chore(lockfile): refresh pnpm-lock.yaml (#18185)

## Thinking Path

> - Paperclip uses a dependency lock for reproducible builds.
> - Dependency changes on master need matching lock entries.
> - Paid eval reports also pin a reviewed offline correction.
> - Reports must install before paid model work starts.
> - This automated PR keeps the lock and report proof together.

## Linked Issues or Issue Description

**What happened?**

Dependency manifests on master changed after the last committed lock
refresh.

**Expected behavior**

Frozen installs must match those manifests. Eval reports must retain
matching offline lock proof.

**Steps to reproduce**

Run a frozen install before and after this lock refresh.

## What Changed

- Refresh the dependency lock from the manifests on master.
- Include the matching offline report correction and hashes.

## Verification

- Pinned pnpm resolution completed with lifecycle scripts disabled.
- The report proof refresh accepted the reviewed committed baseline.
- Required PR checks and reviews must pass before merge.

## Risks

Dependency changes require review. Unknown report lock baselines remain
blocked. This update changes no permissions or paid enable gates.

## Model Used

None — generated by pnpm and the deterministic report-lock updater.

## Checklist

- [x] Thinking path and problem description included
- [x] Generated lock and matching report proof included
- [ ] Required CI checks and reviews pass

Co-authored-by: lockfile-bot <lockfile-bot@users.noreply.github.com>
This commit is contained in:
github-actions[bot]andlockfile-bot authored and GitHub committed 2026-10-29 12:41:33 -07:00
1 parent 09c05c5505
commit 4a6f6a65eb
3 files changed
+56 -38

