KB
sha256:4e4c8f79cd2ae40523ec55cf4df6380f62e4e0bb028f59502aae52134f9df0e5
SocketDev~socket-patch~9OS4GC.dockerbuild
34.3 KB
sha256:38f9ac3d965d4c6e2d6f3d3ea32d0bc89cf395a7a3d09dfa5a6da83c28ec6dd4
SocketDev~socket-patch~A8NS0W.dockerbuild
33.1 KB
sha256:7d65dc69f600654314a62b28d31d63a01516c432063ab39cf9eed86c36398a2e
SocketDev~socket-patch~DIFZH8.dockerbuild
36 KB
sha256:30693efa2821b763c397dc6f902111d217804ae4aafff778aaf078aae8ce0c9c
SocketDev~socket-patch~DVO268.dockerbuild
34 KB
sha256:441b6e905d9b7cf6ff232f634fb455bc65f300a344efa8a961c9140841e26149
SocketDev~socket-patch~E1IMKZ.dockerbuild
16.4 KB
sha256:e983033b0662cd65f37f85d86dd438acbbe36b1554eae9415e4f3894aa5ec2bc
SocketDev~socket-patch~FK3I60.dockerbuild
20.9 KB
sha256:68346a621573a8dad5820b81a66dd4f8785f8b45389c4e1207b3f83a98b50d1d
SocketDev~socket-patch~FOF9NY.dockerbuild
34.7 KB
sha256:a899b3351fbfa4029fd871332625533deb136711dcd5aab90143f68a5ea9de91
SocketDev~socket-patch~GU19KE.dockerbuild
24.8 KB
sha256:3d388cadab5bd6c498ebaf065abf43f39c0f8e4c6f5f32ae9d1c3a6df4e921d9
SocketDev~socket-patch~IFP7UX.dockerbuild
33.4 KB
sha256:95d7f19205632d5bbdca10d1253a7f8f6fd07621fb2e9486cf8e3303403b34c3
SocketDev~socket-patch~J8INFP.dockerbuild
33.8 KB
sha256:35b0e387ed7bf48458aeeefdcf05e0f8375f822c8e88b535533d79b6af35d15c
SocketDev~socket-patch~KPZQYU.dockerbuild
31.2 KB
sha256:6054556b16cacd36a45e8c1e5f09d810ad73165d4d32c73606ae0f460d72ac9e
SocketDev~socket-patch~KZTJBW.dockerbuild
35 KB
sha256:1dd66be9df0561cf26e97ca7d621022807347a509a97ad69c26817ea94406643
SocketDev~socket-patch~LOUT3S.dockerbuild
11 KB
sha256:7ff4a2627fdd9df7c2d9fb31763617e992e515c87623abd75e7992b835fe3f33
SocketDev~socket-patch~M19JFG.dockerbuild
34.1 KB
sha256:401492280fe897a916561553cd271096f7134825f59b6a3808bb58b5152da41b
SocketDev~socket-patch~M5P0W3.dockerbuild
23.2 KB
sha256:eaf7c55c33c4fc5771d31e1c6095d0fa461deeac37df53b4b4ba526bcb8348c2
SocketDev~socket-patch~MBVVHK.dockerbuild
21 KB
sha256:84ad79ea900de2c9915be6cb93dc843ac977cac853add007bc3df644f412cfc6
SocketDev~socket-patch~MZE2ZB.dockerbuild
33.3 KB
sha256:31f4234bcad80b2aa7037ca2eb9b7092c99f6f7ea0fe72c6ae06510e48d03f45
SocketDev~socket-patch~NF45N0.dockerbuild
21 KB
sha256:c157dca2317d35a60ffa1739cdb736492f04b4966dedf12f62bf407da37ca1d2
SocketDev~socket-patch~NIKB64.dockerbuild
34.5 KB
sha256:bb7052e502cefa7bc668e020e81cb1979178d353eb62e9f46a6fe59e581a89de
SocketDev~socket-patch~NWVXS4.dockerbuild
23.8 KB
sha256:9baec3bea4483fe89e933b245bd09c006d83ba3c95f5dbbf976375675390d2a2
SocketDev~socket-patch~O6T510.dockerbuild
25 KB
sha256:443a16c940faaa5f962caf544fee5b2e02d0dad038506d70619c2d8a824c552d
