chore(lockfile): refresh pnpm-lock.yaml (#19337)

## Thinking Path

> - Paperclip uses a dependency lock for reproducible builds.
> - Dependency changes on master need matching lock entries.
> - Paid eval reports also pin a reviewed offline correction.
> - Reports must install before paid model work starts.
> - This automated PR keeps the lock and report proof together.

## Linked Issues or Issue Description

**What happened?**

Dependency manifests on master changed after the last committed lock
refresh.

**Expected behavior**

Frozen installs must match those manifests. Eval reports must retain
matching offline lock proof.

**Steps to reproduce**

Run a frozen install before and after this lock refresh.

## What Changed

- Refresh the dependency lock from the manifests on master.
- Include the matching offline report correction and hashes.

## Verification

- Pinned pnpm resolution completed with lifecycle scripts disabled.
- The report proof refresh accepted the reviewed committed baseline.
- The workflow rejected changes outside the lock and report proof files.

## Risks

The lockfile bot merges this PR without CI or review when every added
package version is at least 3 days old on npm. Otherwise the PR waits
for a maintainer, and the daily refresh tries again. The bot merges only
the exact commit this workflow generated from manifests already reviewed
on master. Unknown report lock baselines remain blocked. This update
changes no permissions or paid enable gates.

## Model Used

None — generated by pnpm and the deterministic report-lock updater.

## Checklist

- [x] Thinking path and problem description included
- [x] Generated lock and matching report proof included
- [x] Release-age gate decides between bot merge and maintainer review

Co-authored-by: lockfile-bot <[email protected]>
This commit is contained in:
github-actions[bot]andlockfile-bot authored and GitHub committed 2026-11-05 20:36:41 +00:00
1 parent 2575b941d0
commit 1e98aa76e3
3 files changed
+22 -22

