From 4a6f6a65eb9b135f2566cf7aa2a923a903ebd47a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 29 Oct 2026 12:41:33 -0700 Subject: [PATCH] chore(lockfile): refresh pnpm-lock.yaml (#18185) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## Thinking Path > - Paperclip uses a dependency lock for reproducible builds. > - Dependency changes on master need matching lock entries. > - Paid eval reports also pin a reviewed offline correction. > - Reports must install before paid model work starts. > - This automated PR keeps the lock and report proof together. ## Linked Issues or Issue Description **What happened?** Dependency manifests on master changed after the last committed lock refresh. **Expected behavior** Frozen installs must match those manifests. Eval reports must retain matching offline lock proof. **Steps to reproduce** Run a frozen install before and after this lock refresh. ## What Changed - Refresh the dependency lock from the manifests on master. - Include the matching offline report correction and hashes. ## Verification - Pinned pnpm resolution completed with lifecycle scripts disabled. - The report proof refresh accepted the reviewed committed baseline. - Required PR checks and reviews must pass before merge. ## Risks Dependency changes require review. Unknown report lock baselines remain blocked. This update changes no permissions or paid enable gates. ## Model Used None — generated by pnpm and the deterministic report-lock updater. ## Checklist - [x] Thinking path and problem description included - [x] Generated lock and matching report proof included - [ ] Required CI checks and reviews pass Co-authored-by: lockfile-bot --- pnpm-lock.yaml | 13 ++++++ tests/runner-e2e/report-lock.json | 6 +-- tests/runner-e2e/report-lock.patch | 75 ++++++++++++++++-------------- 3 files changed, 56 insertions(+), 38 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index d08b8e20884..390d0862497 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -1100,6 +1100,9 @@ importers: svix: specifier: 1.76.1 version: 1.76.1 + tar-stream: + specifier: 3.2.0 + version: 3.2.0 ws: specifier: ^8.22.0 version: 8.22.0 @@ -1150,6 +1153,9 @@ importers: '@types/supertest': specifier: ^7.2.1 version: 7.2.1 + '@types/tar-stream': + specifier: ^3.1.5 + version: 3.1.5 '@types/ws': specifier: ^8.18.2 version: 8.18.2 @@ -5522,6 +5528,9 @@ packages: '@types/supertest@7.2.1': resolution: {integrity: sha512-4CbBvoYVLHL7+yhbYrZET0vsvuyXTC05aRe7dNQkwMzm56auceoy6Yu3K50uZmwfHna1os3CMSgM/3QVkUtPTw==} + '@types/tar-stream@3.1.5': + resolution: {integrity: sha512-zCUA6CSDw0t2cpQiZixpyzfubpeuVZmBr5wztvuCG4bhy7reX/9wGXdZxEzz2CjMFLQ32UPR/01jzUUSRJeCeQ==} + '@types/three@0.185.4': resolution: {integrity: sha512-gAsBIC07NIFrxjbf7tH2t71c38uulFfk/RFoC7FNBSjMRAQ8J1x/RBvusX0N5PJouaYFJawXQqfCQ0RKUx/1nA==} @@ -13688,6 +13697,10 @@ snapshots: '@types/methods': 1.1.4 '@types/superagent': 8.1.11 + '@types/tar-stream@3.1.5': + dependencies: + '@types/node': 24.13.3 + '@types/three@0.185.4': dependencies: '@dimforge/rapier3d-compat': 0.12.0 diff --git a/tests/runner-e2e/report-lock.json b/tests/runner-e2e/report-lock.json index 6a796a96502..37b5fe4f441 100644 --- a/tests/runner-e2e/report-lock.json +++ b/tests/runner-e2e/report-lock.json @@ -1,6 +1,6 @@ { - "inputSha256": "a2606a8218799ac96e841d1f3008053df4f4fca24d5db2941ad10b3d62c0e14a", - "outputSha256": "1763d29dec14d421da047d72d70ef33d4c8aa2f1cf85e5a9c8bec7abab32de1d", - "patchSha256": "9d09c0ff98391e430ddbbea71d106451a72248c2b6ac557e49797392170555dd", + "inputSha256": "1763d29dec14d421da047d72d70ef33d4c8aa2f1cf85e5a9c8bec7abab32de1d", + "outputSha256": "9ff59e999e04e41e9c323c13129d222cd59507b7447f661666df29d87072bfbc", + "patchSha256": "593265c8df6ae366b525a61a321ffeadbe355d713978608f7e757de867ba4059", "basis": "Generated with the trusted master lockfile refresh. Review this offline correction and its hashes with the dependency changes." } diff --git a/tests/runner-e2e/report-lock.patch b/tests/runner-e2e/report-lock.patch index 8bedc09489d..82ff83a039b 100644 --- a/tests/runner-e2e/report-lock.patch +++ b/tests/runner-e2e/report-lock.patch @@ -1,40 +1,45 @@ diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml -index b074b7f..d08b8e2 100644 +index d08b8e2..390d086 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml -@@ -43,7 +43,7 @@ patchedDependencies: - hash: 6st5fzvttegjv64llnfegwwpca - path: patches/acpx@0.12.0.patch - acpx@0.13.1: -- hash: j4huaoi2baejrlq7vdcgzlx54m -+ hash: xh3fclih3ztrbsibpfnxdcx7pe - path: patches/acpx@0.13.1.patch - embedded-postgres@18.1.0-beta.16: - hash: 55uhvnotpqyiy37rn3pqpukhei -@@ -517,7 +517,7 @@ importers: - version: 0.160.0 - acpx: - specifier: 0.13.1 -- version: 0.13.1(patch_hash=j4huaoi2baejrlq7vdcgzlx54m) -+ version: 0.13.1(patch_hash=xh3fclih3ztrbsibpfnxdcx7pe) - ajv: - specifier: ^8.20.0 - version: 8.20.0 -@@ -1015,7 +1015,7 @@ importers: - version: 8.18.0 - acpx: - specifier: 0.13.1 -- version: 0.13.1(patch_hash=j4huaoi2baejrlq7vdcgzlx54m) -+ version: 0.13.1(patch_hash=xh3fclih3ztrbsibpfnxdcx7pe) - ai: - specifier: 7.0.130 - version: 7.0.130(zod@4.4.3) -@@ -13900,7 +13900,7 @@ snapshots: - - bare-buffer - - react-native-b4a +@@ -1100,6 +1100,9 @@ importers: + svix: + specifier: 1.76.1 + version: 1.76.1 ++ tar-stream: ++ specifier: 3.2.0 ++ version: 3.2.0 + ws: + specifier: ^8.22.0 + version: 8.22.0 +@@ -1150,6 +1153,9 @@ importers: + '@types/supertest': + specifier: ^7.2.1 + version: 7.2.1 ++ '@types/tar-stream': ++ specifier: ^3.1.5 ++ version: 3.1.5 + '@types/ws': + specifier: ^8.18.2 + version: 8.18.2 +@@ -5522,6 +5528,9 @@ packages: + '@types/supertest@7.2.1': + resolution: {integrity: sha512-4CbBvoYVLHL7+yhbYrZET0vsvuyXTC05aRe7dNQkwMzm56auceoy6Yu3K50uZmwfHna1os3CMSgM/3QVkUtPTw==} -- acpx@0.13.1(patch_hash=j4huaoi2baejrlq7vdcgzlx54m): -+ acpx@0.13.1(patch_hash=xh3fclih3ztrbsibpfnxdcx7pe): ++ '@types/tar-stream@3.1.5': ++ resolution: {integrity: sha512-zCUA6CSDw0t2cpQiZixpyzfubpeuVZmBr5wztvuCG4bhy7reX/9wGXdZxEzz2CjMFLQ32UPR/01jzUUSRJeCeQ==} ++ + '@types/three@0.185.4': + resolution: {integrity: sha512-gAsBIC07NIFrxjbf7tH2t71c38uulFfk/RFoC7FNBSjMRAQ8J1x/RBvusX0N5PJouaYFJawXQqfCQ0RKUx/1nA==} + +@@ -13688,6 +13697,10 @@ snapshots: + '@types/methods': 1.1.4 + '@types/superagent': 8.1.11 + ++ '@types/tar-stream@3.1.5': ++ dependencies: ++ '@types/node': 24.13.3 ++ + '@types/three@0.185.4': dependencies: - '@agentclientprotocol/sdk': 1.4.0(zod@4.4.3) - commander: 15.0.0 + '@dimforge/rapier3d-compat': 0.12.0