SocketDev~socket-patch~P2VFEJ.dockerbuild
24.9 KB
sha256:449b5d362b4195adbe2ddfb52b4dfe64f189d7cfa662a31ebb8047365770ca28
SocketDev~socket-patch~QULRSL.dockerbuild
19.5 KB
sha256:e76810548104f1f5406e43a318805655bfd81f7d781d673d94a5492fba178444
SocketDev~socket-patch~QZ24L8.dockerbuild
11.8 KB
sha256:e1f382637748d2ab1c12c1705d69d43677006d31d59168ffdaa2da1402983bcd
SocketDev~socket-patch~R9AE2H.dockerbuild
33.2 KB
sha256:6fd7faf967c669793022c3cc3e2f98891cc43d4ca7310cd1a0b42415022ef7df
SocketDev~socket-patch~RMR5KO.dockerbuild
17.9 KB
sha256:c0acd72902cb8b8c1f3d6139dea97b35073f61c88a14b0b32fb2100066620dfb
SocketDev~socket-patch~RNV2K7.dockerbuild
34.4 KB
sha256:651a68b3b1670f2e0303e222ded1bd7212841ba83dcd547d8912c70c6df082f1
SocketDev~socket-patch~SFRMLI.dockerbuild
33.5 KB
sha256:3338a5121d5c6d3c4286ebc38de50220362459fb2c2c9b1f3e781b5815a3cc1e
SocketDev~socket-patch~SRCF21.dockerbuild
23.9 KB
sha256:0e29b1ef7d8346478238c2c1ec4a3e6043b34fcec892ec7427dc24fe5f318423
SocketDev~socket-patch~SXHLQG.dockerbuild
11.1 KB
sha256:a9bb699b09d1f8fc88b2cc87a33c9d3560b22c36cd713ffde40859064f64a993
SocketDev~socket-patch~T1Y2GP.dockerbuild
21.7 KB
sha256:274a5bd6e469b2f796bf554a52fde90c8f03cd34d5af70448106b36849c80c8b
SocketDev~socket-patch~TGYZJV.dockerbuild
33.8 KB
sha256:6d84857acba02bb57f8eb3169f1016db9950f1a1d4b332077825d5a9f5c70755
SocketDev~socket-patch~TXM3PW.dockerbuild
33.5 KB
sha256:257160a1be29444b8da5f14e4767426f7050f1720717dd754b782d98260f0a29
SocketDev~socket-patch~V3Q2I4.dockerbuild
22.1 KB
sha256:98106905638d9f029ba09958d1fe92e929ffb11b84ae55acb7958f0d84530a00
SocketDev~socket-patch~VF66MZ.dockerbuild
35.1 KB
sha256:6f784f6c6c43dbe6d6ba465d52f35da49c09debfa2ee51db4bc5e7364a7b6168
SocketDev~socket-patch~VIXE4T.dockerbuild
33.2 KB
sha256:bd24d2eae3e6bf8a0fe7e18926ea47b1eca9fb378984333f7ee341de3ef86252
SocketDev~socket-patch~W0CJYI.dockerbuild
34.2 KB
sha256:e77f3acafb1d93e8106845c0550123a9349e2249f13d9ace64e9fb0d34ddc308
SocketDev~socket-patch~WB7LSG.dockerbuild
18.2 KB
sha256:69a395c9560450727a238a01732cbef6e0d7ca1986f4eb9f9c06b1f9bdede953
SocketDev~socket-patch~WJNPZT.dockerbuild
18.3 KB
sha256:fabe3b50b4ee0e30fe05a6685e0d193463e684afcbf3456d102ebe45bd441c88
SocketDev~socket-patch~XBP9MO.dockerbuild
35.9 KB
sha256:0da4a6628ffca1803f387a02c07ac1c51bc2746bf0afa677b1bba61ff7e94272
SocketDev~socket-patch~XGXV19.dockerbuild
35.6 KB
sha256:2bb1211a9c12353ad4880d4ea9106e0c8a9f76afc5d76185d69699ea83aa42b2
SocketDev~socket-patch~XLLZJJ.dockerbuild
35.8 KB
sha256:d163db7c77ef8be23cd53a4d4a558dbd389eb127bf62f8d27dbd2c902f606f16
SocketDev~socket-patch~XNZ5Y9.dockerbuild
17.9 KB
sha256:698588794e356c1387d8a7e97fc2d65ba34696ca36c38f06470dfc442e3c07f4
