Skip to content

👷 Pin pnpm in npm install commands#6933

Merged
dubzzz merged 1 commit into
mainfrom
claude/pin-npm-hashes-DByIY
May 3, 2026
Merged

👷 Pin pnpm in npm install commands#6933
dubzzz merged 1 commit into
mainfrom
claude/pin-npm-hashes-DByIY

Conversation

@dubzzz

@dubzzz dubzzz commented May 3, 2026

Copy link
Copy Markdown
Owner

Pin pnpm to a specific version when installed via npm install -g
in the SessionStart and Stop hooks, matching the project's
packageManager field. Resolves the OSSF Scorecard
"npmCommand not pinned by hash" warnings.

@claude
🔒(claude) Pin pnpm version in npm install commands
ec3aed3 
Pin pnpm to a specific version when installed via `npm install -g`
in the SessionStart and Stop hooks, matching the project's
`packageManager` field. Resolves the OSSF Scorecard
"npmCommand not pinned by hash" warnings.
@changeset-bot

changeset-bot Bot commented May 3, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: ec3aed3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dubzzz dubzzz changed the title 🔒(claude) Pin pnpm version in npm install commands 🔒 Pin pnpm version in npm install commands May 3, 2026
@dubzzz dubzzz changed the title 🔒 Pin pnpm version in npm install commands 👷 Pin pnpm version in npm install commands May 3, 2026
@dubzzz dubzzz changed the title 👷 Pin pnpm version in npm install commands 👷 Pin pnpm in npm install commands May 3, 2026
@dubzzz
dubzzz enabled auto-merge (squash) May 3, 2026 20:46
@github-actions

github-actions Bot commented May 3, 2026

Copy link
Copy Markdown
Contributor

👋 It looks like the PR template was not used for this pull request.

Please edit the PR description to use the template, or close this PR and open a new one that uses it.
Not using the template may result in your change not being reviewed.

The template includes:

  • A Description section
  • A Checklist section with items to verify before submitting

Thank you for your contribution! 🙏

@pkg-pr-new

pkg-pr-new Bot commented May 3, 2026

Copy link
Copy Markdown
@fast-check/ava

npm i https://pkg.pr.new/@fast-check/ava@6933

fast-check

npm i https://pkg.pr.new/fast-check@6933

@fast-check/jest

npm i https://pkg.pr.new/@fast-check/jest@6933

@fast-check/packaged

npm i https://pkg.pr.new/@fast-check/packaged@6933

@fast-check/poisoning

npm i https://pkg.pr.new/@fast-check/poisoning@6933

@fast-check/vitest

npm i https://pkg.pr.new/@fast-check/vitest@6933

@fast-check/worker

npm i https://pkg.pr.new/@fast-check/worker@6933

commit: ec3aed3

@dubzzz
dubzzz merged commit 8bd9612 into main May 3, 2026
52 of 85 checks passed
@dubzzz
dubzzz deleted the claude/pin-npm-hashes-DByIY branch May 3, 2026 20:54
@codecov

codecov Bot commented May 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.78%. Comparing base (73ed312) to head (ec3aed3).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #6933   +/-   ##
=======================================
  Coverage   94.78%   94.78%           
=======================================
  Files         212      212           
  Lines        5833     5833           
  Branches     1535     1536    +1     
=======================================
  Hits         5529     5529           
  Misses        296      296           
  Partials        8        8
Flag Coverage Δ
tests 94.78% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

force-build-status-execution

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@dubzzz @claude