fix: set YARN_NODE_LINKER=node-modules for yarn dlx commands (#1128)

* fix: set YARN_NODE_LINKER=node-modules for yarn dlx commands

Yarn PnP mode fails when packages have undeclared dependencies
(e.g. @coana-tech/cli accessing @babel/types). Setting the
YARN_NODE_LINKER env var to node-modules forces traditional
node_modules resolution, avoiding PnP strict dependency errors.

* chore: bump version to 1.1.76

Author: barslev

package.json

@@ -1,6 +1,6 @@
 {
   "name": "socket",
-  "version": "1.1.75",
+  "version": "1.1.76",
   "description": "CLI for Socket.dev",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT AND OFL-1.1",

src/utils/dlx.mts

@@ -147,6 +147,16 @@ export async function spawnDlx(
     }
     spawnArgs.push(packageString, ...args)
 
+    // Use node-modules linker instead of PnP to avoid issues with packages
+    // that have undeclared dependencies (e.g. @coana-tech/cli -> @babel/types).
+    finalShadowOptions = {
+      ...finalShadowOptions,
+      env: {
+        ...getOwn(finalShadowOptions, 'env'),
+        YARN_NODE_LINKER: 'node-modules',
+      },
+    }
+
     const shadowYarnBin = /*@__PURE__*/ require(constants.shadowYarnBinPath)
     return await shadowYarnBin(spawnArgs, finalShadowOptions, spawnExtra)
   } else {