SocketDev~socket-patch~Y1XKXI.dockerbuild
34 KB
sha256:969cd70c7b4d4e4509deced3521aa41bd5b01ccaaec90f0024655d6f4088c614
SocketDev~socket-patch~YT1DZ2.dockerbuild
35.7 KB
sha256:4e0f756ce078f9badf39f240d1d14adc3676cd7f44bbab1398cc4d2a7c2197a4
SocketDev~socket-patch~YVCV60.dockerbuild
24.4 KB
sha256:b1de7182f8d3b0a1acfb2bdb5ca2d6a6e8f35aa56dffe5f4600eba274c63cca6
SocketDev~socket-patch~Z05HEG.dockerbuild
33.8 KB
sha256:d0c1bfb3ecd63e633248ebea535a8d87d23f96e196978e68da6d159668e07e63
SocketDev~socket-patch~ZAI04V.dockerbuild
33.3 KB
sha256:b3a0fbf2e16d5bd6f7c4c5434d01c2dad2e14f99116166a75dfdfb2729c14cd9
coverage-docker-cargo
124 KB
sha256:8d4906b84f5beb4726a2df27e363da847e3c490a47b0f400b4c13225c9caa1d7
coverage-docker-composer
124 KB
sha256:9fc9ed1e4ca94cf99397fbd912f1c9b02532f6fb826e84b8288bff3b3989072a
coverage-docker-deno
124 KB
sha256:6a7e7b1185f426ca92f8c29b9cc5fbd58e5a6b186798beba37052dd874ade4ba
coverage-docker-gem
124 KB
sha256:36ccbc402bfedf2845504ba92587fabdf813166c60f77adbc6ac09b2735dc7f8
coverage-docker-golang
124 KB
sha256:9dad71f9e82101bcdd2bdc395bf5e50bc6f3551452d8de51e652e9f02c8486b4
coverage-docker-maven
124 KB
sha256:4d7986fba711ac53e2c0d1147b12849ea34de51ed7dd4c3d30e46b220b369e68
coverage-docker-npm
124 KB
sha256:cbb4219eca797ae3503198aaf3e5326977dba3feb349a3df89d31e44a371de16
coverage-docker-nuget
124 KB
sha256:4ec022b77a12dd9fd8657c0208ceec753bc2a7ffa01464be85a6650bd1f5535a
coverage-docker-pypi
124 KB
sha256:e6cfc40a0f7782733c0ec43e2fbd1f2b44b4a24fe40fd1971bf12d63f28dadee
coverage-host
436 KB
sha256:927e524aee372fd20e153a9b4ab73c41400b724b74a8f6e97479676244eed945
coverage-lcov
476 KB
sha256:89cacdc29a2892df6430b0074ecff8467625beb4a3e0d002a041c705c1b02aae
setup-matrix-cargo
945 Bytes
sha256:6be43fa1bdae3b13eedc71ebccad24f444166d8d3be54e068dd67e81c1bf09c4
setup-matrix-composer
916 Bytes
sha256:7190b904fda8cfc44c2a4ad0d59030ddd4111c9e8f75435d6929a7b2d7cd2ae6
setup-matrix-deno
901 Bytes
sha256:50dd81f458b906ef2003e01aaccbaf9259aba8806368ac231e512c5930d23462
setup-matrix-gem
918 Bytes
sha256:a603ab7f0244c6d3ce1138d31f535d96ff8232c1f53366ab64a29d5c2d730ffa
setup-matrix-golang
927 Bytes
sha256:8abb005598a158046a578594990257faaa1156d0f37beaf2eaf0bb62387fe4c8
setup-matrix-maven
936 Bytes
sha256:3d6953a5ce4cff6c75aa6a8f1950132c857d23fbf1b1c4a7e2eb33ce26d45f43
setup-matrix-npm
1.73 KB
sha256:499f8918cc6032c709921af2c22a32d45a6cc31306220a65a6bd7900a6ee7af6
setup-matrix-nuget
930 Bytes
sha256:3469de56dc4b2fe8db9309d4fd168a585ac9630a032b16a0b50bb9067d258ed3
setup-matrix-pypi
1.88 KB
sha256:0fdaedb39ea7e7edea7a24da4a849af9ae9c5f637b98a67e228e555e357087cb