chore(ci): bump socket-registry action refs to main (6147a08c)

.github/workflows/binsuite.yml

@@ -131,7 +131,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Setup macOS code signing
         if: matrix.os == 'macos'
@@ -379,7 +379,6 @@ jobs:
           TARGET_ARCH: ${{ matrix.arch }}
           DEBUG: ${{ inputs.debug && '1' || '' }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           echo "🔨 Building binpress for ${PLATFORM}-${ARCH} (${BUILD_MODE} mode)"
 
           # Use build script with --force to bypass checkpoint check
@@ -451,7 +450,6 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Run full functional tests on native x64 platforms (non-Linux).
           # Linux glibc tests run inside Docker to avoid LTO bytecode incompatibility.
           echo "Running functional tests for binpress..."
@@ -468,7 +466,6 @@ jobs:
           ARCH: ${{ matrix.arch }}
           LIBC: ${{ matrix.libc }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Deterministic smoke test: native execution, Docker, QEMU, or static verification
           # All platforms now use PLATFORM_ARCH in build output path.
           if [ "${OS_TYPE}" = "windows" ]; then
@@ -599,7 +596,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Setup macOS code signing
         if: matrix.os == 'macos'
@@ -823,7 +820,6 @@ jobs:
           TARGET_ARCH: ${{ matrix.arch }}
           DEBUG: ${{ inputs.debug && '1' || '' }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           echo "🔨 Building binflate for ${PLATFORM}-${ARCH} (${BUILD_MODE} mode)"
 
           # Use build script with --force to bypass checkpoint check
@@ -884,7 +880,6 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Run full functional tests on native x64 platforms (non-Linux).
           # Linux glibc tests run inside Docker to avoid LTO bytecode incompatibility.
           echo "Running functional tests for binflate..."
@@ -901,7 +896,6 @@ jobs:
           ARCH: ${{ matrix.arch }}
           LIBC: ${{ matrix.libc }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Deterministic smoke test: native execution, Docker, QEMU, or static verification
           # All platforms now use PLATFORM_ARCH in build output path.
           if [ "${OS_TYPE}" = "windows" ]; then
@@ -1032,7 +1026,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Setup macOS code signing
         if: matrix.os == 'macos'
@@ -1301,7 +1295,6 @@ jobs:
           TARGET_ARCH: ${{ matrix.arch }}
           DEBUG: ${{ inputs.debug && '1' || '' }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           echo "🔨 Building binject for ${PLATFORM}-${ARCH} (${BUILD_MODE} mode)"
 
           # Use build script with --force to bypass checkpoint check.
@@ -1364,7 +1357,6 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Run full functional tests on native x64 platforms (non-Linux).
           # Linux glibc tests run inside Docker to avoid LTO bytecode incompatibility.
           echo "Running functional tests for binject..."
@@ -1381,7 +1373,6 @@ jobs:
           ARCH: ${{ matrix.arch }}
           LIBC: ${{ matrix.libc }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Deterministic smoke test: native execution, Docker, QEMU, or static verification
           # All platforms now use PLATFORM_ARCH in build output path.
           if [ "${OS_TYPE}" = "windows" ]; then

.github/workflows/ci.yml

@@ -37,12 +37,11 @@ jobs:
     name: Lint, Type, Validation
     runs-on: ubuntu-latest
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Lint checks
         shell: bash
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           pnpm run check
 
       - name: Validate cache-versions.json
@@ -76,13 +75,11 @@ jobs:
       - name: Validate checkpoint alignment
         shell: bash
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           node scripts/validate-checkpoint-alignment.mjs
 
       - name: Run build-infra tests
         shell: bash
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           pnpm run test:build-infra
 
   # Platform-specific tests run on all platforms
@@ -95,7 +92,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       # Platform-specific tests go here
       # Package-specific build/test workflows:
@@ -106,5 +103,4 @@ jobs:
       - name: Verify pnpm install works
         shell: bash
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           pnpm ls --depth=0

.github/workflows/curl.yml

@@ -139,7 +139,7 @@ jobs:
           node-version-file: .node-version
           cache: ''
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Initialize curl submodule
         shell: bash
@@ -305,7 +305,6 @@ jobs:
           TARGET_ARCH: ${{ matrix.arch }}
           CROSS_COMPILE: ${{ matrix.cross_compile && '1' || '' }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           cd packages/curl-builder
           node scripts/build.mjs
 

.github/workflows/ink.yml

@@ -89,7 +89,7 @@ jobs:
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         # Note: version is specified in package.json packageManager field, not here
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Setup Depot CLI
         uses: depot/setup-action@15c09a5f77a0840ad4bce955686522a257853461 # v1.7.1
@@ -203,7 +203,6 @@ jobs:
         if: steps.ink-checkpoint-cache.outputs.cache-hit == 'true'
         shell: bash
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           echo "Cache hit - running local build to restore dist..."
           cd packages/ink-builder
           pnpm run build
@@ -247,7 +246,6 @@ jobs:
       - name: Run tests
         shell: bash
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           cd packages/ink-builder
           pnpm test
 

.github/workflows/iocraft.yml

@@ -147,7 +147,7 @@ jobs:
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         # Note: version is specified in package.json packageManager field, not here
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Setup Rust toolchain
         uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1 (stable)
@@ -277,7 +277,6 @@ jobs:
           # Disable static CRT linking for musl to allow cdylib (dynamic library)
           RUSTFLAGS: ${{ matrix.libc == 'musl' && '-C target-feature=-crt-static' || '' }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Debug: verify cargo is accessible
           echo "Cargo location: $(which cargo)"
           cargo --version