No files matched your search

+13
View File
@@ -1100,6 +1100,9 @@ importers:
svix:
specifier: 1.76.1
version: 1.76.1
tar-stream:
specifier: 3.2.0
version: 3.2.0
ws:
specifier: ^8.22.0
version: 8.22.0
@@ -1150,6 +1153,9 @@ importers:
'@types/supertest':
specifier: ^7.2.1
version: 7.2.1
'@types/tar-stream':
specifier: ^3.1.5
version: 3.1.5
'@types/ws':
specifier: ^8.18.2
version: 8.18.2
@@ -5522,6 +5528,9 @@ packages:
'@types/supertest@7.2.1':
resolution: {integrity: sha512-4CbBvoYVLHL7+yhbYrZET0vsvuyXTC05aRe7dNQkwMzm56auceoy6Yu3K50uZmwfHna1os3CMSgM/3QVkUtPTw==}
'@types/tar-stream@3.1.5':
resolution: {integrity: sha512-zCUA6CSDw0t2cpQiZixpyzfubpeuVZmBr5wztvuCG4bhy7reX/9wGXdZxEzz2CjMFLQ32UPR/01jzUUSRJeCeQ==}
'@types/three@0.185.4':
resolution: {integrity: sha512-gAsBIC07NIFrxjbf7tH2t71c38uulFfk/RFoC7FNBSjMRAQ8J1x/RBvusX0N5PJouaYFJawXQqfCQ0RKUx/1nA==}
@@ -13688,6 +13697,10 @@ snapshots:
'@types/methods': 1.1.4
'@types/superagent': 8.1.11
'@types/tar-stream@3.1.5':
dependencies:
'@types/node': 24.13.3
'@types/three@0.185.4':
dependencies:
'@dimforge/rapier3d-compat': 0.12.0
+3 -3
View File
@@ -1,6 +1,6 @@
{
"inputSha256": "a2606a8218799ac96e841d1f3008053df4f4fca24d5db2941ad10b3d62c0e14a",
"outputSha256": "1763d29dec14d421da047d72d70ef33d4c8aa2f1cf85e5a9c8bec7abab32de1d",
"patchSha256": "9d09c0ff98391e430ddbbea71d106451a72248c2b6ac557e49797392170555dd",
"inputSha256": "1763d29dec14d421da047d72d70ef33d4c8aa2f1cf85e5a9c8bec7abab32de1d",
"outputSha256": "9ff59e999e04e41e9c323c13129d222cd59507b7447f661666df29d87072bfbc",
"patchSha256": "593265c8df6ae366b525a61a321ffeadbe355d713978608f7e757de867ba4059",
"basis": "Generated with the trusted master lockfile refresh. Review this offline correction and its hashes with the dependency changes."
}
+40 -35
View File
@@ -1,40 +1,45 @@
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b074b7f..d08b8e2 100644
index d08b8e2..390d086 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -43,7 +43,7 @@ patchedDependencies:
hash: 6st5fzvttegjv64llnfegwwpca
path: patches/acpx@0.12.0.patch
acpx@0.13.1:
- hash: j4huaoi2baejrlq7vdcgzlx54m
+ hash: xh3fclih3ztrbsibpfnxdcx7pe
path: patches/acpx@0.13.1.patch
embedded-postgres@18.1.0-beta.16:
hash: 55uhvnotpqyiy37rn3pqpukhei
@@ -517,7 +517,7 @@ importers:
version: 0.160.0
acpx:
specifier: 0.13.1
- version: 0.13.1(patch_hash=j4huaoi2baejrlq7vdcgzlx54m)
+ version: 0.13.1(patch_hash=xh3fclih3ztrbsibpfnxdcx7pe)
ajv:
specifier: ^8.20.0
version: 8.20.0
@@ -1015,7 +1015,7 @@ importers:
version: 8.18.0
acpx:
specifier: 0.13.1
- version: 0.13.1(patch_hash=j4huaoi2baejrlq7vdcgzlx54m)
+ version: 0.13.1(patch_hash=xh3fclih3ztrbsibpfnxdcx7pe)
ai:
specifier: 7.0.130
version: 7.0.130(zod@4.4.3)
@@ -13900,7 +13900,7 @@ snapshots:
- bare-buffer
- react-native-b4a
@@ -1100,6 +1100,9 @@ importers:
svix:
specifier: 1.76.1
version: 1.76.1
+ tar-stream:
+ specifier: 3.2.0
+ version: 3.2.0
ws:
specifier: ^8.22.0
version: 8.22.0
@@ -1150,6 +1153,9 @@ importers:
'@types/supertest':
specifier: ^7.2.1
version: 7.2.1
+ '@types/tar-stream':
+ specifier: ^3.1.5
+ version: 3.1.5
'@types/ws':
specifier: ^8.18.2
version: 8.18.2
@@ -5522,6 +5528,9 @@ packages:
'@types/supertest@7.2.1':
resolution: {integrity: sha512-4CbBvoYVLHL7+yhbYrZET0vsvuyXTC05aRe7dNQkwMzm56auceoy6Yu3K50uZmwfHna1os3CMSgM/3QVkUtPTw==}
- acpx@0.13.1(patch_hash=j4huaoi2baejrlq7vdcgzlx54m):
+ acpx@0.13.1(patch_hash=xh3fclih3ztrbsibpfnxdcx7pe):
+ '@types/tar-stream@3.1.5':
+ resolution: {integrity: sha512-zCUA6CSDw0t2cpQiZixpyzfubpeuVZmBr5wztvuCG4bhy7reX/9wGXdZxEzz2CjMFLQ32UPR/01jzUUSRJeCeQ==}
+
'@types/three@0.185.4':
resolution: {integrity: sha512-gAsBIC07NIFrxjbf7tH2t71c38uulFfk/RFoC7FNBSjMRAQ8J1x/RBvusX0N5PJouaYFJawXQqfCQ0RKUx/1nA==}
@@ -13688,6 +13697,10 @@ snapshots:
'@types/methods': 1.1.4
'@types/superagent': 8.1.11
+ '@types/tar-stream@3.1.5':
+ dependencies:
+ '@types/node': 24.13.3
+
'@types/three@0.185.4':
dependencies:
'@agentclientprotocol/sdk': 1.4.0(zod@4.4.3)
commander: 15.0.0
'@dimforge/rapier3d-compat': 0.12.0