No files matched your search

+6 -6
View File
@@ -16,7 +16,7 @@ overrides:
patchedDependencies:
'@agentclientprotocol/[email protected]':
hash: wvw4m3xxjfiu27h5sav6rurgva
hash: syoits7l7g3sthy3olttp2fv24
path: patches/@[email protected]
'@agentclientprotocol/[email protected]':
hash: 2iynuypg76nxmydiylgtffhr7e
@@ -189,7 +189,7 @@ importers:
dependencies:
'@agentclientprotocol/claude-agent-acp':
specifier: ^0.73.0
version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
version: 0.73.0(patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
'@anthropic-ai/sdk':
specifier: 0.129.0
version: 0.129.0([email protected])
@@ -514,7 +514,7 @@ importers:
dependencies:
'@agentclientprotocol/claude-agent-acp':
specifier: 0.73.0
version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
version: 0.73.0(patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
'@agentclientprotocol/codex-acp':
specifier: 1.6.2
version: 1.6.2(patch_hash=2iynuypg76nxmydiylgtffhr7e)
@@ -904,7 +904,7 @@ importers:
version: 0.5.0
'@agentclientprotocol/claude-agent-acp':
specifier: 0.73.0
version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
version: 0.73.0(patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
'@agentclientprotocol/codex-acp':
specifier: 1.6.2
version: 1.6.2(patch_hash=2iynuypg76nxmydiylgtffhr7e)
@@ -9401,7 +9401,7 @@ snapshots:
'@adobe/[email protected]': {}
'@agentclientprotocol/[email protected](patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
'@agentclientprotocol/[email protected](patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
dependencies:
'@agentclientprotocol/sdk': 1.4.0([email protected])
'@anthropic-ai/claude-agent-sdk': 0.3.286(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))([email protected])
@@ -9410,7 +9410,7 @@ snapshots:
- '@anthropic-ai/sdk'
- '@modelcontextprotocol/sdk'
'@agentclientprotocol/[email protected](patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
'@agentclientprotocol/[email protected](patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
dependencies:
'@agentclientprotocol/sdk': 1.4.0([email protected])
'@anthropic-ai/claude-agent-sdk': 0.3.286(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))([email protected])
+3 -3
View File
@@ -1,6 +1,6 @@
{
"inputSha256": "7da49598dd6301c519e549233d46054b3a2c38da8b8d848b97c42168bacd60b6",
"outputSha256": "dd5934060dd06b8e731e3beeed49daf918d1a0b2a6c32d3da7815f2e7f0b3691",
"patchSha256": "a55b07580a157de9ab0ebc756fb1fd0cfc13f99cb084a9ea775906f654ab36b1",
"inputSha256": "dd5934060dd06b8e731e3beeed49daf918d1a0b2a6c32d3da7815f2e7f0b3691",
"outputSha256": "7af7b8baf77b608bbed97105513f0da26dbeba8ed9a989a93ad604201dee43dd",
"patchSha256": "11fb6673193b927fffbc5284a5f015b4fa3784ab9722f74872194041e3687c9e",
"basis": "Generated with the trusted master lockfile refresh. Review this offline correction and its hashes with the dependency changes."
}
+13 -13
View File
@@ -1,13 +1,13 @@
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 321b7a2..a1e7b3e 100644
index a1e7b3e..50395ee 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -16,7 +16,7 @@ overrides:
patchedDependencies:
'@agentclientprotocol/[email protected]':
- hash: xjlrz3rllh2ztafbdiywpfh2rq
+ hash: wvw4m3xxjfiu27h5sav6rurgva
- hash: wvw4m3xxjfiu27h5sav6rurgva
+ hash: syoits7l7g3sthy3olttp2fv24
path: patches/@[email protected]
'@agentclientprotocol/[email protected]':
hash: 2iynuypg76nxmydiylgtffhr7e
@@ -15,8 +15,8 @@ index 321b7a2..a1e7b3e 100644
dependencies:
'@agentclientprotocol/claude-agent-acp':
specifier: ^0.73.0
- version: 0.73.0(patch_hash=xjlrz3rllh2ztafbdiywpfh2rq)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
+ version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
- version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
+ version: 0.73.0(patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
'@anthropic-ai/sdk':
specifier: 0.129.0
version: 0.129.0([email protected])
@@ -24,8 +24,8 @@ index 321b7a2..a1e7b3e 100644
dependencies:
'@agentclientprotocol/claude-agent-acp':
specifier: 0.73.0
- version: 0.73.0(patch_hash=xjlrz3rllh2ztafbdiywpfh2rq)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
+ version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
- version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
+ version: 0.73.0(patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
'@agentclientprotocol/codex-acp':
specifier: 1.6.2
version: 1.6.2(patch_hash=2iynuypg76nxmydiylgtffhr7e)
@@ -33,8 +33,8 @@ index 321b7a2..a1e7b3e 100644
version: 0.5.0
'@agentclientprotocol/claude-agent-acp':
specifier: 0.73.0
- version: 0.73.0(patch_hash=xjlrz3rllh2ztafbdiywpfh2rq)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
+ version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
- version: 0.73.0(patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
+ version: 0.73.0(patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))
'@agentclientprotocol/codex-acp':
specifier: 1.6.2
version: 1.6.2(patch_hash=2iynuypg76nxmydiylgtffhr7e)
@@ -42,8 +42,8 @@ index 321b7a2..a1e7b3e 100644
'@adobe/[email protected]': {}
- '@agentclientprotocol/[email protected](patch_hash=xjlrz3rllh2ztafbdiywpfh2rq)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
+ '@agentclientprotocol/[email protected](patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
- '@agentclientprotocol/[email protected](patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
+ '@agentclientprotocol/[email protected](patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
dependencies:
'@agentclientprotocol/sdk': 1.4.0([email protected])
'@anthropic-ai/claude-agent-sdk': 0.3.286(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))([email protected])
@@ -51,8 +51,8 @@ index 321b7a2..a1e7b3e 100644
- '@anthropic-ai/sdk'
- '@modelcontextprotocol/sdk'
- '@agentclientprotocol/[email protected](patch_hash=xjlrz3rllh2ztafbdiywpfh2rq)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
+ '@agentclientprotocol/[email protected](patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
- '@agentclientprotocol/[email protected](patch_hash=wvw4m3xxjfiu27h5sav6rurgva)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
+ '@agentclientprotocol/[email protected](patch_hash=syoits7l7g3sthy3olttp2fv24)(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))':
dependencies:
'@agentclientprotocol/sdk': 1.4.0([email protected])
'@anthropic-ai/claude-agent-sdk': 0.3.286(@anthropic-ai/[email protected]([email protected]))(@modelcontextprotocol/[email protected]([email protected]))([email protected])