fix(scan): parse pnpm v5.4/v6 lock grammars in the lockfile supplement - #203

Merged

Mikola Lysenko (mikolalysenko) merged 8 commits into

mainfrom

fix/pnpm-lock-inventory-legacy

Aug 19, 2026

Commits on Aug 18, 2026

fix(scan): parse pnpm v5.4/v6 lock grammars in the lockfile supplement

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
6596621

Commits on Aug 19, 2026

feat(pnpm): pnpm 7-12 vendor+hosted support — legacy grammars, zero-touch trustLockfile, takeover reconciliation, revert guards (#213)

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
authored
bdc47f4
fix(scan): prefer live sibling locks over refused legacy pnpm debris; embedded vex advisories ride the envelope

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
4395664
fix(vex): carry the vex advisory engine the embedded hosts consume

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
d35c9bc
Merge origin/main into fix/pnpm-lock-inventory-legacy

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
6f62120
Merge remote-tracking branch 'origin/main' into fix/pnpm-lock-inventory-legacy
Mikola Lysenko (mikolalysenko)
committed
ac173d9
test(vendor): align the pnpm conversion capstone with the #206 takeover pre-revert

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
c32d9a9
Merge origin/main into fix/pnpm-lock-inventory-legacy

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
471b89b