chore(ci, pnpm): cascade socket-registry pin to 4c4b12cc + pnpm 11.0.6 + smol/versions export

Cascades the socket-registry workflow SHA pin to 4c4b12cc — the Layer 3
propagation SHA from the SRI integrity migration + pnpm 11.0.6 +
Node 26.0.0 default bump in socket-registry@9246c28b..e50793b3.

Bumps the root packageManager from bare `pnpm@11.0.3` to the
sha512-hashed `pnpm@11.0.6+sha512.<hex>` form per the new
template/CLAUDE.md rule. engines.pnpm follows from `>=11.0.0-rc.0`
to `>=11.0.6`.

Picks up the smol/versions package export entry + the regenerated
docs/api-index.md row that were left dirty in the working tree from
commit 1971bcf (feat(versions, smol): route hot ops through
node:smol-versions). Those should have shipped together but the
build's prepare-time api-index regeneration missed the commit
window.

Author: jdalton

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ concurrency:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@b74ae5083d662df0045731bcf35b4e54b1e03d37 # main
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@4c4b12cc32121314f56e2bc04e92eafa98e01104 # main
     with:
       test-script: 'pnpm exec vitest --config .config/vitest.config.mts run'
 
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b74ae5083d662df0045731bcf35b4e54b1e03d37 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@4c4b12cc32121314f56e2bc04e92eafa98e01104 # main
 
       - name: Build project
         run: pnpm run build

.github/workflows/provenance.yml

@@ -26,7 +26,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@fbfeadaae4087e9dcf35c0d4bd56a96597e492b2 # main
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@4c4b12cc32121314f56e2bc04e92eafa98e01104 # main
     with:
       debug: ${{ inputs.debug }}
       dry-run: ${{ inputs.dry-run }}

.github/workflows/weekly-update.yml

@@ -29,7 +29,7 @@ jobs:
     outputs:
       has-updates: ${{ steps.check.outputs.has-updates }}
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b74ae5083d662df0045731bcf35b4e54b1e03d37 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@4c4b12cc32121314f56e2bc04e92eafa98e01104 # main
 
       - name: Check for npm updates
         id: check
@@ -54,7 +54,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@b74ae5083d662df0045731bcf35b4e54b1e03d37 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@4c4b12cc32121314f56e2bc04e92eafa98e01104 # main
 
       - name: Create update branch
         id: branch
@@ -66,7 +66,7 @@ jobs:
           git checkout -b "$BRANCH_NAME"
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@b74ae5083d662df0045731bcf35b4e54b1e03d37 # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@4c4b12cc32121314f56e2bc04e92eafa98e01104 # main
         with:
           gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
 
@@ -303,7 +303,7 @@ jobs:
             test-output.log
           retention-days: 7
 
-      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@b74ae5083d662df0045731bcf35b4e54b1e03d37 # main
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@4c4b12cc32121314f56e2bc04e92eafa98e01104 # main
         if: always()
 
   notify:

docs/api-index.md

@@ -235,6 +235,7 @@ Each entry links to the source module and shows the first sentence of its `@file
 | ------------------------------------------------------------------ | ------------------------------------------------------------ |
 | [`@socketsecurity/lib/smol/primordial`](../src/smol/primordial.ts) | Lazy-loader for socket-btm's `node:smol-primordial` binding. |
 | [`@socketsecurity/lib/smol/util`](../src/smol/util.ts)             | Smol detection + lazy-loader for `node:smol-util`.           |
+| [`@socketsecurity/lib/smol/versions`](../src/smol/versions.ts)     | Lazy-loader for socket-btm's `node:smol-versions`.           |
 
 ## stdio/
 

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@socketsecurity/lib",
   "version": "5.27.0",
-  "packageManager": "pnpm@11.0.3",
+  "packageManager": "pnpm@11.0.6+sha512.97f906e1da2bedac3df83cadae04b4753a130092dd49d55cd36825ad3e623e9df3f97754f8f259e699172a360fac569acf2f908e7732bdae3eddb2dcf7e121fd",
   "license": "MIT",
   "publishConfig": {
     "access": "public",
@@ -659,6 +659,10 @@
       "types": "./dist/smol/util.d.ts",
       "default": "./dist/smol/util.js"
     },
+    "./smol/versions": {
+      "types": "./dist/smol/versions.d.ts",
+      "default": "./dist/smol/versions.js"
+    },
     "./sorts": {
       "types": "./dist/sorts.d.ts",
       "default": "./dist/sorts.js"
@@ -775,7 +779,7 @@
   ],
   "engines": {
     "node": ">=22",
-    "pnpm": ">=11.0.0-rc.0"
+    "pnpm": ">=11.0.6"
   },
   "sideEffects": false,
   "scripts": {