.github/workflows/lief.yml

@@ -137,7 +137,7 @@ jobs:
           node-version-file: .node-version
           cache: ''
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Initialize LIEF submodule
         shell: bash
@@ -266,7 +266,6 @@ jobs:
           BUILD_MODE: ${{ steps.build-mode.outputs.mode }}
         shell: bash
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Use get-checkpoint-chain.mjs for consistency.
           CHAIN=$(node packages/lief-builder/scripts/get-checkpoint-chain.mjs --$BUILD_MODE)
           echo "checkpoint_chain=$CHAIN" >> $GITHUB_OUTPUT
@@ -405,7 +404,6 @@ jobs:
           BUILD_MODE: ${{ steps.build-mode.outputs.mode }}
           TARGET_ARCH: ${{ matrix.arch }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           cd packages/lief-builder
           pnpm run build
 
@@ -431,7 +429,6 @@ jobs:
           BUILD_MODE: ${{ steps.build-mode.outputs.mode }}
           PLATFORM_ARCH: ${{ steps.platform-arch-cache.outputs.platform_arch }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           LIEF_DIR="packages/lief-builder/build/${BUILD_MODE}/${PLATFORM_ARCH}/out/Final/lief"
           node packages/lief-builder/scripts/verify-release.mjs "$LIEF_DIR"
 

.github/workflows/models.yml

@@ -70,7 +70,7 @@ jobs:
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         # Note: version is specified in package.json packageManager field, not here
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Free up disk space
         run: |
@@ -205,7 +205,6 @@ jobs:
         env:
           BUILD_MODE: ${{ steps.build-mode.outputs.mode }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Use get-checkpoint-chain.mjs to ensure consistency with local builds
           CHAIN=$(node packages/models/scripts/get-checkpoint-chain.mjs --$BUILD_MODE)
           echo "checkpoint_chain=$CHAIN" >> $GITHUB_OUTPUT

.github/workflows/node-smol.yml

@@ -211,13 +211,12 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Load tool versions
         id: tool-versions
         shell: bash
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Load Python version constraints from external-tools.json (single source of truth)
           PYTHON_MIN_VERSION=$(node packages/build-infra/scripts/get-tool-version.mjs python minimumVersion)
           PYTHON_MAX_VERSION=$(node packages/build-infra/scripts/get-tool-version.mjs python maximumVersion)
@@ -518,7 +517,6 @@ jobs:
         env:
           BUILD_MODE: ${{ steps.smol-cache-key.outputs.build_mode }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Get checkpoint chain from build script (single source of truth)
           CHAIN=$(node packages/node-smol-builder/scripts/get-checkpoint-chain.mjs --$BUILD_MODE)
           echo "checkpoint_chain=$CHAIN" >> $GITHUB_OUTPUT
@@ -638,7 +636,6 @@ jobs:
           PLATFORM_ARCH: ${{ steps.platform-arch.outputs.platform_arch }}
           GITHUB_TOKEN: ${{ github.token }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Cross-platform timestamp function (GNU date/BusyBox fallback)
           get_timestamp() {
             date +%s 2>/dev/null || python3 -c 'import time; print(int(time.time()))'
@@ -703,7 +700,6 @@ jobs:
           BUILD_JOBS: ${{ steps.build-parallelism.outputs.jobs }}
           GITHUB_TOKEN: ${{ github.token }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Cross-platform timestamp function (GNU date/BusyBox fallback)
           get_timestamp() {
             date +%s 2>/dev/null || python3 -c 'import time; print(int(time.time()))'
@@ -790,7 +786,6 @@ jobs:
           BUILD_MODE: ${{ steps.smol-cache-key.outputs.build_mode }}
           PLATFORM_ARCH: ${{ steps.platform-arch.outputs.platform_arch }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           BUILD_MODE="${BUILD_MODE:-prod}"
           FINAL_DIR="packages/node-smol-builder/build/${BUILD_MODE}/${PLATFORM_ARCH}/out/Final"
 

.github/workflows/onnxruntime.yml

@@ -102,7 +102,7 @@ jobs:
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
         # Note: version is specified in package.json packageManager field, not here
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Load cache version from centralized config
         id: cache-version
@@ -212,7 +212,6 @@ jobs:
         env:
           BUILD_MODE: ${{ steps.build-mode.outputs.mode }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Use get-checkpoint-chain.mjs to ensure consistency with local builds
           # Dev mode: skip wasm-optimized (optimization is disabled)
           # Prod mode: include wasm-optimized

.github/workflows/opentui.yml

@@ -147,7 +147,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
 
       - name: Setup Zig
         uses: goto-bus-stop/setup-zig@abea47f85e598557f500fa1fd2ab7464f5f5e2d0 # v2
@@ -261,7 +261,6 @@ jobs:
           TARGET_ARCH: ${{ matrix.arch }}
           LIBC: ${{ matrix.libc }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           echo "Zig location: $(which zig)"
           zig version
 

.github/workflows/stubs.yml

@@ -217,7 +217,7 @@ jobs:
           node-version-file: .node-version
           cache: ''
 
-      - uses: SocketDev/socket-registry/.github/actions/install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/install@6147a08ccc20fcb1f690dcc4650ec745776b3345 # main
         if: matrix.os != 'linux'
 
       - name: Setup build environment (macOS)
@@ -254,7 +254,6 @@ jobs:
           DEBUG: ${{ inputs.debug && '1' || '' }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          alias pnpm="$SFW_BIN pnpm"
           # Build script handles curl dependency download and stub compilation.
           node scripts/build.mjs