Updates pnpm to 10.29.2 and @socketsecurity/lib to 5.6.0. Configures .gitignore to track .claude/skills/ and .claude/commands/ while ignoring other scratch files. Refactors update script to always update Socket packages regardless of apply flag.

Author: jdalton

.gitignore

@@ -17,6 +17,11 @@ WIP
 .local.*
 .node-version
 
+# Claude Code scratch files
+/.claude/*
+!/.claude/skills/
+!/.claude/commands/
+
 # Environment files
 /.env
 /.env.local

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@socketregistry/monorepo",
   "version": "1.0.0",
-  "packageManager": "pnpm@10.28.1",
+  "packageManager": "pnpm@10.29.2",
   "private": true,
   "license": "MIT",
   "description": "Monorepo for Socket.dev optimized package overrides",

pnpm-lock.yaml

@@ -22,7 +22,7 @@ catalog:
   '@npmcli/package-json': 7.0.0
   '@npmcli/promise-spawn': 8.0.3
   '@socketregistry/packageurl-js': 1.3.5
-  '@socketsecurity/lib': 5.5.3
+  '@socketsecurity/lib': 5.6.0
   '@types/fs-extra': 11.0.4
   '@types/node': 24.9.2
   '@types/normalize-package-data': 2.4.4

pnpm-workspace.yaml

@@ -49,40 +49,38 @@ async function main() {
       process.stdout.write('\r\x1b[K')
     }
 
-    // Always update Socket packages when applying (bypass taze maturity period).
-    if (apply) {
-      if (!quiet) {
-        logger.progress('Updating Socket packages...')
-      }
+    // Always update Socket packages (bypass taze maturity period).
+    if (!quiet) {
+      logger.progress('Updating Socket packages...')
+    }
 
-      const socketResult = await spawn(
-        'pnpm',
-        [
-          'update',
-          '@socketsecurity/*',
-          '@socketregistry/*',
-          '@socketbin/*',
-          '--latest',
-          '-r',
-        ],
-        {
-          shell: WIN32,
-          stdio: quiet ? 'pipe' : 'inherit',
-        },
-      )
+    const socketResult = await spawn(
+      'pnpm',
+      [
+        'update',
+        '@socketsecurity/*',
+        '@socketregistry/*',
+        '@socketbin/*',
+        '--latest',
+        '-r',
+      ],
+      {
+        shell: WIN32,
+        stdio: quiet ? 'pipe' : 'inherit',
+      },
+    )
 
-      // Clear progress line.
-      if (!quiet) {
-        process.stdout.write('\r\x1b[K')
-      }
+    // Clear progress line.
+    if (!quiet) {
+      process.stdout.write('\r\x1b[K')
+    }
 
-      if (socketResult.code !== 0) {
-        if (!quiet) {
-          logger.fail('Failed to update Socket packages')
-        }
-        process.exitCode = 1
-        return
+    if (socketResult.code !== 0) {
+      if (!quiet) {
+        logger.fail('Failed to update Socket packages')
       }
+      process.exitCode = 1
+      return
     }
 
     if (result.code !== 0) {